lunary lunary

Name: lunary lunary
Brand: lunary

productUS

cpe:2.3:a:lunary:lunary:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

9critical24high23medium0low

updated 2026-10-27

vulnerabilities (69)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-7456US	critical9.8	1.41% (73rd)	Exploit	no fix	2024-11-01	= 1.4.2
CVE-2025-5352US	critical9.6	0.50% (42nd)	Exploit	1.9.25	2025-08-23	< 1.9.25
CVE-2024-7476US	—	1.51% (74th)	—	1.4.3	2025-03-20	1.2.7 → 1.4.3
CVE-2024-8765US	—	0.84% (58th)	—	1.4.23	2025-03-20	< 1.4.23
CVE-2024-8789US	—	0.82% (57th)	—	1.4.23	2025-03-20	< 1.4.23
CVE-2024-8764US	—	0.82% (57th)	—	1.4.23	2025-03-20	< 1.4.23
CVE-2024-8763US	—	0.82% (57th)	—	1.4.23	2025-03-20	< 1.4.23
CVE-2024-8998US	high7.5	0.81% (57th)	—	1.4.26	2025-03-20	< 1.4.26
CVE-2024-8999US	high7.5OT elevated	0.81% (57th)	—	1.4.26	2025-03-20	< 1.4.26
CVE-2024-9095US	critical9.8OT elevated	0.73% (54th)	—	no fix	2025-03-20	= 1.4.28
CVE-2024-11300US	medium6.5	0.73% (54th)	—	1.6.3	2025-03-20	< 1.6.3
CVE-2024-7475US	critical9.1OT elevated	0.73% (54th)	—	1.3.4	2024-10-29	< 1.3.4
CVE-2024-1740US	critical9.1OT elevated	0.64% (50th)	—	1.2.7	2024-04-10	< 1.2.7
CVE-2024-10272US	—OT elevated	0.61% (49th)	—	1.4.9	2025-03-20	< 1.4.9
CVE-2024-9099US	high8.1	0.60% (48th)	—	no fix	2025-03-20	= 1.4.29
CVE-2024-11301US	—	0.59% (48th)	—	1.6.3	2025-03-20	< 1.6.3
CVE-2024-4148US	high7.5	0.59% (48th)	—	no fix	2024-06-01	= 1.2.10
CVE-2024-1741US	critical9.1OT elevated	0.59% (48th)	—	1.2.8	2024-04-10	< 1.2.8
CVE-2024-11137US	—	0.57% (47th)	—	1.6.1	2025-03-20	< 1.6.1
CVE-2024-9098US	medium6.1OT elevated	0.57% (47th)	—	1.4.30	2025-03-20	< 1.4.30
CVE-2024-1739US	critical9.1	0.56% (47th)	—	1.0.2	2024-04-16	< 1.0.2
CVE-2024-7474US	high8.1	0.56% (46th)	—	1.3.4	2024-10-29	< 1.3.4
CVE-2024-9000US	medium6.5OT elevated	0.55% (46th)	—	no fix	2025-03-20	= 1.4.26
CVE-2024-1738US	high7.5OT elevated	0.55% (46th)	—	1.2.4	2024-04-16	< 1.2.4
CVE-2024-10762US	—OT elevated	0.55% (46th)	—	1.5.9	2025-03-20	< 1.5.9
CVE-2024-5133US	high8.1	0.54% (45th)	—	1.2.14	2024-06-06	< 1.2.14
CVE-2024-4146US	critical9.8OT elevated	0.54% (45th)	—	no fix	2024-06-08	= 1.2.13
CVE-2024-5386US	high8.8	0.54% (45th)	—	1.2.14	2026-02-02	< 1.2.14
CVE-2024-10274US	—OT elevated	0.54% (45th)	—	1.5.7	2025-03-20	< 1.5.7
CVE-2024-10330US	—OT elevated	0.53% (44th)	—	1.5.7	2025-03-20	< 1.5.7
CVE-2024-9096US	high7.1OT elevated	0.52% (44th)	—	no fix	2025-03-20	= 1.4.28
CVE-2024-5714US	medium6.8OT elevated	0.51% (43rd)	—	no fix	2024-06-27	= 1.2.4
CVE-2024-5128US	high8.8	0.51% (43rd)	—	1.2.25	2024-06-06	< 1.2.25
CVE-2024-10275US	—OT elevated	0.51% (43rd)	—	1.5.7	2025-03-20	< 1.5.7
CVE-2024-3504US	medium6.5OT elevated	0.49% (42nd)	—	1.2.7	2024-06-06	< 1.2.7
CVE-2024-5131US	medium6.5	0.49% (42nd)	—	1.2.25	2024-06-06	< 1.2.25
CVE-2024-5130US	high7.5OT elevated	0.48% (41st)	—	1.2.8	2024-06-06	< 1.2.8
CVE-2025-4779US	medium6.1	0.48% (41st)	—	1.9.24	2025-07-07	< 1.9.24
CVE-2024-1626US	high8.1	0.48% (41st)	—	1.0.0	2024-04-16	< 1.0.0
CVE-2024-3761US	high7.5OT elevated	0.47% (40th)	—	1.2.8	2024-05-20	< 1.2.8
CVE-2024-5248US	medium6.5OT elevated	0.47% (40th)	—	1.4.9	2024-06-06	1.2.5 → 1.4.9
CVE-2025-9803US	high8.8OT elevated	0.46% (40th)	—	no fix	2025-11-25	= 1.9.34
CVE-2024-1666US	medium5.3	0.46% (39th)	—	1.2.7	2024-04-16	< 1.2.7
CVE-2024-3760US	high7.5	0.46% (39th)	—	1.2.8	2024-11-14	< 1.2.8
CVE-2024-7472US	medium6.5	0.46% (39th)	—	no fix	2024-10-29	= 1.2.26
CVE-2024-5129US	high8.2OT elevated	0.45% (39th)	—	1.2.8	2024-06-06	< 1.2.8
CVE-2024-6087US	medium6.5	0.44% (38th)	—	1.4.9	2024-09-13	< 1.4.9
CVE-2024-4147US	medium6.5	0.44% (38th)	—	1.2.25	2026-02-02	< 1.2.25
CVE-2024-1625US	medium6.5	0.44% (38th)	—	no fix	2024-04-10	= 0.3.0
CVE-2024-10273US	—OT elevated	0.43% (37th)	—	1.5.7	2025-03-20	< 1.5.7

showing 50 of 69

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-862Missing Authorization15 CVEs
CWE-639Authorization Bypass Through User-Controlled Key13 CVEs
CWE-863Incorrect Authorization12 CVEs
CWE-1333Inefficient Regular Expression Complexity5 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
CWE-1220Insufficient Granularity of Access Control3 CVEs
CWE-284Improper Access Control3 CVEs
CWE-821Incorrect Synchronization3 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE69 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan