Q-free vulnerabilities

Products

• Maxtime 43

Newest

• q-free maxtime A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or... CVE-2025-26378 8.8 HighFebruary 12, 2025
• q-free maxtime A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or... CVE-2025-26377 8.1 HighFebruary 12, 2025
• q-free maxtime A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or... CVE-2025-26376 6.5 MediumFebruary 12, 2025
• q-free maxtime A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or... CVE-2025-26375 8.8 HighFebruary 12, 2025
• q-free maxtime A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua (users endpoint) in Q-Free... CVE-2025-26374 6.5 MediumFebruary 12, 2025
• q-free maxtime A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua (user endpoint) in Q-Free... CVE-2025-26373 6.5 MediumFebruary 12, 2025
• q-free maxtime A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less... CVE-2025-26372 7.1 HighFebruary 12, 2025
• q-free maxtime A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less... CVE-2025-26371 8.8 HighFebruary 12, 2025
• q-free maxtime A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less... CVE-2025-26370 7.1 HighFebruary 12, 2025
• q-free maxtime A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less... CVE-2025-26369 8.8 HighFebruary 12, 2025
• q-free maxtime A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less... CVE-2025-26368 8.1 HighFebruary 12, 2025
• q-free maxtime A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less... CVE-2025-26367 4.3 MediumFebruary 12, 2025
• q-free maxtime A CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free... CVE-2025-26366 7.5 HighFebruary 12, 2025
• q-free maxtime A CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free... CVE-2025-26365 7.5 HighFebruary 12, 2025
• q-free maxtime A CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free... CVE-2025-26364 7.5 HighFebruary 12, 2025
• q-free maxtime A CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free... CVE-2025-26363 7.5 HighFebruary 12, 2025
• q-free maxtime A CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free... CVE-2025-26362 7.5 HighFebruary 12, 2025
• q-free maxtime A CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free... CVE-2025-26361 9.1 CriticalFebruary 12, 2025
• q-free maxtime A CWE-306 "Missing Authentication for Critical Function" in maxprofile/persistance/routes.lua in... CVE-2025-26360 5.3 MediumFebruary 12, 2025
• q-free maxtime A CWE-306 "Missing Authentication for Critical Function" in maxprofile/accounts/routes.lua in Q... CVE-2025-26359 9.8 CriticalFebruary 12, 2025
• q-free maxtime A CWE-20 "Improper Input Validation" in ldbMT.so in Q-Free MaxTime less than or equal to version... CVE-2025-26358 5.5 MediumFebruary 12, 2025
• q-free maxtime A CWE-35 "Path Traversal" in maxtime/api/database/database.lua in Q-Free MaxTime less than or... CVE-2025-26357 4.9 MediumFebruary 12, 2025
• q-free maxtime A CWE-35 "Path Traversal" in maxtime/api/database/database.lua (setActive endpoint) in Q-Free... CVE-2025-26356 7.2 HighFebruary 12, 2025
• q-free maxtime A CWE-35 "Path Traversal" in maxtime/api/database/database.lua in Q-Free MaxTime less than or... CVE-2025-26355 6.5 MediumFebruary 12, 2025
• q-free maxtime A CWE-35 "Path Traversal" in maxtime/api/database/database.lua (copy endpoint) in Q-Free MaxTime... CVE-2025-26354 7.2 HighFebruary 12, 2025
• q-free maxtime A CWE-35 "Path Traversal" in maxtime/api/sql/sql.lua in Q-Free MaxTime less than or equal to... CVE-2025-26353 4.9 MediumFebruary 12, 2025
• q-free maxtime A CWE-35 "Path Traversal" in the template deletion mechanism in Q-Free MaxTime less than or equal... CVE-2025-26352 6.5 MediumFebruary 12, 2025
• q-free maxtime A CWE-35 "Path Traversal" in the template download mechanism in Q-Free MaxTime less than or equal... CVE-2025-26351 4.9 MediumFebruary 12, 2025
• q-free maxtime A CWE-434 "Unrestricted Upload of File with Dangerous Type" in the template file uploads in Q... CVE-2025-26350 4.9 MediumFebruary 12, 2025
• q-free maxtime A CWE-23 "Relative Path Traversal" in the file upload mechanism in Q-Free MaxTime less than or... CVE-2025-26349 7.2 HighFebruary 12, 2025
• q-free maxtime A CWE-89 "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"... CVE-2025-26348 5.5 MediumFebruary 12, 2025
• q-free maxtime A CWE-306 "Missing Authentication for Critical Function" in maxprofile/menu/routes.lua in Q-Free... CVE-2025-26347 9.8 CriticalFebruary 12, 2025
• q-free maxtime A CWE-89 "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"... CVE-2025-26346 5.5 MediumFebruary 12, 2025
• q-free maxtime A CWE-306 "Missing Authentication for Critical Function" in maxprofile/menu/routes.lua in Q-Free... CVE-2025-26345 9.8 CriticalFebruary 12, 2025
• q-free maxtime A CWE-306 "Missing Authentication for Critical Function" in maxprofile/guest-mode/routes.lua in Q... CVE-2025-26344 9.8 CriticalFebruary 12, 2025
• q-free maxtime A CWE-1390 "Weak Authentication" in the PIN authentication mechanism in Q-Free MaxTime less than... CVE-2025-26343 8.1 HighFebruary 12, 2025
• q-free maxtime A CWE-306 "Missing Authentication for Critical Function" in maxprofile/accounts/routes.lua in Q... CVE-2025-26342 9.8 CriticalFebruary 12, 2025
• q-free maxtime A CWE-306 "Missing Authentication for Critical Function" in maxprofile/accounts/routes.lua in Q... CVE-2025-26341 9.8 CriticalFebruary 12, 2025
• q-free maxtime A CWE-321 "Use of Hard-coded Cryptographic Key" in the JWT signing in Q-Free MaxTime less than or... CVE-2025-26340 8.8 HighFebruary 12, 2025
• q-free maxtime A CWE-306 "Missing Authentication for Critical Function" in maxtime/handleRoute.lua in Q-Free... CVE-2025-26339 9.8 CriticalFebruary 12, 2025
• q-free maxtime A CWE-346 "Origin Validation Error" in the CORS configuration in Q-Free MaxTime less than or... CVE-2025-1102 5.5 MediumFebruary 12, 2025
• q-free maxtime A CWE-204 "Observable Response Discrepancy" in the login page in Q-Free MaxTime less than or... CVE-2025-1101 5.3 MediumFebruary 12, 2025
• q-free maxtime A CWE-259 "Use of Hard-coded Password" for the root account in Q-Free MaxTime less than or equal... CVE-2025-1100 9.8 CriticalFebruary 12, 2025