| CVE-2026-25660 |
critical |
— |
9.5 |
|
|
|
24d ago |
Codechecker has an authentication bypass for certain API calls |
| CVE-2021-44217 |
medium |
— |
5.5 |
|
|
|
4y ago |
In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting (XSS) vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTM… |
| CVE-2025-40843 |
unknown |
— |
— |
|
|
|
8mo ago |
CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.
CodeChecker versions up to 6.26.1 contain a buffer overflow vulnerability i… |
| CVE-2025-1300 |
unknown |
— |
— |
|
|
|
1y ago |
CodeChecker open redirect when URL contains multiple slashes after the product name |
| CVE-2024-53829 |
unknown |
— |
— |
|
|
|
1y ago |
CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.
Cross-site request forgery allows an unauthenticated attacker to hijack the aut… |
| CVE-2024-10082 |
unknown |
— |
— |
|
|
|
2y ago |
CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.
Authentication method confusion allows logging in as the built-in root user fro… |
| CVE-2024-10081 |
unknown |
— |
— |
|
|
|
2y ago |
CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.
Authentication bypass occurs when the API URL ends with Authentication. This by… |
| CVE-2023-49793 |
unknown |
— |
— |
|
|
|
2y ago |
CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Zip files uploaded to the server endpoint of `CodeChecker store` are not properl… |