Known vulnerabilities in HFS

Vendor: rejetto
Software: HFS
Software CPE: cpe:2.3:a:rejetto:hfs:*:*:*:*:*:*:*:*
Total vulnerabilities: 9
Public exploits: 2
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting HFS HFS is affected by 9 known vulnerabilities: 1 critical, 6 medium, 2 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153314 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2026-61500
CWE-338 Medium
No
No
3.2.1 06.10.2026 SB2026100630
#VU153315 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-61501
CWE-79 Medium
No
No
3.2.1 06.10.2026 SB2026100630
#VU153316 - Cross-Site Request Forgery (CSRF)
CVE-2026-61502
CWE-352 Medium
No
No
3.2.1 06.10.2026 SB2026100630
#VU153317 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-61505
CWE-22 Medium
No
No
3.2.1 06.10.2026 SB2026100630
#VU153318 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-61504
CWE-79 Low
No
No
3.2.1 06.10.2026 SB2026100630
#VU153319 - Protection Mechanism Failure
CVE-2026-61503
CWE-693 Low
No
No
3.2.1 06.10.2026 SB2026100630
#VU127491 - Use of Web Link to Untrusted Target with window.opener Access
CWE-1022 Medium
No
No
0.57.10 24.04.2026 SB2026042467
#VU144368 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-39943
CWE-78 Medium
Available
No
0.52.10 08.07.2024 SB20240708108
#VU93817 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-23692
CWE-94 Critical
Available
Exploited
- 05.07.2024 SB2024070528