Browse CVEs

CRITICAL 9.8 CVE-2025-41429 a-blog cms multiple versions neutralize logs improperly. If this vulnerability is exploited with CVE-2025-36560, a remote unauthenticated attacker ma… A Blog Cms after 3.1.43 Fix from $2,3002025-05-19 HIGH 7.5 CVE-2025-36560 Server-side request forgery vulnerability exists in a-blog cms multiple versions. If this vulnerability is exploited, a remote unauthenticated attack… A Blog Cms after 3.1.43 Fix from $1,9502025-05-19 HIGH 7.2 CVE-2025-27566 Path traversal vulnerability exists in a-blog cms versions prior to Ver. 3.1.43 and versions prior to Ver. 3.0.47. This is an issue with insufficient… A Blog Cms 3.0.47 / 3.1.43+ Fix from $1,9502025-05-19 MEDIUM 5.4 CVE-2025-32999 Cross-site scripting vulnerability exists in a-blog cms versions prior to Ver. 3.1.43 and prior to Ver. 3.0.47. This issue exists in a specific field… A Blog Cms 3.0.47 / 3.1.43+ Fix from $1,6002025-05-19 HIGH 7.6 CVE-2025-29461 An issue in a-blogcms 3.1.15 allows a remote attacker to obtain sensitive information via the /bid/1/admin/entry-edit/ path. A Blogcms No fix yet Fix from $1,9502025-04-17 HIGH 7.5 CVE-2025-31103 Untrusted data deserialization vulnerability exists in a-blog cms. Processing a specially crafted request may store arbitrary files on the server whe… A Blog Cms 2.10.58 / 2.11.70+ Fix from $1,9502025-03-31 MEDIUM 6.6 CVE-2024-31396 Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32. If… A Blog Cms 3.0.32 / 3.1.12+ Fix from $1,6002024-05-22 MEDIUM 6.5 CVE-2024-31394 Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, … A Blog Cms 2.10.53 / 2.11.61+ Fix from $1,6002024-05-22 MEDIUM 6.1 CVE-2024-31395 Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32,… A Blog Cms 2.10.53 / 2.11.61+ Fix from $1,6002024-05-22 MEDIUM 5.4 CVE-2024-30419 Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32,… A Blog Cms 2.10.53 / 2.11.61+ Fix from $1,6002024-05-22 MEDIUM 6.5 CVE-2024-27279 Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series Ver.3.1.9 and earlier, Ver.3.0.x series Ver.3.0.30 and earlier, Ver.2.11.x se… A Blog Cms after 3.1.9 Fix from $1,6002024-03-12 MEDIUM 5.4 CVE-2024-23782 Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, … A Blog Cms 2.10.50 / 2.11.58+ Fix from $1,6002024-01-28 HIGH 8.8 CVE-2024-23180 Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ve… A Blog Cms 2.10.50 / 2.11.58+ Fix from $1,9502024-01-23 HIGH 8.8 CVE-2024-23348 Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ve… A Blog Cms 2.10.50 / 2.11.58+ Fix from $1,9502024-01-23 HIGH 8.1 CVE-2024-23182 Relative path traversal vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.… A Blog Cms 2.10.50 / 2.11.58+ Fix from $1,9502024-01-23 MEDIUM 6.1 CVE-2024-23181 Cross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.1… A Blog Cms 2.10.50 / 2.11.58+ Fix from $1,6002024-01-23 MEDIUM 5.4 CVE-2024-23183 Cross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.1… A Blog Cms 2.10.50 / 2.11.58+ Fix from $1,6002024-01-23 MEDIUM 6.1 CVE-2022-24374 Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.… A Blog Cms 2.8.75 / 2.9.40+ Fix from $1,6002022-02-24 MEDIUM 6.5 CVE-2022-23810 Template injection (Improper Neutralization of Special Elements Used in a Template Engine) vulnerability in a-blog cms Ver.2.8.x series versions prio… A Blog Cms 2.8.75 / 2.9.40+ Fix from $1,6002022-02-24 MEDIUM 6.1 CVE-2022-23916 Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.… A Blog Cms 2.8.75 / 2.9.40+ Fix from $1,6002022-02-24 CRITICAL 9.8 CVE-2022-21142 Authentication bypass vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.74, Ver.2.9.x series versions prior to Ver.2.9.39, Ver.2… A Blog Cms 2.8.74 / 2.9.39+ Fix from $2,3002022-02-24 MEDIUM 6.1 CVE-2019-6033 Cross-site scripting vulnerability in a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allow… A Blog Cms 2.8.64 / 2.9.6+ Fix from $1,6002019-12-26 MEDIUM 6.1 CVE-2019-6034 a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allows arbitrary scripts to be executed in … A Blog Cms 2.8.64 / 2.9.6+ Fix from $1,6002019-12-26 MEDIUM 6.5 CVE-2016-1178 The session management of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to obtain or modify sensitive … A Blog Cms after 2.6.0.1 Fix from $1,6002017-04-12 MEDIUM 6.1 CVE-2016-1179 Cross-site scripting (XSS) vulnerability in the standard template of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remo… A Blog Cms after 2.6.0.1 Fix from $1,6002017-04-12