CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

7705 matches found

OSV•added 2022/02/24 3:15 p.m.•2 views

CVE-2022-23810

Template injection Improper Neutralization of Special Elements Used in a Template Engine vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to Ver.2.10.44, Ver.2.11.x series versions prior to...

6.5CVSS6.6AI score0.01073EPSS

Exploits0References2

ATTACKERKB•added 2022/02/24 3:15 p.m.•5 views

CVE-2022-23916

Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to Ver.2.10.44, Ver.2.11.x series versions prior to Ver.2.11.42, and Ver.3.0.x series versions prior to Ver.3.0.1 allows ...

6.1CVSS6.4AI score0.0087EPSS

Exploits0References3

NVD•added 2022/02/24 3:15 p.m.•18 views

CVE-2022-23916

6.1CVSS0.00744EPSS

Exploits0References2

NVD•added 2022/02/24 3:15 p.m.•11 views

CVE-2022-23810

6.5CVSS0.01073EPSS

Exploits0References2

OSV•added 2022/02/24 3:15 p.m.•2 views

CVE-2022-21142

Authentication bypass vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.74, Ver.2.9.x series versions prior to Ver.2.9.39, Ver.2.10.x series versions prior to Ver.2.10.43, and Ver.2.11.x series versions prior to Ver.2.11.41 allows a remote unauthenticated attacker to bypass...

9.8CVSS5.8AI score

Exploits0References2

ATTACKERKB•added 2022/02/24 3:15 p.m.•3 views

CVE-2022-21142

9.8CVSS6.9AI score0.01487EPSS

Exploits0References3

NVD•added 2022/02/24 3:15 p.m.•13 views

CVE-2022-21142

9.8CVSS0.01487EPSS

Exploits0References2

Prion•added 2022/02/24 3:15 p.m.•11 views

Sql injection

4CVSS6.8AI score0.01073EPSS

Exploits0References2Affected Software1

Prion•added 2022/02/24 3:15 p.m.•15 views

Authentication flaw

6.8CVSS9.6AI score0.01487EPSS

Exploits0References2Affected Software1

Prion•added 2022/02/24 3:15 p.m.•18 views

Cross site scripting

4.3CVSS5.9AI score0.0087EPSS

Exploits0References2Affected Software1

Prion•added 2022/02/24 3:15 p.m.•15 views

Cross site scripting

4.3CVSS5.9AI score0.0087EPSS

Exploits0References2Affected Software1

CVE•added 2022/02/24 9:50 a.m.•99 views

CVE-2022-24374

Summary: CVE-2022-24374 describes a cross-site scripting (XSS) vulnerability in a-blog CMS. The connected Red Hat advisory for CVE-2022-23916 confirms the same underlying issue across multiple branches and provides concrete fixed versions. Affected platforms/versions: a-blog CMS Ver. 2.8.x < 2...

6.1CVSS6AI score0.0087EPSS

Exploits0References2Affected Software1

CVE•added 2022/02/24 9:50 a.m.•100 views

CVE-2022-23916

CVE-2022-23916 describes a cross-site scripting (XSS) vulnerability in a-blog cms where an authenticated remote attacker can inject arbitrary scripts via unspecified vectors. Affected series and minimum patched levels are: 2.8.x before 2.8.75, 2.9.x before 2.9.40, 2.10.x before 2.10.44, 2.11.x be...

6.1CVSS6AI score0.00744EPSS

Exploits0References2Affected Software1

Cvelist•added 2022/02/24 9:50 a.m.•22 views

CVE-2022-23916

6.3AI score0.00744EPSS

Exploits0References2

Cvelist•added 2022/02/24 9:50 a.m.•16 views

CVE-2022-23810

7.2AI score0.01073EPSS

Exploits0References2

CVE•added 2022/02/24 9:50 a.m.•135 views

CVE-2022-23810

The CVE-2022-23810 issue affects a-blog cms (Appleple) with template injection (Improper Neutralization of Special Elements Used in a Template Engine). A remote authenticated attacker can obtain arbitrary files on the server via unspecified vectors. Affected versions include: 2.8.x before 2.8.75,...

6.5CVSS6.9AI score0.01073EPSS

Exploits0References2Affected Software1

CVE•added 2022/02/24 9:50 a.m.•108 views

CVE-2022-21142

CVE-2022-21142 is an authentication bypass vulnerability affecting a-blog cms. The issue allows remote unauthenticated attackers to bypass login under specific conditions in multiple series: 2.8.x (before 2.8.74), 2.9.x (before 2.9.39), 2.10.x (before 2.10.43), and 2.11.x (before 2.11.41). Public...

9.8CVSS9.6AI score0.01487EPSS

Exploits0References2Affected Software1

Cvelist•added 2022/02/24 9:50 a.m.•17 views

CVE-2022-21142

9.9AI score0.01487EPSS

Exploits0References2

Positive Technologies•added 2022/02/24 12:0 a.m.•3 views

PT-2022-14875 · Unknown · A-Blog Cms

Name of the Vulnerable Software and Affected Versions: a-blog cms versions prior to 2.8.74 a-blog cms versions prior to 2.9.39 a-blog cms versions prior to 2.10.43 a-blog cms versions prior to 2.11.41 Description: The issue allows a remote unauthenticated attacker to bypass authentication under...

9.8CVSS9.6AI score0.01487EPSS

Exploits0References3

CNVD•added 2022/02/23 12:0 a.m.•13 views

WordPress WP Content Copy Protection

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the server in PHP and MySQL to set up a personal blog site. WordPress plugin is a WordPress open source application plug-in. WordPress WP Content Copy Protection...

8.8CVSS2.3AI score0.00415EPSS

Exploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by