Where
-Infinity
0

Trending

Last week
Last month
Last year

CVATCVAT has stored XSS via annotation guide assets

Risk 59
Severity
8.5
First published (updated )
CVE-2026-65986

CVATCVAT vulnerable to privilege escalation of users with staff status

Risk 56
Severity
8.8
EPSS
0.04%
First published (updated )
CVE-2026-23526

CVATCVAT vulnerable to XSS via skeleton SVG images

Risk 44
Severity
8.6
EPSS
0.03%
First published (updated )
CVE-2026-23516

CVATCVAT vulnerable to directory traversal via mounted share listing

Risk 26
Severity
5.3
First published (updated )
CVE-2025-68430

CVAT Computer Vision Annotation ToolCVAT has information disclosure via browsable API

Risk 25
Severity
5.3
EPSS
0.05%
First published (updated )
CVE-2025-48381
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

CVAT Computer Vision Annotation ToolCVAT allows remote code execution via tracker Nuclio functions

Risk 61
Severity
9.8
EPSS
0.04%
First published (updated )
CVE-2025-23045

CVAT Computer Vision Annotation ToolComputer Vision Annotation Tool (CVAT) access control is broken in several PATCH endpoints

Risk 34
Severity
5.4
First published (updated )
CVE-2024-47172

CVAT Computer Vision Annotation ToolComputer Vision Annotation Tool (CVAT) contains a reflected XSS via request endpoints

Risk 60
Severity
6.3
First published (updated )
CVE-2024-47064

CVAT Computer Vision Annotation ToolComputer Vision Annotation Tool (CVAT) contains a stored XSS via the quality report data endpoint

Risk 57
Severity
6.2
First published (updated )
CVE-2024-47063

CVAT Computer Vision Annotation ToolComputer Vision Annotation Tool (CVAT) is missing authorization for endpoints related to webhook deliveries

Risk 39
Severity
6.4
First published (updated )
CVE-2024-45393
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

CVAT Computer Vision Annotation ToolCVAT's export and backup-related API endpoints are susceptible to CSRF

Risk 47
Severity
7.1
First published (updated )
CVE-2024-37306

CVAT Computer Vision Annotation ToolCVAT SSRF via custom cloud storage endpoints

Risk 55
Severity
8.5
First published (updated )
CVE-2024-37164

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203