Known vulnerabilities in NukeViet 4.5.07

Vendor: NukeViet
Software: NukeViet
Version: 4.5.07
Software CPE: cpe:2.3:a:nukeviet:nukeviet:*:*:*:*:*:*:*:*
Total vulnerabilities: 21
Public exploits: 3
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting NukeViet version 4.5.07 NukeViet 4.5.07 is affected by 21 vulnerabilities: 1 high, 5 medium, 15 low Critical High Medium Low

Vulnerabilities (21)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153180 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 Low
No
No
4.6.02 02.10.2026 SB2026100233
#VU153179 - Incomplete List of Disallowed Inputs
CWE-184 Low
No
No
4.6.02 02.10.2026 SB2026100233
#VU153178 - Cross-Site Request Forgery (CSRF)
CWE-352 Medium
No
No
4.6.02 02.10.2026 SB2026100233
#VU153177 - Interpretation Conflict
CVE-2026-94567
CWE-436 High
No
No
4.6.02 02.10.2026 SB2026100233
#VU153176 - Unrestricted Upload of File with Dangerous Type
CVE-2026-94597
CWE-434 Low
No
No
4.6.02 02.10.2026 SB2026100233
#VU153174 - Double Decoding of the Same Data
CVE-2026-94599
CWE-174 Medium
No
No
4.5.13, 4.6.02 02.10.2026 SB2026100233
#VU146419 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Low
Public exploit available
No
4.6.01 31.08.2026 SB2026083162
#VU146417 - Improper Control of Generation of Code ('Code Injection')
CWE-94 Low
No
No
4.6.01 31.08.2026 SB2026083162
#VU146391 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
Public exploit available
No
4.6.01 31.08.2026 SB2026083162
#VU146377 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
Public exploit available
No
4.6.01 31.08.2026 SB2026083162
#VU139340 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-41147
CWE-79 Low
No
No
4.5.08 24.07.2026 SB2026072469
#VU139339 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Low
No
No
4.5.09 24.07.2026 SB2026072468
#VU139338 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48118
CWE-79 Medium
No
No
4.5.09 24.07.2026 SB2026072468
#VU139336 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
4.5.09 24.07.2026 SB2026072468
#VU139337 - Improper Restriction of XML External Entity Reference ('XXE')
CWE-611 Low
No
No
4.5.09 24.07.2026 SB2026072468
#VU139335 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-49259
CWE-79 Low
No
No
4.5.09 24.07.2026 SB2026072468
#VU139334 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-54064
CWE-79 Low
No
No
4.5.09 24.07.2026 SB2026072468
#VU139333 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-54065
CWE-22 Low
No
No
4.5.09 24.07.2026 SB2026072468
#VU139332 - Server-Side Request Forgery (SSRF)
CVE-2026-55372
CWE-918 Medium
No
No
4.5.09 24.07.2026 SB2026072468
#VU139331 - Deserialization of Untrusted Data
CVE-2026-61832
CWE-502 Medium
No
No
4.6.00 24.07.2026 SB2026072467


Showing elements 1 - 20 out of 21