Known vulnerabilities in NukeViet

Vendor: NukeViet
Software: NukeViet
Software CPE: cpe:2.3:a:nukeviet:nukeviet:*:*:*:*:*:*:*:*
Total vulnerabilities: 27
Public exploits: 3
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting NukeViet NukeViet is affected by 27 known vulnerabilities: 1 high, 8 medium, 18 low Critical High Medium Low

Vulnerabilities (27)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153180 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 Low
No
No
4.6.02 02.10.2026 SB2026100233
#VU153179 - Incomplete List of Disallowed Inputs
CWE-184 Low
No
No
4.6.02 02.10.2026 SB2026100233
#VU153178 - Cross-Site Request Forgery (CSRF)
CWE-352 Medium
No
No
4.6.02 02.10.2026 SB2026100233
#VU153177 - Interpretation Conflict
CVE-2026-94567
CWE-436 High
No
No
4.6.02 02.10.2026 SB2026100233
#VU153176 - Unrestricted Upload of File with Dangerous Type
CVE-2026-94597
CWE-434 Low
No
No
4.6.02 02.10.2026 SB2026100233
#VU153175 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-94598
CWE-79 Medium
No
No
4.6.02 02.10.2026 SB2026100233
#VU153174 - Double Decoding of the Same Data
CVE-2026-94599
CWE-174 Medium
No
No
4.5.13, 4.6.02 02.10.2026 SB2026100233
#VU153173 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
4.5.14, 4.6.03 02.10.2026 SB2026100237
#VU146420 - Server-Side Request Forgery (SSRF)
CWE-918 Medium
No
No
4.6.01 31.08.2026 SB2026083162
#VU146419 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Low
Available
No
4.6.01 31.08.2026 SB2026083162
#VU146418 - Improper Restriction of Excessive Authentication Attempts
CWE-307 Medium
No
No
4.6.01 31.08.2026 SB2026083162
#VU146417 - Improper Control of Generation of Code ('Code Injection')
CWE-94 Low
No
No
4.6.01 31.08.2026 SB2026083162
#VU146391 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
Available
No
4.6.01 31.08.2026 SB2026083162
#VU146377 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
Available
No
4.6.01 31.08.2026 SB2026083162
#VU139340 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-41147
CWE-79 Low
No
No
4.5.08 24.07.2026 SB2026072469
#VU139339 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Low
No
No
4.5.09 24.07.2026 SB2026072468
#VU139338 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48118
CWE-79 Medium
No
No
4.5.09 24.07.2026 SB2026072468
#VU139335 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-49259
CWE-79 Low
No
No
4.5.09 24.07.2026 SB2026072468
#VU139333 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-54065
CWE-22 Low
No
No
4.5.09 24.07.2026 SB2026072468
#VU139332 - Server-Side Request Forgery (SSRF)
CVE-2026-55372
CWE-918 Medium
No
No
4.5.09 24.07.2026 SB2026072468


Showing elements 1 - 20 out of 27