CVE Program partner

PRJBLK

Project Black

API
CVEs, 365 days1414 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationProject Black
RoleCNA
TypeResearcher
Reports tomitre
ScopeVulnerabilities discovered by Project Black that are not within another CNA’s scope.
Advisorieshttps://projectblack.io/blog/tag/advisory/

Latest CVEs · RSS

  • CVE-2026-80214 2026-08-26 · CVSS 8.6
    LibreNMS’s Virtualization Discovery module is vulnerable to command line injection. An authenticated admin user can execute arbitrary code on the host server.
  • CVE-2026-16007 2026-08-15 · CVSS 7.1
    AppFlowy's qcuiknote feature is affected by a SQL injection vulnerability. Authenticated users with access to the feature can inject arbitrary SQL to exfiltrate
  • CVE-2026-12196 2026-07-04 · CVSS 8.3
    HestiaCP panel cronjob feature is affected by a broken access control vulnerability. Low privilege users can modify the panel cronjob to execute scripts HestiaC
  • CVE-2026-12195 2026-07-04 · CVSS 8.5
    myVesta is affected by an authenticated remote code execution vulnerability. Low privileged users can insert arbitrary commands as a part of the v_ftp_user para
  • CVE-2026-12194 2026-07-04 · CVSS 2.3
    PHPIPAM is affected by an authenticated local file inclusion vulnerability that allows users with access to the API to execute/include arbitrary PHP files on th
  • CVE-2026-12673 2026-06-20 · CVSS 5.9
    Liquidfiles versions before 4.2.12 are affected by a broken access control vulnerability resulting in privilege escalation from an Admin in a secondary domain t
  • CVE-2026-8209 2026-05-09 · CVSS 6.9
    Gibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS by attempting extraction of web application PHP files, failed .z
  • CVE-2026-8208 2026-05-09 · CVSS 8.9
    Gibbon versions before v30.0.01 are affected by a local file inclusion vulnerability resulting in RCE by changing the report archive directory and forcing inter
  • CVE-2026-8207 2026-05-09 · CVSS 7.0
    Gibbon versions before v30.0.01 are affected by an authenticated SQL Injection vulnerability by abusing the Tracking/graphing https://github.com/GibbonEdu/core
  • CVE-2026-6204 2026-04-13 · CVSS 8.5
    LibreNMS versions before 26.3.0 are affected by an authenticated remote code execution vulnerability by abusing the Binary Locations config and the Netcommand f
  • CVE-2026-2728 2026-04-13 · CVSS 4.6
    LibreNMS versions before 26.3.0 are affected by an authenticated Cross-site Scripting vulnerability on the showconfig page. Successful exploitation requires adm
  • CVE-2025-15586 2026-02-19 · CVSS 10.0
    OGP-Website installs prior git commit 52f865a4fba763594453068acf8fa9e3fc38d663 are affected by a type juggling flaw which if exploited can result in authenticat
  • CVE-2025-15585 2026-02-18 · CVSS 6.7
    Fileflows versions before 25.05.2 are affected by an authenticated SQL injection vulnerability in the library-file search function. Successful exploitation requ
  • CVE-2025-15581 2026-02-18 · CVSS 4.7
    Orthanc versions before 1.12.10 are affected by an authorisation logic flaw in the application's HTTP Basic Authentication implementation. Successful exploita

All CVE Program partners