dbcve.org
Vulnerability index

Browse CVEs

8 matching
Cards Compact
Filters 2 Clear all
Severity

Filters apply as you choose them.

Top technology Linux 13140 Google 12525 Microsoft 12378 Apple 6692 Oracle 6673 Adobe 6383 Ibm 6286 Cisco 5751 Debian 3919 Mozilla 2886 Apache 2864 Redhat 2586
Oneblog HIGH 7.5
CVE-2025-56264

The /api/comment endpoint in zhangyd-c OneBlog 2.3.9 contains a denial-of-service vulnerability.

No fix yet
Fix from $1,950 2025-09-16
Oneblog MEDIUM 6.1
CVE-2024-29469

A stored cross-site scripting (XSS) vulnerability in OneBlog v2.3.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload i…

No fix yet
Fix from $1,600 2024-03-20
Oneblog MEDIUM 6.1
CVE-2024-29470

OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the component {{rootpath}}/links.

No fix yet
Fix from $1,600 2024-03-20
Oneblog MEDIUM 6.1
CVE-2024-29473

OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Role Management module.

No fix yet
Fix from $1,600 2024-03-20
Oneblog MEDIUM 5.4
CVE-2024-29471

OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Notice Manage module.

No fix yet
Fix from $1,600 2024-03-20
Oneblog MEDIUM 5.4
CVE-2024-29472

OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Privilege Management module.

No fix yet
Fix from $1,600 2024-03-20
Oneblog MEDIUM 5.4
CVE-2024-29474

OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the User Management module.

No fix yet
Fix from $1,600 2024-03-20
Oneblog MEDIUM 6.5
CVE-2022-34012

Insecure permissions in OneBlog v2.3.4 allows low-level administrators to reset the passwords of high-level administrators who hold greater privilege…

No fix yet
Fix from $1,600 2022-06-23