dbcve.org
Vulnerability index

Browse CVEs

5 matching
Cards Compact
Filters 2 Clear all
Severity

Filters apply as you choose them.

Top technology Linux 13140 Google 12536 Microsoft 12379 Oracle 6843 Apple 6692 Adobe 6387 Ibm 6336 Cisco 5759 Debian 3919 Mozilla 2895 Apache 2864 Redhat 2592
Razorcms MEDIUM 5.4
CVE-2018-19905

HTML injection exists in razorCMS 3.4.8 via the /#/page keywords parameter.

No fix yet
Fix from $1,600 2018-12-31
Razorcms MEDIUM 5.4
CVE-2018-19906

Stored XSS exists in razorCMS 3.4.8 via the /#/page description parameter.

No fix yet
Fix from $1,600 2018-12-31
Razorcms HIGH 8.8
CVE-2018-17986

rars/user/data in razorCMS 3.4.8 allows CSRF for changing the password of an admin user.

No fix yet
Fix from $1,950 2018-10-05
Razorcms MEDIUM 5.4
CVE-2018-16727

razorCMS 3.4.7 allows Stored XSS via the keywords of the homepage within the settings component.

No fix yet
Fix from $1,600 2018-09-12
Razorcms MEDIUM 5.4
CVE-2018-16726

razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component.

No fix yet
Fix from $1,600 2018-09-12