Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

mayswind vulnerabilities

3 published CVEs name mayswind among the affected products.

Published CVEs
3
Last 12 months
3
Critical
0
Known exploited
0

Critical 0High 1Medium 2Low 0Not scored 0

Newest CVEs

  • CVE-2026-86041

    ezBookkeeping: Source-IP allowlist (MCP & API token) is bypassable via a spoofed `X-Forwarded-For` header

    mayswind · ezbookkeeping

    Medium5.3
  • CVE-2026-105131

    mayswind ezBookkeeping 1.2.0 before 2.0.1 Privilege Escalation via Token Refresh Endpoint

    mayswind · ezBookkeeping

    Medium5.3
  • CVE-2026-94112

    mayswind ezBookkeeping before 2.0.0 TOTP Replay Attack

    mayswind · ezBookkeeping

    High7.6

Products with the most CVEs

  1. ezBookkeeping3

Most common weaknesses

  1. CWE-294 1
  2. CWE-348 1
  3. CWE-863 Incorrect authorization1