Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-19852

CyberTutor｜NewSiteServer (NSS) - Arbitrary File Upload

NewSiteServer (NSS) developed by CyberTutor has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload arbitrary files, including malicious HTML files, thereby achieving effects similar to cross-site scripting.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Cybertutor
Products
New Site Server
CVE-2026-19853

CyberTutor｜NewSiteServer (NSS) - Missing Authentication

NewSiteServer (NSS) developed by CyberTutor has a Missing Authentication vulnerability. Unauthenticated remote attackers can exploit a specific functionality to send emails to anyone on behalf of the school.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Cybertutor
Products
New Site Server
CVE-2025-12868

CyberTutor｜New Site Server - Use of Client-Side Authentication

New Site Server developed by CyberTutor has a Use of Client-Side Authentication vulnerability, allowing unauthenticated remote attackers to modify the frontend code to gain administrator privileges on the website.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Cybertutor
Products
New Site Server