CVE search

401,051 vulnerabilities · 1,766 actively exploited (CISA KEV)

37 results

ID	Severity	Summary	Published
CVE-2025-10397	HIGH7.2	A vulnerability was identified in Magicblack MacCMS 2025.1000.4050. This affects an unknown part of the component API Handler. The manipulation of the argument cjurl leads to server-side request forgery. The attack can be initiated remotely. The exploit is publicly available and might be used.	14/09/2025
CVE-2025-10395	HIGH7.2	A vulnerability was found in Magicblack MacCMS 2025.1000.4050. Affected by this vulnerability is the function col_url of the component Scheduled Task Handler. Performing manipulation of the argument cjurl results in server-side request forgery. It is possible to initiate the attack remotely.	14/09/2025
CVE-2025-10122	HIGH7.2	A vulnerability was found in Maccms10 2025.1000.4050. Affected is the function rep of the file application/admin/controller/Database.php. Performing manipulation of the argument where results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.