How many CVEs does aces have?

aces has 11 published CVE records since 2026, including 11 in the last two years.

How many aces CVEs are in CISA KEV?

None of aces's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which aces products have the most CVEs?

The aces products with the most published CVEs are Loris.

What are the most common weakness types in aces CVEs?

aces's CVEs most often map to these CWE weakness types: CWE-552 (Files or Directories Accessible to External Parties), CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-59 (Improper Link Resolution Before File Access ('Link Following')), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')).

Are there public exploits for aces vulnerabilities?

No aces CVEs currently have a tracked public exploit in this dataset.

What is the average severity of aces CVEs?

The average CVSS base score across aces's scored CVEs is 7.2.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

11 CVEs

aces Vulnerabilities

Name: aces vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for aces.

11

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.2

Avg CVSS

2026–2026

Overview

aces has 11 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.2.

This page aggregates every publicly disclosed vulnerability (CVE) affecting aces products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on aces's vulnerability posture, as a share of its 11 published CVEs.

Average CVSS: 7.2
Critical / high: 55%
Actively exploited (KEV): 0%
Public exploit available: 0%
Patch available: 100%

Severity and exploitation

How the CVSS severity of aces's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High6

Medium5

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of aces's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No aces CVEs currently have a tracked public exploit.

Most affected products

The aces products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Loris11 CVEs

Common weakness types

The CWE weakness categories most often found in aces CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish aces CVE records.

GitHub_M11 CVEs

Latest aces CVEs

The most recently disclosed vulnerabilities affecting aces.

LORIS has an open redirect field on login
CWE-601
Medium · CVSS 6.1
EPSS 0.2%2026-04-09
LORIS has a path traversal in FilesDownloadHandler
CWE-552
High · CVSS 8.6
EPSS 0.2%2026-04-08
LORIS has potential cross-site scripting in survey_accounts module
CWE-79
Medium · CVSS 6.5
EPSS 0.2%2026-04-08
LORIS incorrectly trusts user input in publication module
CWE-59
Medium · CVSS 4.3
EPSS 0.2%2026-04-08
LORIS has potential cross-site scripting in help_editor module
CWE-552
High · CVSS 8.7
EPSS 0.2%2026-04-08
LORIS has incorrect access checks in document_repository
CWE-639
Medium · CVSS 6.5
EPSS 0.2%2026-04-08
LORIS has incorrect access checks in media module
CWE-639
Medium · CVSS 6.5
EPSS 0.2%2026-04-08
LORIS has a path traversal in static router
CWE-552
High · CVSS 7.5
EPSS 0.3%2026-04-08
LORIS has a SQL injection in MRI feedback popup
CWE-89
High · CVSS 7.5
EPSS 0.2%2026-04-08
LORIS vulnerable to path traversal in electrophysiology_browser
CWE-22
High · CVSS 8.1
EPSS 0.3%2026-02-25
LORIS media module vulnerable to remote code execution
CWE-434
High · CVSS 8.8
EPSS 0.7%2026-02-25

Track new aces CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor aces CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

microsoft25,691 CVEs linux21,029 CVEs Google15,679 CVEs Apple14,792 CVEs Oracle11,815 CVEs Debian10,221 CVEs IBM8,381 CVEs Red Hat7,829 CVEs

Browse all vendors

Frequently asked questions

Common questions about aces vulnerabilities.

How many CVEs does aces have?: aces has 11 published CVE records since 2026, including 11 in the last two years.
How many aces CVEs are in CISA KEV?: None of aces's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which aces products have the most CVEs?: The aces products with the most published CVEs are Loris.
What are the most common weakness types in aces CVEs?: aces's CVEs most often map to these CWE weakness types: CWE-552 (Files or Directories Accessible to External Parties), CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-59 (Improper Link Resolution Before File Access ('Link Following')), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')).
Are there public exploits for aces vulnerabilities?: No aces CVEs currently have a tracked public exploit in this dataset.
What is the average severity of aces CVEs?: The average CVSS base score across aces's scored CVEs is 7.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track aces vulnerabilities

Monitor new aces vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing