CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

332 matches found

attackerkb•added 2022/02/24 3:15 p.m.•17 views

CVE-2022-23916

Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to Ver.2.10.44, Ver.2.11.x series versions prior to Ver.2.11.42, and Ver.3.0.x series versions prior to Ver.3.0.1 allows ...

6.1CVSS6.4AI score0.00905EPSS

SaveExploits0References3

osv_cve•added 2022/02/24 3:15 p.m.•18 views

CVE-2022-23916

6.1CVSS6.4AI score0.00774EPSS

SaveExploits0References2

osv_cve•added 2022/02/24 3:15 p.m.•19 views

CVE-2022-23810

Template injection Improper Neutralization of Special Elements Used in a Template Engine vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to Ver.2.10.44, Ver.2.11.x series versions prior to...

6.5CVSS6.6AI score0.01116EPSS

SaveExploits0References2

NVD•added 2022/02/24 3:15 p.m.•37 views

CVE-2022-23810

6.5CVSS0.01116EPSS

SaveExploits0References2

NVD•added 2022/02/24 3:15 p.m.•29 views

CVE-2022-23916

6.1CVSS0.00774EPSS

SaveExploits0References2

osv_cve•added 2022/02/24 3:15 p.m.•19 views

CVE-2022-21142

Authentication bypass vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.74, Ver.2.9.x series versions prior to Ver.2.9.39, Ver.2.10.x series versions prior to Ver.2.10.43, and Ver.2.11.x series versions prior to Ver.2.11.41 allows a remote unauthenticated attacker to bypass...

9.8CVSS5.8AI score0.01547EPSS

SaveExploits0References2

NVD•added 2022/02/24 3:15 p.m.•25 views

CVE-2022-21142

9.8CVSS0.01547EPSS

SaveExploits0References2

Prion•added 2022/02/24 3:15 p.m.•29 views

Authentication flaw

6.8CVSS9.6AI score0.01547EPSS

SaveExploits0References2Affected Software1

Prion•added 2022/02/24 3:15 p.m.•26 views

Sql injection

4CVSS6.8AI score0.01116EPSS

SaveExploits0References2Affected Software1

Prion•added 2022/02/24 3:15 p.m.•31 views

Cross site scripting

4.3CVSS5.9AI score0.00905EPSS

SaveExploits0References2Affected Software1

Prion•added 2022/02/24 3:15 p.m.•19 views

Cross site scripting

4.3CVSS5.9AI score0.00905EPSS

SaveExploits0References2Affected Software1

CVE•added 2022/02/24 9:50 a.m.•121 views

CVE-2022-24374

Summary: CVE-2022-24374 describes a cross-site scripting (XSS) vulnerability in a-blog CMS. The connected Red Hat advisory for CVE-2022-23916 confirms the same underlying issue across multiple branches and provides concrete fixed versions. Affected platforms/versions: a-blog CMS Ver. 2.8.x < 2...

6.1CVSS6AI score0.00905EPSS

SaveExploits0References2Affected Software1

CVE•added 2022/02/24 9:50 a.m.•128 views

CVE-2022-23916

CVE-2022-23916 describes a cross-site scripting (XSS) vulnerability in a-blog cms where an authenticated remote attacker can inject arbitrary scripts via unspecified vectors. Affected series and minimum patched levels are: 2.8.x before 2.8.75, 2.9.x before 2.9.40, 2.10.x before 2.10.44, 2.11.x be...

6.1CVSS6AI score0.00774EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2022/02/24 9:50 a.m.•44 views

CVE-2022-23810

7.2AI score0.01116EPSS

SaveExploits0References2

CVE•added 2022/02/24 9:50 a.m.•158 views

CVE-2022-23810

The CVE-2022-23810 issue affects a-blog cms (Appleple) with template injection (Improper Neutralization of Special Elements Used in a Template Engine). A remote authenticated attacker can obtain arbitrary files on the server via unspecified vectors. Affected versions include: 2.8.x before 2.8.75,...

6.5CVSS6.9AI score0.01116EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2022/02/24 9:50 a.m.•32 views

CVE-2022-21142

9.9AI score0.01547EPSS

SaveExploits0References2

CVE•added 2022/02/24 9:50 a.m.•133 views

CVE-2022-21142

CVE-2022-21142 is an authentication bypass vulnerability affecting a-blog cms. The issue allows remote unauthenticated attackers to bypass login under specific conditions in multiple series: 2.8.x (before 2.8.74), 2.9.x (before 2.9.39), 2.10.x (before 2.10.43), and 2.11.x (before 2.11.41). Public...

9.8CVSS9.6AI score0.01547EPSS

SaveExploits0References2Affected Software1

Rapid7 Vulnerability Database (full)•added 2022/02/24 12:00 a.m.•4 views

CVE-2022-24374: Improper Neutralization of Input During Web Page Generation

6.1CVSS6.2AI score0.00905EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2022/02/24 12:00 a.m.•8 views

CVE-2022-23810: Improper Control of Generation of Code

6.5CVSS6.5AI score0.01116EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2022/02/24 12:00 a.m.•6 views

CVE-2022-21142: Authentication Bypass by Spoofing

9.8CVSS6.8AI score0.01547EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by