[ Vendor · 3 CVEs ]
danielbrendel
CVEs affecting danielbrendel published in the last 30 days, plus any danielbrendel CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-108100 | 9 Oct 2026 | CVSS 6.5 | danielbrendel hortusfox-webHortusFox (hortusfox-web) before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted… | |
| CVE-2026-108101 | 9 Oct 2026 | CVSS 7.5 | danielbrendel hortusfox-webHortusFox (hortusfox-web) through 6.3 contains an unrestricted file upload vulnerability in PlantAttachmentModel that allows authenticated users to… | |
| CVE-2026-104069 | 6 Oct 2026 | CVSS 7.2 | danielbrendel hortusfox-webHortusFox before 6.2 contains a remote code execution vulnerability in ThemeModule::startImport() where an uploaded ZIP archive is extracted directly… |