Lucene search
K

23 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-13784

Malware in sbrugna...

6.5CVSS6.5AI score0.00208EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2022-39284

Malicious code in bioql PyPI...

8.8CVSS8.7AI score0.00118EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:17 p.m.4 views

CVE-2022-36579

Wellcms 2.2.0 is vulnerable to Cross Site Request Forgery CSRF...

8.8CVSS6.9AI score0.00118EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:11 p.m.4 views

CVE-2020-21005

WellCMS 2.0 beta3 is vulnerable to File Upload. A user can log in to the CMS background and upload a picture. Because the upload file type is controllable, the user can modify the upload file type to get webshell...

6.5CVSS6.9AI score0.00208EPSS
Exploits1
CNVD
CNVD
added 2022/08/23 12:0 a.m.30 views

WellCMS Cross-site Request Forgery Vulnerability

WellCMS is an open source, billion-load, mobile-leaning, lightweight, super-responsive, high-load CMS that is the best choice for large data volumes and high concurrent access websites. Users - Create User - Add New User does not sufficiently verify that the request is from a trusted user. An...

8.8CVSS0.8AI score0.00118EPSS
Exploits1References1
OSV
OSV
added 2022/08/19 5:15 p.m.9 views

CVE-2022-36579

Wellcms 2.2.0 is vulnerable to Cross Site Request Forgery CSRF...

8.8CVSS6.8AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/08/19 5:15 p.m.1 views

CVE-2022-36579

Wellcms 2.2.0 is vulnerable to Cross Site Request Forgery CSRF...

8.8CVSS7.3AI score0.00118EPSS
Exploits1References2
NVD
NVD
added 2022/08/19 5:15 p.m.7 views

CVE-2022-36579

Wellcms 2.2.0 is vulnerable to Cross Site Request Forgery CSRF...

8.8CVSS0.00118EPSS
Exploits1References1
Prion
Prion
added 2022/08/19 5:15 p.m.9 views

Cross site request forgery (csrf)

Wellcms 2.2.0 is vulnerable to Cross Site Request Forgery CSRF...

6.8CVSS8.6AI score0.00118EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2022/08/19 4:58 p.m.56 views

CVE-2022-36579

CVE-2022-36579 affects Wellcms 2.2.0 and is described as a Cross-Site Request Forgery (CSRF) vulnerability. The NVD entry assigns CVSSv3.1 base score 8.8 (HIGH) with an attack vector of Network, low attack complexity, privileges required NONE, and user interaction required, indicating a high-impa...

8.8CVSS8.7AI score0.00118EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/08/19 4:58 p.m.9 views

CVE-2022-36579

Wellcms 2.2.0 is vulnerable to Cross Site Request Forgery CSRF...

8.9AI score0.00118EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/08/19 12:0 a.m.0 views

WellCMS 跨站请求伪造漏洞

WellCMS is an open source, billion-load, mobile-leaning, lightweight, super-responsive, high-load CMS that is the best choice for large data volumes and high concurrent access websites. Users - Create User - Add New User does not sufficiently verify that the request is from a trusted user. An...

8.8CVSS6.7AI score0.00118EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2022/08/19 12:0 a.m.1 views

PT-2022-23483 · Wellcms · Wellcms

Name of the Vulnerable Software and Affected Versions: Wellcms version 2.2.0 Description: The issue is related to Cross Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. Recommendations: For Wellcms version 2.2.0, as a...

8.8CVSS8.5AI score0.00118EPSS
Exploits1References4
CNVD
CNVD
added 2021/06/04 12:0 a.m.7 views

WellCMS File Upload Vulnerability

WellCMS is an open source with a billion load, tend to mobile, lightweight, with ultra-fast response ability of high load CMS, is a large amount of data, high concurrency access to the site's best choice of light CMS. has a safe, efficient, stable, ultra-fast speed, super load characteristics. A...

6.5CVSS6.7AI score0.00208EPSS
Exploits1References1
NVD
NVD
added 2021/06/03 2:15 p.m.9 views

CVE-2020-21005

WellCMS 2.0 beta3 is vulnerable to File Upload. A user can log in to the CMS background and upload a picture. Because the upload file type is controllable, the user can modify the upload file type to get webshell...

6.5CVSS0.00208EPSS
Exploits1References2
OSV
OSV
added 2021/06/03 2:15 p.m.1 views

CVE-2020-21005

WellCMS 2.0 beta3 is vulnerable to File Upload. A user can log in to the CMS background and upload a picture. Because the upload file type is controllable, the user can modify the upload file type to get webshell...

6.5CVSS5.8AI score0.00208EPSS
Exploits1References2
Prion
Prion
added 2021/06/03 2:15 p.m.9 views

Design/Logic Flaw

WellCMS 2.0 beta3 is vulnerable to File Upload. A user can log in to the CMS background and upload a picture. Because the upload file type is controllable, the user can modify the upload file type to get webshell...

4CVSS6.4AI score0.00208EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2021/06/03 1:54 p.m.9 views

CVE-2020-21005

WellCMS 2.0 beta3 is vulnerable to File Upload. A user can log in to the CMS background and upload a picture. Because the upload file type is controllable, the user can modify the upload file type to get webshell...

6.5AI score0.00208EPSS
Exploits1References2
CVE
CVE
added 2021/06/03 1:54 p.m.164 views

CVE-2020-21005

WellCMS 2.0 beta3 is vulnerable to a file-upload flaw where the upload file type is controllable in the CMS background, enabling an attacker to modify the file type and potentially obtain a webshell. Root cause: incomplete verification of uploaded file types. Impact: webshell capability is implie...

6.5CVSS6.4AI score0.00208EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2021/06/03 12:0 a.m.1 views

WellCMS 代码问题漏洞

WellCMS is an open source with a billion load, tend to mobile, lightweight, with ultra-fast response ability of high load CMS, is a large amount of data, high concurrency access to the site's best choice of light CMS. has a safe, efficient, stable, ultra-fast speed, super load characteristics. A...

6.5CVSS5.6AI score0.00208EPSS
Exploits1References3
Rows per page
Query Builder