Skip to contentQ-free Maxtime vulnerabilities
- q-free maxtimeA CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or...CVE-2025-263788.8 High
- q-free maxtimeA CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or...CVE-2025-263778.1 High
- q-free maxtimeA CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or...CVE-2025-263766.5 Medium
- q-free maxtimeA CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or...CVE-2025-263758.8 High
- q-free maxtimeA CWE-862 "Missing Authorization" in maxprofile/users/routes.lua (users endpoint) in Q-Free...CVE-2025-263746.5 Medium
- q-free maxtimeA CWE-862 "Missing Authorization" in maxprofile/users/routes.lua (user endpoint) in Q-Free...CVE-2025-263736.5 Medium
- q-free maxtimeA CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less...CVE-2025-263727.1 High
- q-free maxtimeA CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less...CVE-2025-263718.8 High
- q-free maxtimeA CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less...CVE-2025-263707.1 High
- q-free maxtimeA CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less...CVE-2025-263698.8 High
- q-free maxtimeA CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less...CVE-2025-263688.1 High
- q-free maxtimeA CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less...CVE-2025-263674.3 Medium
- q-free maxtimeA CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free...CVE-2025-263667.5 High
- q-free maxtimeA CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free...CVE-2025-263657.5 High
- q-free maxtimeA CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free...CVE-2025-263647.5 High
- q-free maxtimeA CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free...CVE-2025-263637.5 High
- q-free maxtimeA CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free...CVE-2025-263627.5 High
- q-free maxtimeA CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free...CVE-2025-263619.1 Critical
- q-free maxtimeA CWE-306 "Missing Authentication for Critical Function" in maxprofile/persistance/routes.lua in...CVE-2025-263605.3 Medium
- q-free maxtimeA CWE-306 "Missing Authentication for Critical Function" in maxprofile/accounts/routes.lua in Q...CVE-2025-263599.8 Critical
- q-free maxtimeA CWE-20 "Improper Input Validation" in ldbMT.so in Q-Free MaxTime less than or equal to version...CVE-2025-263585.5 Medium
- q-free maxtimeA CWE-35 "Path Traversal" in maxtime/api/database/database.lua in Q-Free MaxTime less than or...CVE-2025-263574.9 Medium
- q-free maxtimeA CWE-35 "Path Traversal" in maxtime/api/database/database.lua (setActive endpoint) in Q-Free...CVE-2025-263567.2 High
- q-free maxtimeA CWE-35 "Path Traversal" in maxtime/api/database/database.lua in Q-Free MaxTime less than or...CVE-2025-263556.5 Medium
- q-free maxtimeA CWE-35 "Path Traversal" in maxtime/api/database/database.lua (copy endpoint) in Q-Free MaxTime...CVE-2025-263547.2 High
- q-free maxtimeA CWE-35 "Path Traversal" in maxtime/api/sql/sql.lua in Q-Free MaxTime less than or equal to...CVE-2025-263534.9 Medium
- q-free maxtimeA CWE-35 "Path Traversal" in the template deletion mechanism in Q-Free MaxTime less than or equal...CVE-2025-263526.5 Medium
- q-free maxtimeA CWE-35 "Path Traversal" in the template download mechanism in Q-Free MaxTime less than or equal...CVE-2025-263514.9 Medium
- q-free maxtimeA CWE-434 "Unrestricted Upload of File with Dangerous Type" in the template file uploads in Q...CVE-2025-263504.9 Medium
- q-free maxtimeA CWE-23 "Relative Path Traversal" in the file upload mechanism in Q-Free MaxTime less than or...CVE-2025-263497.2 High
- q-free maxtimeA CWE-89 "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"...CVE-2025-263485.5 Medium
- q-free maxtimeA CWE-306 "Missing Authentication for Critical Function" in maxprofile/menu/routes.lua in Q-Free...CVE-2025-263479.8 Critical
- q-free maxtimeA CWE-89 "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"...CVE-2025-263465.5 Medium
- q-free maxtimeA CWE-306 "Missing Authentication for Critical Function" in maxprofile/menu/routes.lua in Q-Free...CVE-2025-263459.8 Critical
- q-free maxtimeA CWE-306 "Missing Authentication for Critical Function" in maxprofile/guest-mode/routes.lua in Q...CVE-2025-263449.8 Critical
- q-free maxtimeA CWE-1390 "Weak Authentication" in the PIN authentication mechanism in Q-Free MaxTime less than...CVE-2025-263438.1 High
- q-free maxtimeA CWE-306 "Missing Authentication for Critical Function" in maxprofile/accounts/routes.lua in Q...CVE-2025-263429.8 Critical
- q-free maxtimeA CWE-306 "Missing Authentication for Critical Function" in maxprofile/accounts/routes.lua in Q...CVE-2025-263419.8 Critical
- q-free maxtimeA CWE-321 "Use of Hard-coded Cryptographic Key" in the JWT signing in Q-Free MaxTime less than or...CVE-2025-263408.8 High
- q-free maxtimeA CWE-306 "Missing Authentication for Critical Function" in maxtime/handleRoute.lua in Q-Free...CVE-2025-263399.8 Critical
- q-free maxtimeA CWE-346 "Origin Validation Error" in the CORS configuration in Q-Free MaxTime less than or...CVE-2025-11025.5 Medium
- q-free maxtimeA CWE-204 "Observable Response Discrepancy" in the login page in Q-Free MaxTime less than or...CVE-2025-11015.3 Medium
- q-free maxtimeA CWE-259 "Use of Hard-coded Password" for the root account in Q-Free MaxTime less than or equal...CVE-2025-11009.8 Critical