Vulnerability index

Browse CVEs

12 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Linkace MEDIUM 5.0
CVE-2026-35516

LinkAce is a self-hosted archive to collect website links. Prior to 2.5.4, LinkRepository::update and CheckLinksCommand::checkLink do not check for p…

Fix: 2.5.4+
Fix from $1,600 2026-04-07
Linkace HIGH 8.5
CVE-2026-33953

LinkAce is a self-hosted archive to collect website links. Versions prior to 2.5.3 block direct requests to private IP literals, but still performs s…

Fix: 2.5.3+
Fix from $1,950 2026-03-27
Linkace MEDIUM 6.5
CVE-2026-33954

LinkAce is a self-hosted archive to collect website links. In versions prior to 2.5.3, a private note attached to a non-private link can be disclosed…

Fix: 2.5.3+
Fix from $1,600 2026-03-27
Linkace MEDIUM 6.5
CVE-2026-30953

LinkAce is a self-hosted archive to collect website links. When a user creates a link via POST /links, the server fetches HTML metadata from the prov…

Fix: after 2.0.0
Fix from $1,600 2026-03-10
Linkace MEDIUM 5.4
CVE-2026-27458

LinkAce is a self-hosted archive to collect website links. Versions 2.4.2 and below have a Stored Cross-site Scripting vulnerability through the Atom…

Fix: 2.4.3+
Fix from $1,600 2026-02-21
Linkace MEDIUM 5.4
CVE-2025-62722

LinkAce is a self-hosted archive to collect website links. In versions 2.3.1 and below, the social media sharing functionality contains a Stored Cros…

Fix: 2.4.0+
Fix from $1,600 2025-11-04
Linkace MEDIUM 6.5
CVE-2025-62721

LinkAce is a self-hosted archive to collect website links. In versions 2.3.1 and below, authenticated RSS feed endpoints in the FeedController class …

Fix: 2.4.0+
Fix from $1,600 2025-11-04
Linkace MEDIUM 6.5
CVE-2025-62720

LinkAce is a self-hosted archive to collect website links. Versions 2.3.1 and below allow any authenticated user to export the entire database of lin…

Fix: 2.4.0+
Fix from $1,600 2025-11-04
Linkace HIGH 7.3
CVE-2025-59424

LinkAce is a self-hosted archive to collect website links. Prior to 2.3.1, a Stored Cross-Site Scripting (XSS) vulnerability has been identified on t…

Fix: 2.3.1+
Fix from $1,950 2025-09-18
Linkace MEDIUM 5.4
CVE-2025-53838

LinkAce is a self-hosted archive to collect website links. A stored cross-site scripting (XSS) vulnerability was discovered in versions prior to 2.1.…

Fix: 2.1.9+
Fix from $1,600 2025-09-08
Linkace HIGH 7.6
CVE-2024-56508

LinkAce is a self-hosted archive to collect links of your favorite websites. Prior to 1.15.6, a file upload vulnerability exists in the LinkAce. This…

Fix: 1.15.6+
Fix from $1,950 2024-12-27
Linkace MEDIUM 5.4
CVE-2024-56507

LinkAce is a self-hosted archive to collect links of your favorite websites. Prior to 1.15.6, a reflected cross-site scripting (XSS) vulnerability ex…

Fix: 1.15.6+
Fix from $1,600 2024-12-27