Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
16 results
Mar 5, 2026MarkUs is a web application for the submission and grading of student assignments.CVE-2026-27807 · Other software · MarkUsProject · reported by GitHubMedium 4.9
MarkUs is a web application for the submission and grading of student assignments. Prior to version 2.9.4, MarkUs allows course instructors to upload YAML files to create/update various entities (e.g., assignment settings). These YAML files are parsed with aliases enabled. This issue has been patched in version 2.9.4.
- Product
- Markus
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 5, 2026MarkUs is a web application for the submission and grading of student assignments.CVE-2026-25962 · Other software · MarkUsProject · reported by GitHubMedium 6.5
MarkUs is a web application for the submission and grading of student assignments. Prior to version 2.9.4, MarkUs currently extracts zip files without any size or entry-count limits. For example, instructors can upload a zip file to provide an assignment configuration; students can upload a zip file for an assignment submission and indicate its contents should be extracted. This issue has been patched in version 2.9.4.
- Product
- Markus
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 5, 2026MarkUs is a web application for the submission and grading of student assignments.CVE-2026-28405 · Other software · MarkUsProject · reported by GitHubHigh 8
MarkUs is a web application for the submission and grading of student assignments. Prior to version 2.9.1, the courses/<:course_id>/assignments/<:assignment_id>/submissions/html_content route reads the contents of a student-submitted file and renders them without sanitization. This issue has been patched in version 2.9.1.
- Product
- Markus
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 9, 2026MarkUs is a web application for the submission and grading of student assignments.CVE-2026-25057 · Other software · MarkUsProject · reported by GitHubCritical 9.1
MarkUs is a web application for the submission and grading of student assignments. Prior to 2.9.1, instructors are able to upload a zip file to create an assignment from an exported configuration (courses/<:course_id>/assignments/upload_config_files). The uploaded zip file entry names are used to create paths to write files to disk without checking these paths. This vulnerability is fixed in 2.9.1.
- Product
- Markus
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 9, 2026MarkUs is a web application for the submission and grading of student assignments.CVE-2026-24900 · Other software · MarkUsProject · reported by GitHubMedium 6.5
MarkUs is a web application for the submission and grading of student assignments. Prior to 2.9.1, the courses/<:course_id>/assignments/<:assignment_id>/submissions/html_content accepted a select_file_id parameter to serve SubmissionFile objects containing a record of files submitted by students. This parameter was not correctly scoped to the requesting user, allowing users access arbitrary submission file contents by id. This vulnerability is fixed in 2.9.1.
- Product
- Markus
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 18, 2024MarkUs is a web application for the submission and grading of student assignments.CVE-2024-51743 · Other software · MarkUsProject · reported by GitHubHigh 7.1
MarkUs is a web application for the submission and grading of student assignments. In versions prior to 2.4.8, an arbitrary file write vulnerability in the update/upload/create file methods in Controllers allows authenticated instructors to write arbitrary files to any location on the web server MarkUs is running on (depending on the permissions of the underlying filesystem). e.g. This can lead to a delayed remote code execution in case an attacker is able to write a Ruby file into the config/initializers/ subfolder of the Ruby on Rails application. MarkUs v2.4.8 has addressed this issue. No known workarounds are available at the application level aside from upgrading.
- Product
- Markus
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 18, 2024MarkUs is a web application for the submission and grading of student assignments.CVE-2024-51499 · Other software · MarkUsProject · reported by GitHubHigh 7.1
MarkUs is a web application for the submission and grading of student assignments. In versions prior to 2.4.8, an arbitrary file write vulnerability accessible via the update_files method of the SubmissionsController allows authenticated users (e.g. students) to write arbitrary files to any location on the web server MarkUs is running on (depending on the permissions of the underlying filesystem). e.g. This can lead to a delayed remote code execution in case an attacker is able to write a Ruby file into the config/initializers/ subfolder of the Ruby on Rails application. MarkUs v2.4.8 has addressed this issue. No known workarounds are available at the application level aside from upgrading.
- Product
- Markus
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 18, 2024MarkUs, a web application for the submission and grading of student assignments, is vulnerable to path traversal in versions prior to 2.4.8.CVE-2024-47820 · Other software · MarkUsProject · reported by GitHubMedium 5.7
MarkUs, a web application for the submission and grading of student assignments, is vulnerable to path traversal in versions prior to 2.4.8. Authenticated instructors may download any file on the web server MarkUs is running on, depending on the file permissions. MarkUs v2.4.8 has addressed this issue. No known workarounds are available at the application level aside from upgrading.
- Product
- Markus
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 4, 2023Buffer Overflow vulnerability found in Espruino 2v05.41 allows an attacker to cause a denial of service via the function jsvGarbageCollectMarkUsed in file src/jCVE-2020-23257 · Other software · Espruino · reported by MITREHigh 7.5
Buffer Overflow vulnerability found in Espruino 2v05.41 allows an attacker to cause a denial of service via the function jsvGarbageCollectMarkUsed in file src/jsvar.c.
- Product
- Espruino
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordespruino.comgithub.com
Jul 19, 2013Cross-site request forgery (CSRF) vulnerability in the TEQneers SEO Enhancements (tq_seo) extension before 5.0.1 for TYPO3 allows remote attackers to hijack theCVE-2013-4871 · Other software · Markus Blaschke · reported by MITREMedium 6.8
Cross-site request forgery (CSRF) vulnerability in the TEQneers SEO Enhancements (tq_seo) extension before 5.0.1 for TYPO3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
- Product
- TQ SEO
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 15, 2010SQL injection vulnerability in the Tour Extension (pm_tour) extension before 0.0.13 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspCVE-2009-4702 · Other software · Markus Barchfeld · reported by MITREHigh 7.5
SQL injection vulnerability in the Tour Extension (pm_tour) extension before 0.0.13 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
- Product
- PM Tour
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 11, 2007Multiple PHP remote file inclusion vulnerabilities in WebED in Markus Iser ED Engine 0.8999 alpha allow remote attackers to execute arbitrary PHP code via a URLCVE-2007-4815 · Other software · Markus Iser · reported by MITREMedium 6.8
Multiple PHP remote file inclusion vulnerabilities in WebED in Markus Iser ED Engine 0.8999 alpha allow remote attackers to execute arbitrary PHP code via a URL in the Codebase parameter to (1) channeledit.php, (2) post.php, (3) view.php, or (4) viewitem.php in source/mod/rss/.
- Product
- ED Engine
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 31, 2002Unknown vulnerability in CGINews before 1.06 allow remote attackers to read arbitrary files via "unfiltered user input."CVE-2002-1736 · Other software · Markus Triska · reported by MITREMedium 5
Unknown vulnerability in CGINews before 1.06 allow remote attackers to read arbitrary files via "unfiltered user input."
- Product
- Cginews
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecuritytracker.comexchange.xforce.ibmcloud.com
Dec 31, 2002CGIForum 1.0 through 1.05 allows remote attackers to cause a denial of service (infinite recursion) by creating a message board post that is a child of an outdaCVE-2002-1902 · Other software · Markus Triska · reported by MITREMedium 5
CGIForum 1.0 through 1.05 allows remote attackers to cause a denial of service (infinite recursion) by creating a message board post that is a child of an outdated parent.
- Product
- Cgiforum
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 31, 2001Buffer overflow in mod_bf 0.2 allows local users to execute arbitrary commands via a long script.CVE-2001-1498 · Other software · Markus Kliegl · reported by MITREHigh 7.2
Buffer overflow in mod_bf 0.2 allows local users to execute arbitrary commands via a long script.
- Product
- MOD BF
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugtraq.orgsecurityfocus.com
Jan 9, 2001Directory traversal vulnerability in cgiforum.pl script in CGIForum 1.0 allows remote attackers to ready arbitrary files via a ..CVE-2000-1171 · Other software · Markus Triska · reported by MITREMedium 5
Directory traversal vulnerability in cgiforum.pl script in CGIForum 1.0 allows remote attackers to ready arbitrary files via a .. (dot dot) attack in the "thesection" parameter.
- Product
- Cgiforum
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comsecurityfocus.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.