# Nameless. Every CVE that names Nameless among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [NamelessMC: Reactions on private or blocking profile posts can be modified without proper authorization](https://agentprime.io/advisories/CVE-2026-40571.md) `CVE-2026-40571` · CVE record: NamelessMC Nameless · CVSS 5.3 Medium · Not analysed yet · Published 2 Jun 2026 · Tags: Broken access control - [NamelessMC: Private or blocking profile pages can be bypassed with direct POST requests, and reply handling allows cross-profile writes](https://agentprime.io/advisories/CVE-2026-35447.md) `CVE-2026-35447` · CVE record: NamelessMC Nameless · CVSS 5.3 Medium · Not analysed yet · Published 2 Jun 2026 · Tags: Information disclosure - [NamelessMC: Reactions on private or blocking profile posts can be read and modified without proper authorization](https://agentprime.io/advisories/CVE-2026-40314.md) `CVE-2026-40314` · CVE record: NamelessMC Nameless · CVSS 6.9 Medium · Not analysed yet · Published 2 Jun 2026 · Tags: Broken access control - [NamelessMC: Forum reactions bypass the "view own topics only" restriction](https://agentprime.io/advisories/CVE-2026-35443.md) `CVE-2026-35443` · CVE record: NamelessMC Nameless · CVSS 5.3 Medium · Not analysed yet · Published 2 Jun 2026 · Tags: Broken access control - [NamelessMC: OAuth callback \`state\` is not validated, allowing login CSRF / session swapping](https://agentprime.io/advisories/CVE-2026-34460.md) `CVE-2026-34460` · CVE record: NamelessMC Nameless · CVSS 5.4 Medium · Not analysed yet · Published 2 Jun 2026 · Tags: Cross-site request forgery (CSRF), CWE-302, CWE-346 - [Authenticated users can read hidden forum posts through \`/forum/get_quotes\`](https://agentprime.io/advisories/CVE-2026-33398.md) `CVE-2026-33398` · CVE record: NamelessMC Nameless · CVSS 7.1 High · Not analysed yet · Published 2 Jun 2026 · Tags: Broken access control - [NamelessMC has Reflected Cross-Site Scripting (XSS) in id parameter of /index.php?route=/queries/user/](https://agentprime.io/advisories/CVE-2026-32250.md) `CVE-2026-32250` · CVE record: NamelessMC Nameless · CVSS 4.3 Medium · Not analysed yet · Published 2 Jun 2026 · Tags: Cross-site scripting (XSS) - [NamelessMC allows Stored Cross-Site Scripting (XSS) in dashboard text editor](https://agentprime.io/advisories/CVE-2025-54117.md) `CVE-2025-54117` · CVE record: NamelessMC Nameless · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Aug 2025 · Tags: Cross-site scripting (XSS) - [NamelessMC allows Stored Cross Site Scripting (XSS) in SEO component](https://agentprime.io/advisories/CVE-2025-54421.md) `CVE-2025-54421` · CVE record: NamelessMC Nameless · CVSS 7.2 High · Not analysed yet · Published 18 Aug 2025 · Tags: Cross-site scripting (XSS) - [NamelessMC allows sensitive information disclosure in member list component](https://agentprime.io/advisories/CVE-2025-54118.md) `CVE-2025-54118` · CVE record: NamelessMC Nameless · CVSS 5.3 Medium · Not analysed yet · Published 18 Aug 2025 · Tags: Information disclosure - [NamelessMC Vulnerable to SQL Injections in /user/messaging and /panel/users/reports Pages](https://agentprime.io/advisories/CVE-2025-32389.md) `CVE-2025-32389` · CVE record: NamelessMC Nameless · CVSS 8.6 High · Not analysed yet · Published 18 Apr 2025 · Tags: SQL injection - [NamelessMC Vulnerable to Cookie-Based View Count Manipulation](https://agentprime.io/advisories/CVE-2025-31120.md) `CVE-2025-31120` · CVE record: NamelessMC Nameless · CVSS 5.3 Medium · Not analysed yet · Published 18 Apr 2025 · Tags: CWE-565 - [NamelessMC Has Forum Reply Submission Time Limit Bypass](https://agentprime.io/advisories/CVE-2025-31118.md) `CVE-2025-31118` · CVE record: NamelessMC Nameless · CVSS 7.1 High · Not analysed yet · Published 18 Apr 2025 · Tags: Denial of service - [NamelessMC Forum Topic Deletion Triggered by Unrelated User Deletion](https://agentprime.io/advisories/CVE-2025-30357.md) `CVE-2025-30357` · CVE record: NamelessMC Nameless · CVSS 7.3 High · Not analysed yet · Published 18 Apr 2025 · Tags: CWE-706 - [NamelessMC Forum iframe width/height abuse causing UI-based Denial of Service](https://agentprime.io/advisories/CVE-2025-30158.md) `CVE-2025-30158` · CVE record: NamelessMC Nameless · CVSS 7.1 High · Not analysed yet · Published 18 Apr 2025 · Tags: Denial of service - [NamelessMC Has Lack of Length Validation for s Parameter in GET Requests](https://agentprime.io/advisories/CVE-2025-29784.md) `CVE-2025-29784` · CVE record: NamelessMC Nameless · CVSS 7.5 High · Not analysed yet · Published 18 Apr 2025 · Tags: CWE-20, CWE-130, CWE-1284 - [Cross-site Scripting in NamelessMC](https://agentprime.io/advisories/CVE-2025-22142.md) `CVE-2025-22142` · CVE record: NamelessMC Nameless · CVSS 6.3 Medium · Not analysed yet · Published 13 Jan 2025 · Tags: Cross-site scripting (XSS) - [Account Takeover in NamelessMC](https://agentprime.io/advisories/CVE-2025-22144.md) `CVE-2025-22144` · CVE record: NamelessMC Nameless · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Jan 2025 · Tags: CWE-610 ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .