IN
Vendor
inducer
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-47161 | RE relate inducer | 8.7 | May 27 | RELATE Vulnerable to Remote Code Execution (RCE) via Insecure Celery Pickle Deserialization |
| CVE-2026-42197 | RE relate inducer | 8.7 | May 27 | RELATE Vulnerable to Stored XSS via Unprivileged User Profile |
| CVE-2026-41588 | RE relate inducer | 8.1 | May 8 | RELATE: Timing Attack Vulnerability in course/auth.py — check_sign_in_key() |
| CVE-2026-41505 | RE relate inducer | 8.7 | May 7 | RELATE: Predictable Token Generation in auth.py and exam.py |
| CVE-2024-32406 | RE Relate Inducer | 7.5 | Apr 26 | Server-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1 allows a remote attacker to execute arbitrary code via a crafted payload to the Batch-Issue… |
| CVE-2024-32404 | RE Relate Inducer | 6.0 | Apr 26 | Server-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1, allows remote attackers to execute arbitrary code via a crafted payload to the Markup… |
| CVE-2024-32405 | RE Relate Inducer | 2.6 | Apr 22 | Cross Site Scripting vulnerability in inducer relate before v.2024.1 allows a remote attacker to escalate privileges via a crafted payload to the Answer field of… |
| CVE-2024-32407 | RE Relate Inducer | 8.8 | Apr 22 | An issue in inducer relate before v.2024.1 allows a remote attacker to execute arbitrary code via a crafted payload to the Page Sandbox feature |