Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

kalcaddle — Vulnerabilities & Security Advisories 24

Browse all 24 CVE security advisories affecting kalcaddle. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Kalcaddle operates as a provider of mathematical software solutions, primarily known for its symbolic computation engine and graphing calculator applications used in educational and professional environments. Security audits have identified twenty-one distinct Common Vulnerabilities and Exposures (CVEs) associated with its software ecosystem, revealing a pattern of legacy code issues. Historically, these flaws predominantly involve remote code execution, cross-site scripting, and improper access control mechanisms that allow privilege escalation. Notable incidents include critical buffer overflow vulnerabilities in earlier desktop versions and insecure default configurations in web-based interfaces. While the company has issued patches for several high-severity issues, the accumulation of unresolved or partially mitigated defects suggests inconsistent security maintenance practices. Users are advised to verify version integrity and apply updates promptly to prevent exploitation of these known attack vectors, particularly in networked deployment scenarios.

Top products by kalcaddle: kodbox KodExplorer
CVE ID Title CVSS Severity Published
CVE-2026-18721 kalcaddle kodbox SSO API Login apiLogin redirect — kodbox CWE-601 4.3 Medium 2026-08-04
CVE-2026-18720 kalcaddle kodbox msgWarning Plugin action improper authorization — kodbox CWE-285 5.3 Medium 2026-08-04
CVE-2026-8753 kalcaddle Kodbox fileThumb Plugin VideoResize.class.php parseVideoInfo command injection — Kodbox CWE-77 6.3 Medium 2026-05-17
CVE-2026-5618 kalcaddle kodbox shareMake/shareCheck server-side request forgery — kodbox CWE-918 5.6 Medium 2026-04-06
CVE-2026-4831 kalcaddle kodbox Password-protected Share auth.class.php can improper authentication — kodbox CWE-287 3.7 Low 2026-03-26
CVE-2026-4830 kalcaddle kodbox Public Share userShare.class.php add privilege escalation — kodbox CWE-434 5.6 Medium 2026-03-26
CVE-2026-4592 kalcaddle kodbox Password Login index.class.php tfaVerify improper authentication — kodbox CWE-287 5.6 Medium 2026-03-23
CVE-2026-4591 kalcaddle kodbox fileThumb Endpoint app.php checkBin os command injection — kodbox CWE-78 4.7 Medium 2026-03-23
CVE-2026-4590 kalcaddle kodbox loginSubmit API index.class.php cross-site request forgery — kodbox CWE-352 3.1 Low 2026-03-23
CVE-2026-4589 kalcaddle kodbox fileGet Endpoint editor.class.php PathDriverUrl server-side request forgery — kodbox CWE-918 6.3 Medium 2026-03-23
CVE-2026-4588 kalcaddle kodbox Site-level API key shareOut.class.php shareSafeGroup hard-coded key — kodbox CWE-321 3.7 Low 2026-03-23
CVE-2026-2560 kalcaddle kodbox Media File Preview Plugin VideoResize.class.php run os command injection — kodbox CWE-78 6.3 Medium 2026-02-16
CVE-2026-1066 kalcaddle kodbox Compression zip command injection — kodbox CWE-77 6.3 Medium 2026-01-17
CVE-2025-11016 kalcaddle kodbox index.class.php fileOut path traversal — kodbox CWE-22 4.3 Medium 2025-09-26
CVE-2025-10233 kalcaddle kodbox editor.class.php fileSave path traversal — kodbox CWE-22 6.3 Medium 2025-09-10
CVE-2025-9414 kalcaddle kodbox Download from Link serverDownload server-side request forgery — kodbox CWE-918 4.7 Medium 2025-08-25
CVE-2023-6853 kalcaddle KodExplorer app.php index server-side request forgery — KodExplorer CWE-918 6.3 Medium 2023-12-16
CVE-2023-6852 kalcaddle KodExplorer app.php server-side request forgery — KodExplorer CWE-918 6.3 Medium 2023-12-16
CVE-2023-6851 kalcaddle KodExplorer ZIP Archive app.php unzipList code injection — KodExplorer CWE-94 6.3 Medium 2023-12-16
CVE-2023-6850 kalcaddle KodExplorer API Endpoint unrestricted upload — KodExplorer CWE-434 6.3 Medium 2023-12-16
CVE-2023-6849 kalcaddle kodbox app.php cover server-side request forgery — kodbox CWE-918 7.3 High 2023-12-16
CVE-2023-6848 kalcaddle kodbox index.class.php check command injection — kodbox CWE-77 7.3 High 2023-12-16
CVE-2022-4944 kalcaddle KodExplorer cross-site request forgery — KodExplorer CWE-352 4.3 Medium 2023-04-22
CVE-2022-46154 Arbitrary file access in KodExplorer — KodExplorer CWE-22 8.6 High 2022-12-06

This page lists every published CVE security advisory associated with kalcaddle. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.