Vulnerability index

Browse CVEs

17 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Icecms HIGH 7.5
CVE-2025-22983

An access control issue in the component /square/getAllSquare/circle of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive informatio…

No fix yet
Fix from $1,950 2025-01-14
Icecms HIGH 7.5
CVE-2025-22984

An access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive in…

No fix yet
Fix from $1,950 2025-01-14
Icecms CRITICAL 9.8
CVE-2024-48202

icecms <=3.4.7 has a File Upload vulnerability in FileUtils.java,uploadFile.

Fix: after 3.4.7
Fix from $2,300 2024-10-30
Icecms CRITICAL 9.8
CVE-2024-46612

IceCMS v3.4.7 and before was discovered to contain a hardcoded JWT key, allowing an attacker to forge JWT authentication information.

Fix: 3.4.7+
Fix from $2,300 2024-09-25
Icecms HIGH 7.6
CVE-2024-46607

Incorrect access control in IceCMS v3.4.7 and before allows attackers to authenticate by entering any arbitrary values as the username and password v…

Fix: after 3.4.7
Fix from $1,950 2024-09-25
Icecms HIGH 7.5
CVE-2024-46609

An access control issue in the CheckVip function in UserController.java of IceCMS v3.4.7 and before allows unauthenticated attackers to access and re…

Fix: after 3.4.7
Fix from $1,950 2024-09-25
Icecms HIGH 7.5
CVE-2024-46610

An access control issue in IceCMS v3.4.7 and before allows attackers to arbitrarily modify users' information, including username and password, via a…

Fix: after 3.4.7
Fix from $1,950 2024-09-25
Icecms HIGH 8.8
CVE-2023-6761

A vulnerability, which was classified as problematic, has been found in Thecosy IceCMS up to 2.0.1. This issue affects some unknown processing of the…

No fix yet
Fix from $1,950 2023-12-13
Icecms MEDIUM 5.4
CVE-2023-6760

A vulnerability classified as critical was found in Thecosy IceCMS up to 2.0.1. This vulnerability affects unknown code. The manipulation leads to ma…

No fix yet
Fix from $1,600 2023-12-13
Icecms HIGH 7.5
CVE-2023-6759

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. This affects an unknown part of the file /WebResource/resource of t…

No fix yet
Fix from $1,950 2023-12-13
Icecms CRITICAL 9.8
CVE-2023-6756

A vulnerability was found in Thecosy IceCMS 2.0.1. It has been classified as problematic. Affected is an unknown function of the file /login of the c…

No fix yet
Fix from $2,300 2023-12-13
Icecms MEDIUM 6.5
CVE-2023-6757

A vulnerability was found in Thecosy IceCMS 2.0.1. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of…

No fix yet
Fix from $1,600 2023-12-13
Icecms MEDIUM 6.1
CVE-2023-6466

A vulnerability was found in Thecosy IceCMS 2.0.1. It has been declared as problematic. This vulnerability affects unknown code of the file /planet o…

No fix yet
Fix from $1,600 2023-12-02
Icecms MEDIUM 5.3
CVE-2023-6438

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /WebArticle/articles/ o…

No fix yet
Fix from $1,600 2023-11-30
Icecms CRITICAL 9.8
CVE-2023-40833

An issue in Thecosy IceCMS v.1.0.0 allows a remote attacker to gain privileges via the Id and key parameters in getCosSetting.

Mitigation only
Fix from $2,300 2023-10-12
Icecms MEDIUM 5.4
CVE-2023-33356

IceCMS v1.0.0 is vulnerable to Cross Site Scripting (XSS).

No fix yet
Fix from $1,600 2023-05-25
Icecms HIGH 7.5
CVE-2023-33355

IceCMS v1.0.0 has Insecure Permissions. There is unauthorized access to the API, resulting in the disclosure of sensitive information.

No fix yet
Fix from $1,950 2023-05-25