Vulnerability index

Browse CVEs

17 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Humhub MEDIUM 6.1
CVE-2026-29048

HumHub is an Open Source Enterprise Social Network. In version 1.18.0, a cross-site scripting vulnerability was identified in the Button component of…

Patch available
Fix from $1,600 2026-03-06
Calendar MEDIUM 6.1
CVE-2026-29052

The Calendar module for HumHub enables users to create one-time or recurring events, manage attendee invitations, and efficiently track all scheduled…

Fix: 1.8.11+
Fix from $1,600 2026-03-05
Humhub MEDIUM 6.1
CVE-2025-64442

HumHub is an Open Source Enterprise Social Network. Versions below 1.17.4 have a XSS vulnerability in the Meta-Search feature which allows malicious …

Fix: 1.17.4+
Fix from $1,600 2025-11-07
Files MEDIUM 6.5
CVE-2025-54790

Files is a module for managing files inside spaces and user profiles. In versions 0.16.9 and below, Files does not have logic to prevent the exploita…

Fix: 0.16.10+
Fix from $1,600 2025-08-02
Files MEDIUM 6.1
CVE-2025-54789

Files is a module for managing files inside spaces and user profiles. In versions 0.16.9 and below, the File Move functionality does not contain logi…

Fix: 0.16.10+
Fix from $1,600 2025-08-02
Humhub MEDIUM 5.3
CVE-2024-52043

Generation of Error Message Containing Sensitive Information in HumHub GmbH & Co. KG - HumHub on Linux allows: Excavation (user enumeration).This iss…

Fix: after 1.16.2
Fix from $1,600 2024-11-06
Humhub CRITICAL 9.8
CVE-2017-20028

A vulnerability was found in HumHub 0.20.1/1.0.0-beta.3. It has been classified as critical. This affects an unknown part. The manipulation leads to …

No fix yet
Fix from $2,300 2022-06-09
Humhub MEDIUM 6.1
CVE-2017-20026

A vulnerability has been found in HumHub up to 1.0.1 and classified as problematic. Affected by this vulnerability is an unknown functionality. The m…

Fix: 1.1.1+
Fix from $1,600 2022-06-09
Humhub MEDIUM 6.1
CVE-2017-20027

A vulnerability was found in HumHub up to 1.0.1 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation…

Fix: 1.1.1+
Fix from $1,600 2022-06-09
Humhub MEDIUM 6.5
CVE-2022-24865

HumHub is an Open Source Enterprise Social Network. In affected versions users who are forced to change their password by an administrator may retrie…

Fix: 1.9.4 / 1.10.4+
Fix from $1,600 2022-04-20
Humhub MEDIUM 6.5
CVE-2021-43847

HumHub is an open-source social network kit written in PHP. Prior to HumHub version 1.10.3 or 1.9.3, it could be possible for registered users to bec…

Fix: 1.9.3 / 1.10.3+
Fix from $1,600 2021-12-20
Social Network Kit MEDIUM 5.3
CVE-2019-12743

HumHub Social Network Kit Enterprise v1.3.13 allows remote attackers to find the user accounts existing on any Social Network Kits (including self-ho…

Mitigation only
Fix from $1,600 2019-07-29
Humhub MEDIUM 6.1
CVE-2019-11564

A cross-site scripting (XSS) vulnerability in HumHub 1.3.12 allows remote attackers to inject arbitrary web script or HTML via a /protected/vendor/co…

No fix yet
Fix from $1,600 2019-05-08
Humhub MEDIUM 6.1
CVE-2019-9093

A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in file/file/upload in Humhub 1.3.10 Community Edition. The user-supplied input c…

Mitigation only
Fix from $1,600 2019-03-21
Humhub MEDIUM 6.1
CVE-2019-9094

A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in /s/adada/cfiles/upload in Humhub 1.3.10 Community Edition. The user-supplied i…

Mitigation only
Fix from $1,600 2019-03-21
Humhub MEDIUM 5.4
CVE-2016-1229

Cross-site scripting (XSS) vulnerability in HumHub 0.20.0-beta.1 through 0.20.1 and 1.0.0-beta before 1.0.0-beta.3 allows remote authenticated users …

Patch available
Fix from $1,600 2016-06-05
Humhub HIGH 7.5
CVE-2014-9528

SQL injection vulnerability in the actionIndex function in protected/modules_core/notification/controllers/ListController.php in HumHub 0.10.0-rc.1 a…

Fix: after 0.10.0
Fix from $1,950 2015-01-06