Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Olivetin MEDIUM 6.5
CVE-2026-32102

OliveTin gives access to predefined shell commands from a web interface. In 3000.10.2 and earlier, OliveTin’s live EventStream broadcasts execution e…

Fix: after 3000.10.2
Fix from $1,600 2026-03-11
Olivetin HIGH 8.5
CVE-2026-31817

OliveTin gives access to predefined shell commands from a web interface. Prior to 3000.11.2, when the saveLogs feature is enabled, OliveTin persists …

Fix: 3000.11.2+
Fix from $1,950 2026-03-10
Olivetin HIGH 8.8
CVE-2026-30223

OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, when JWT authentication is configured using eith…

Fix: 3000.11.1+
Fix from $1,950 2026-03-06
Olivetin MEDIUM 5.4
CVE-2026-30224

OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, OliveTin does not revoke server-side sessions wh…

Fix: 3000.11.1+
Fix from $1,600 2026-03-06
Olivetin HIGH 7.5
CVE-2026-28789

OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.10.3, an unauthenticated denial-of-service vulnerabili…

Fix: after 3000.10.2
Fix from $1,950 2026-03-05
Olivetin HIGH 7.5
CVE-2026-28790

OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.0, OliveTin allows an unauthenticated guest to term…

Fix: 3000.11.0+
Fix from $1,950 2026-03-05
Olivetin HIGH 7.5
CVE-2026-28342

OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.10.2, the PasswordHash API endpoint allows unauthentic…

Fix: 3000.10.2+
Fix from $1,950 2026-03-05
Olivetin CRITICAL 9.9
CVE-2026-27626

OliveTin gives access to predefined shell commands from a web interface. In versions up to and including 3000.10.0, OliveTin's shell mode safety chec…

Fix: after 3000.10.0
Fix from $2,300 2026-02-25
Olivetin MEDIUM 6.5
CVE-2025-50946

OS Command Injection in Olivetin 2025.4.22 Custom Themes via the ParseRequestURI function in service/internal/executor/arguments.go.

No fix yet
Fix from $1,600 2025-08-13