Browse CVEs

MEDIUM 5.4 CVE-2021-4103 Cross-site Scripting (XSS) - Stored in GitHub repository vanessa219/vditor prior to 1.0.34. Vditor 1.0.34+ Fix from $1,6002022-01-23 MEDIUM 6.1 CVE-2019-17488 b3log Symphony (aka Sym) before 3.6.0 has XSS via the HTTP User-Agent header. Symphony 3.6.0+ Fix from $1,6002019-10-10 HIGH 7.5 CVE-2019-13915 b3log Wide before 1.6.0 allows three types of attacks to access arbitrary files. First, the attacker can write code in the editor, and compile and ru… Wide 1.6.0+ Fix from $1,9502019-07-18 MEDIUM 6.1 CVE-2018-16248 b3log Solo 2.9.3 has XSS in the Input page under the "Publish Articles" menu with an ID of "articleTags" stored in the "tag" JSON field, which allows… Solo No fix yet Fix from $1,6002019-06-20 MEDIUM 6.1 CVE-2019-9142 An issue was discovered in b3log Symphony (aka Sym) before v3.4.7. XSS exists via the userIntro and userNickname fields to processor/SettingsProcesso… Symphony 3.4.7+ Fix from $1,6002019-02-25 CRITICAL 9.8 CVE-2018-10469 b3log Symphony (aka Sym) 2.6.0 allows remote attackers to upload and execute arbitrary JSP files via the name[] parameter to the /upload URI. Symphony No fix yet Fix from $2,3002018-04-27 MEDIUM 5.4 CVE-2017-16821 b3log Symphony (aka Sym) 2.2.0 has XSS in processor/AdminProcessor.java in the admin console, as demonstrated by a crafted X-Forwarded-For HTTP heade… Symphony No fix yet Fix from $1,6002017-11-15