PatchTheCEVCVEs published by CSA
CVEs published by CSA (CVE Numbering Authority). 21 tracked.
- CVE-2026-63229 CRITICAL 9.1 A pre-authentication blind SQL injection vulnerability in Koollab LMS allowed an unauthenticated attacker to u
- CVE-2026-63230 CRITICAL 9.1 A pre-authentication error-based SQL injection vulnerability in Koollab LMS allowed an unauthenticated attacke
- CVE-2026-63232 CRITICAL 9.9 A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to i
- CVE-2026-63233 CRITICAL 9.9 A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to i
- CVE-2026-63234 CRITICAL 9.9 A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to i
- CVE-2026-63231 HIGH 8.1 A post-authentication SQL injection vulnerability in Koollab LMS allowed an authenticated attacker to use an e
- CVE-2026-63238 MEDIUM 6.5 An authentication bypass vulnerability in Koollab LMS allowed an unauthenticated attacker to take over any acc
- CVE-2026-63239 MEDIUM 5.4 A hard-coded AWS IAM credentials vulnerability in Koollab LMS allowed an attacker to access shared multi-tenan
- CVE-2026-63235 LOW 3.7 An improper access control vulnerability in Koollab LMS allowed an unauthenticated attacker to forcibly termin
- CVE-2026-63237 MEDIUM 4.8 A TOTP two-factor authentication bypass vulnerability in Koollab LMS allowed an attacker to supply a client-co
- CVE-2026-63236 LOW 3.7 An improper access control vulnerability in Koollab LMS allowed an unauthenticated attacker to read another us
- CVE-2026-63240 MEDIUM 4.3 An information disclosure vulnerability in Koollab LMS allowed an authenticated learner to obtain correct quiz
- CVE-2026-63242 MEDIUM 4.3 A business logic vulnerability in Koollab LMS allowed an authenticated learner to set their lesson completion
- CVE-2026-63241 LOW 3.1 An insecure direct object reference vulnerability in Koollab LMS allowed an authenticated user to query the co
- CVE-2026-63228 LOW 2.6 An unrestricted image upload vulnerability in Koollab LMS allowed an authenticated attacker to upload maliciou
- CVE-2026-55978 HIGH 8.4 An improper access control vulnerability in CatchPulse could allow a non-administrative local attacker to conn
- CVE-2026-55980 MEDIUM 5.5 A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun atta
- CVE-2026-55979 MEDIUM 5.2 An improper access control check in CatchPulse's named pipe communication interface could allow an attacker to
- CVE-2026-63244 CRITICAL 9.8 An authentication bypass vulnerability in WizLearn Technologies' Learning Management System (LMS) could allow
- CVE-2026-55981 CRITICAL 9.6 A firmware verification vulnerability in Creative Sound Blaster Katana could allow an attacker to modify a leg
- CVE-2026-63243 MEDIUM 4.3 An authentication vulnerability in the Bluetooth Low Energy (BLE) implementation of Creative Sound Blaster Kat