194 matches found
CVE-2026-87727
a-blog cms Ver. 3.2.33 and earlier contains a path traversal vulnerability, which allows an unauthenticated attacker to read or delete arbitrary files on the affected product...
EUVD-2026-76020
a-blog cms Ver. 3.2.33 and earlier contains a path traversal vulnerability, which allows an unauthenticated attacker to read or delete arbitrary files on the affected product...
CVE-2026-87727
a-blog cms Ver. 3.2.33 and earlier contains a path traversal vulnerability, which allows an unauthenticated attacker to read or delete arbitrary files on the affected product...
CVE-2026-87727
a-blog cms Ver. 3.2.33 and earlier contains a path traversal vulnerability, which allows an unauthenticated attacker to read or delete arbitrary files on the affected product...
CVE-2022-23916
Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to Ver.2.10.44, Ver.2.11.x series versions prior to Ver.2.11.42, and Ver.3.0.x series versions prior to Ver.3.0.1 allows ...
EUVD-2016-2283
Malware in sbrugna...
EUVD-2019-15601
Malware in sbrugna...
EUVD-2019-15602
Malware in sbrugna...
EUVD-2016-2282
Malware in sbrugna...
EUVD-2024-21235
Malicious code in bioql PyPI...
EUVD-2022-29269
Malicious code in bioql PyPI...
EUVD-2025-14787
Malicious code in bioql PyPI...
EUVD-2022-26389
Malicious code in bioql PyPI...
EUVD-2022-28836
Malicious code in bioql PyPI...
EUVD-2025-15667
Malicious code in bioql PyPI...
EUVD-2024-20699
Malicious code in bioql PyPI...
EUVD-2022-28740
Malicious code in bioql PyPI...
EUVD-2025-15669
Malicious code in bioql PyPI...
CVE-2024-27279
Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series Ver.3.1.9 and earlier, Ver.3.0.x series Ver.3.0.30 and earlier, Ver.2.11.x series Ver.2.11.59 and earlier, Ver.2.10.x series Ver.2.10.51 and earlier, and Ver.2.9 and earlier versions. If this vulnerability is exploited, a use...
CVE-2024-25559
URL spoofing vulnerability exists in a-blog cms Ver.3.1.0 to Ver.3.1.8. If an attacker sends a specially crafted request, the administrator of the product may be forced to access an arbitrary website when clicking a link in the audit log...