Drupal core 安全漏洞

Drupal core is a free, open source content management system developed in PHP by the Drupal community. A security vulnerability exists in Drupal core that stems from improper authorization and could lead to forced browsing...

编号撤回

Concrete CMS is a team-oriented open source content management system from Concrete CMS Open Source. This CVE number has been withdrawn...

编号撤回

Concrete CMS is a team-oriented open source content management system from Concrete CMS Open Source. This CVE number has been withdrawn...

WCMS 代码注入漏洞

WCMS is a content management system CMS from the individual developers at Vedegis. A code injection vulnerability exists in WCMS version 11, which stems from the fact that incorrect manipulation of the parameter Username can lead to cross-site scripting...

编号撤回

Concrete CMS is a team-oriented open source content management system from Concrete CMS Open Source. This CVE number has been withdrawn...

编号撤回

Concrete CMS is a team-oriented open source content management system from Concrete CMS Open Source. This CVE number has been withdrawn...

编号撤回

Concrete CMS is a team-oriented open source content management system from Concrete CMS Open Source. This CVE number has been withdrawn...

WCMS 代码问题漏洞

WCMS is a content management system CMS from the individual developers at Vedegis. A code issue vulnerability exists in WCMS version 11, which stems from an incorrect operation of the parameter Upload that can lead to unlimited uploads...

Drupal core 跨站脚本漏洞

Drupal core is a free, open source content management system developed in PHP by the Drupal community. A cross-site scripting vulnerability exists in Drupal core that stems from vulnerability to cross-site scripting attacks...

Cross-site Scripting (XSS)

Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Cross-site Scripting XSS through the manipulation of the Navigation/Title Text/Description Source argument due to improper sanitization. Details Cross-site scripting or XSS is a code...

编号撤回

Concrete CMS is a team-oriented open source content management system from Concrete CMS Open Source. This CVE number has been withdrawn...

appleple a-blog cms 代码问题漏洞

appleple a-blog cms is a content management system from appleple. A code issue vulnerability exists in versions of appleple a-blog cms prior to Ver.3.1.37, which stems from improper handling of deserialization of untrustworthy data, which could lead to the execution of arbitrary script...

SEMCMS SQL注入漏洞

SEMCMS is SEMCMS open source content management system CMS for foreign trade websites that support multiple languages. SEMCMS 5.0 and previous versions exist SQL injection vulnerability, the vulnerability stems from SEMCMSFuction.php exist SQL injection...

VulnCheck KEV: CVE-2019-9874

Sitecore CMS and Experience Platform XP contain a deserialization vulnerability in the Sitecore.Security.AntiCSRF module that allows an unauthenticated attacker to execute arbitrary code by sending a serialized .NET object in the HTTP POST parameter CSRFTOKEN...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Container Release Update

An update is now available for Red Hat Ansible Automation Platform 2.4 Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams,...

JIZHICMS 安全漏洞

JIZHICMS Jizhi CMS is an open source content management system CMS from the Chinese company Jizhi JIZHI. A security vulnerability exists in JIZHICMS version 1.7.0 and prior versions, which stems from improper authorization...

CVE-2025-29790 Contao allows cross-site scripting through SVG uploads

Contao is an Open Source CMS. Users can upload SVG files with malicious code, which is then executed in the back end and/or front end. This vulnerability is fixed in Contao 4.13.54, 5.3.30, or 5.5.6...

UJCMS 代码注入漏洞

UJCMS is a Java open source content management system from dromara open source. A code injection vulnerability exists in UJCMS version 9.7.5, which originates from cross-site scripting of the uploadZip/upload function in the File Upload component and could lead to a remote attack...

CVE-2025-2304

A Privilege Escalation through a Mass Assignment exists in Camaleon CMS When a user wishes to change his password, the 'updatedajax' method of the UsersController is called. The vulnerability stems from the use of the dangerous permit! method, which allows all parameters to pass through without a...

CVE-2025-27602

Umbraco is a free and open source .NET content management system. In versions of Umbraco's web backoffice program prior to versions 10.8.9 and 13.7.1, via manipulation of backoffice API URLs, it's possible for authenticated backoffice users to retrieve or delete content or media held within folde...