Approved changes feed: RSS · Atom
cpe:2.3:a:q-free:maxtime:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Q Free (fd476520-4214-5be2-b268-74e1523ef9d7) |
|---|---|
| Product | Maxtime (4c74fecc-348a-5f63-913e-3e504cf135a8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-26378 |
vulnerable | 2026-06-08 07:12:51.561833 |
Details available
HIGH (8.8)
A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to reset passwords, including the ones of administrator accounts, via crafted HTTP requests.
Published: 2025-02-12T13:30:48.254Z
Updated: 2025-02-17T10:11:59.545Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26377 |
vulnerable | 2026-06-08 07:12:51.561466 |
Details available
HIGH (8.1)
A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to remove users via crafted HTTP requests.
Published: 2025-02-12T13:30:42.982Z
Updated: 2025-02-17T10:11:53.868Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26376 |
vulnerable | 2026-06-08 07:12:51.561130 |
Details available
MEDIUM (6.5)
A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to modify user data via crafted HTTP requests.
Published: 2025-02-12T13:30:37.368Z
Updated: 2025-02-17T10:11:47.419Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26375 |
vulnerable | 2026-06-08 07:12:51.560879 |
Details available
HIGH (8.8)
A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to create users with arbitrary privileges via crafted HTTP requests.
Published: 2025-02-12T13:30:31.754Z
Updated: 2025-02-17T10:11:41.973Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26374 |
vulnerable | 2026-06-08 07:12:51.560470 |
Details available
MEDIUM (6.5)
A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua (users endpoint) in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to enumerate users via crafted HTTP requests.
Published: 2025-02-12T13:30:26.260Z
Updated: 2025-02-17T10:11:24.851Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26373 |
vulnerable | 2026-06-08 07:12:51.560083 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26372 |
vulnerable | 2026-06-08 07:12:51.559848 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26371 |
vulnerable | 2026-06-08 07:12:51.559607 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26370 |
vulnerable | 2026-06-08 07:12:51.559358 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26369 |
vulnerable | 2026-06-08 07:12:51.559109 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26368 |
vulnerable | 2026-06-08 07:12:51.558764 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26367 |
vulnerable | 2026-06-08 07:12:51.558508 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26366 |
vulnerable | 2026-06-08 07:12:51.558166 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26365 |
vulnerable | 2026-06-08 07:12:51.557826 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26364 |
vulnerable | 2026-06-08 07:12:51.557566 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26363 |
vulnerable | 2026-06-08 07:12:51.557245 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26362 |
vulnerable | 2026-06-08 07:12:51.556987 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26361 |
vulnerable | 2026-06-08 07:12:51.556646 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26360 |
vulnerable | 2026-06-08 07:12:51.556379 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26359 |
vulnerable | 2026-06-08 07:12:51.555998 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26358 |
vulnerable | 2026-06-08 07:12:51.555676 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26357 |
vulnerable | 2026-06-08 07:12:51.555443 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26356 |
vulnerable | 2026-06-08 07:12:51.555211 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26355 |
vulnerable | 2026-06-08 07:12:51.554868 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26354 |
vulnerable | 2026-06-08 07:12:51.554510 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26353 |
vulnerable | 2026-06-08 07:12:51.554142 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26352 |
vulnerable | 2026-06-08 07:12:51.553907 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26351 |
vulnerable | 2026-06-08 07:12:51.553670 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26350 |
vulnerable | 2026-06-08 07:12:51.553428 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26349 |
vulnerable | 2026-06-08 07:12:51.553182 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26348 |
vulnerable | 2026-06-08 07:12:51.552834 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26347 |
vulnerable | 2026-06-08 07:12:51.552497 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26346 |
vulnerable | 2026-06-08 07:12:51.552123 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26345 |
vulnerable | 2026-06-08 07:12:51.551867 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26344 |
vulnerable | 2026-06-08 07:12:51.551623 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26343 |
vulnerable | 2026-06-08 07:12:51.551378 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26342 |
vulnerable | 2026-06-08 07:12:51.551109 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26341 |
vulnerable | 2026-06-08 07:12:51.550736 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26340 |
vulnerable | 2026-06-08 07:12:51.550461 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26339 |
vulnerable | 2026-06-08 07:12:51.550117 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1102 |
vulnerable | 2026-06-08 07:06:36.917983 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1101 |
vulnerable | 2026-06-08 07:06:36.917545 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1100 |
vulnerable | 2026-06-08 07:06:36.917106 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.