Vulnerability index

Browse CVEs

23 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Oneuptime CRITICAL 9.8
CVE-2026-35053

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, the Worker service's ManualAPI exposes workflow executio…

Fix: 10.0.42+
Fix from $2,300 2026-04-02
Oneuptime HIGH 8.1
CVE-2026-34840

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, OneUptime's SAML SSO implementation (App/FeatureSet/Iden…

Fix: 10.0.42+
Fix from $1,950 2026-04-02
Oneuptime CRITICAL 9.1
CVE-2026-34758

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, unauthenticated access to Notification test and Phone Nu…

Fix: 10.0.40+
Fix from $2,300 2026-04-02
Oneuptime HIGH 8.1
CVE-2026-34759

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, multiple notification API endpoints are registered witho…

Fix: 10.0.42+
Fix from $1,950 2026-04-02
Oneuptime CRITICAL 9.9
CVE-2026-33396

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.35, a low-privileged authenticated user (ProjectMember) can …

Fix: 10.0.35+
Fix from $2,300 2026-03-26
Oneuptime HIGH 8.1
CVE-2026-33142

OneUptime is a solution for monitoring and managing online services. Prior to version 10.0.34, the fix for CVE-2026-32306 (ClickHouse SQL injection v…

Fix: 10.0.34+
Fix from $1,950 2026-03-20
Oneuptime HIGH 7.5
CVE-2026-33143

OneUptime is a solution for monitoring and managing online services. Prior to version 10.0.34, the WhatsApp POST webhook handler (/notification/whats…

Fix: 10.0.34+
Fix from $1,950 2026-03-20
Oneuptime MEDIUM 6.5
CVE-2026-32598

OneUptime is a solution for monitoring and managing online services. Prior to 10.0.24, the password reset flow logs the complete password reset URL —…

Fix: 10.0.24+
Fix from $1,600 2026-03-13
Oneuptime CRITICAL 9.9
CVE-2026-32306

OneUptime is a solution for monitoring and managing online services. Prior to 10.0.23, the telemetry aggregation API accepts user-controlled aggregat…

Fix: 10.0.23+
Fix from $2,300 2026-03-13
Oneuptime HIGH 7.6
CVE-2026-32308

OneUptime is a solution for monitoring and managing online services. Prior to 10.0.23, the Markdown viewer component renders Mermaid diagrams with se…

Fix: 10.0.23+
Fix from $1,950 2026-03-13
Oneuptime MEDIUM 5.0
CVE-2026-30959

OneUptime is a solution for monitoring and managing online services. The resend-verification-code endpoint allows any authenticated user to trigger a…

Fix: 10.0.21+
Fix from $1,600 2026-03-10
Oneuptime CRITICAL 9.9
CVE-2026-30956

OneUptime is a solution for monitoring and managing online services. Prior to 10.0.21, a low‑privileged user can bypass authorization and tenant isol…

Fix: 10.0.21+
Fix from $2,300 2026-03-10
Oneuptime CRITICAL 9.9
CVE-2026-30957

OneUptime is a solution for monitoring and managing online services. Prior to 10.0.21, OneUptime Synthetic Monitors allow a low-privileged authentica…

Fix: 10.0.21+
Fix from $2,300 2026-03-10
Oneuptime HIGH 8.6
CVE-2026-30958

OneUptime is a solution for monitoring and managing online services. Prior to 10.0.21, an unauthenticated path traversal in the /workflow/docs/:compo…

Fix: 10.0.21+
Fix from $1,950 2026-03-10
Oneuptime CRITICAL 9.9
CVE-2026-30921

OneUptime is a solution for monitoring and managing online services. Prior to 10.0.20, OneUptime Synthetic Monitors allow low-privileged project user…

Fix: 10.0.20+
Fix from $2,300 2026-03-10
Oneuptime HIGH 8.6
CVE-2026-30920

OneUptime is a solution for monitoring and managing online services. Prior to 10.0.19, OneUptime's GitHub App callback trusts attacker-controlled sta…

Fix: 10.0.19+
Fix from $1,950 2026-03-10
Oneuptime CRITICAL 9.9
CVE-2026-30887

OneUptime is a solution for monitoring and managing online services. Prior to 10.0.18, OneUptime allows project members to run custom Playwright/Java…

Fix: 10.0.18+
Fix from $2,300 2026-03-10
Oneuptime CRITICAL 9.0
CVE-2026-28787

OneUptime is a solution for monitoring and managing online services. In version 10.0.11 and prior, the WebAuthn authentication implementation does no…

Fix: after 10.0.11
Fix from $2,300 2026-03-06
Oneuptime HIGH 8.8
CVE-2026-27728

OneUptime is a solution for monitoring and managing online services. Prior to version 10.0.7, an OS command injection vulnerability in `NetworkPathMo…

Fix: 10.0.7+
Fix from $1,950 2026-02-25
Oneuptime CRITICAL 9.9
CVE-2026-27574

OneUptime is a solution for monitoring and managing online services. In versions 9.5.13 and below, custom JavaScript monitor feature uses Node.js's n…

Fix: 10.0.5+
Fix from $2,300 2026-02-21
Oneuptime HIGH 8.2
CVE-2025-66028

OneUptime is a solution for monitoring and managing online services. Prior to version 8.0.5567, OneUptime is vulnerable to privilege escalation via L…

Fix: 8.0.5567+
Fix from $1,950 2025-11-26
Oneuptime HIGH 8.1
CVE-2025-65966

OneUptime is a solution for monitoring and managing online services. In version 9.0.5598, a low-permission user can create new accounts through a dir…

No fix yet
Fix from $1,950 2025-11-26
Oneuptime HIGH 8.3
CVE-2024-29194

OneUptime is a solution for monitoring and managing online services. The vulnerability lies in the improper validation of client-side stored data wit…

Fix: 7.0.1815+
Fix from $1,950 2024-03-24