dbcve.org
Vulnerability index

Browse CVEs

6 matching
Cards Compact
Filters 1 Clear all
Severity

Filters apply as you choose them.

Top technology Linux 13140 Google 12525 Microsoft 12378 Apple 6692 Oracle 6673 Adobe 6383 Ibm 6286 Cisco 5751 Debian 3919 Mozilla 2886 Apache 2864 Redhat 2586
Blogengine.net HIGH 7.1
CVE-2019-10717EPSS 5%

BlogEngine.NET 3.3.7.0 allows /api/filemanager Directory Traversal via the path parameter.

Patch available
Fix from $1,950 2019-07-03
Blogengine.net MEDIUM 6.1
CVE-2019-10721

BlogEngine.NET 3.3.7.0 allows a Client Side URL Redirect via the ReturnUrl parameter, related to BlogEngine/BlogEngine.Core/Services/Security/Securit…

Patch available
Fix from $1,600 2019-07-03
Blogengine.net HIGH 7.5
CVE-2019-11392

BlogEngine.NET 3.3.7 and earlier allows XXE via an apml file to syndication.axd.

Fix: after 3.3.7
Fix from $1,950 2019-06-21
Blogengine.net HIGH 8.8
CVE-2019-10719EPSS 8%

BlogEngine.NET 3.3.7.0 and earlier allows Directory Traversal and Remote Code Execution because file creation is mishandled, related to /api/upload a…

Fix: after 3.3.7.0
Fix from $1,950 2019-06-21
Blogengine.net HIGH 7.5
CVE-2019-10718

BlogEngine.NET 3.3.7.0 and earlier allows XML External Entity Blind Injection, related to pingback.axd and BlogEngine.Core/Web/HttpHandlers/PingbackH…

Fix: after 3.3.7.0
Fix from $1,950 2019-06-21
Blogengine.net MEDIUM 5.0
CVE-2013-6953

BlogEngine.NET 2.8.0.0 and earlier allows remote attackers to read usernames and password hashes via a request for the sioc.axd file.

Fix: after 2.8
Fix from $1,600 2014-01-03