Vendors / kalcaddle Records 44 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 8
CVSS high 5
Exploited now kalcaddle records in CISA KEV No kalcaddle vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 63
An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature in the password reset function.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00276 · Published 2024-11-15 · No fix listed CWE-346
Priority MEDIUM 57
A vulnerability was detected in kalcaddle kodbox up to 1.61.10.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.05471 · Published 2026-01-17 · No fix listed CWE-74
Priority MEDIUM 56
A vulnerability was found in kalcaddle kodbox 1.61.
CVSS 4.0 MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00313 · Published 2025-08-25 · No fix listed CWE-918
Priority MEDIUM 51
kodbox 1.46.01 has a security flaw that enables user enumeration.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0111 · Published 2023-11-17 · No fix listed CWE-307
Priority MEDIUM 50
An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00561 · Published 2024-01-16 · No fix listed
Priority MEDIUM 50
A vulnerability was found in kalcaddle kodbox up to 1.48.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00886 · Published 2023-12-16 · No fix listed CWE-918
Priority MEDIUM 47
A vulnerability was found in kalcaddle kodbox up to 1.48.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02347 · Published 2023-12-16 · No fix listed CWE-77
Priority MEDIUM 44
A vulnerability was found in kodbox 1.26.
CVSS 3.1 HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.06374 · Published 2023-07-10 · No fix listed CWE-78
Priority MEDIUM 40
kodbox 1.2.x through 1.3.7 has a Sensitive Information Leakage issue.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0056 · Published 2023-05-12 · No fix listed CWE-426
Priority LOW 27
kodbox v1.43 was discovered to contain a cross-site scripting (XSS) vulnerability via the operation and login logs.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00308 · Published 2024-01-16 · No fix listed CWE-79
Priority LOW 27
kodbox <= 1.37 is vulnerable to Cross Site Scripting (XSS) via the debug information.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00353 · Published 2023-05-11 · No fix listed CWE-79
Priority LOW 24
A security vulnerability has been detected in kalcaddle kodbox 1.61.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00455 · Published 2025-09-10 · No fix listed CWE-22
Priority LOW 24
kodbox v1.49.04 was discovered to contain a cross-site scripting (XSS) vulnerability via the URL parameter.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00292 · Published 2024-01-17 · No fix listed CWE-79
Priority LOW 24
kodbox 1.44 is vulnerable to Cross Site Scripting (XSS).
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00365 · Published 2023-10-23 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
8 5 30 1 0
THREATIST.IORead the docs