VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

403.394 vulnerabilities · 1.767 actively exploited (CISA KEV)

q-cms ✕Clear filters

12 results

ID	Severity	Summary	Published
CVE-2025-50233	MITTEL6.5	A vulnerability in QCMS version 6.0.5 allows authenticated users to read arbitrary files from the server due to insufficient validation of the "Name" parameter in the backend template editor. By manipulating the parameter, attackers can perform directory traversal and access sensitive files outside the intended templat	06/08/2025
CVE-2020-10578	HOCH7.5	An arbitrary file read vulnerability exists in system/controller/backend/template.php in QCMS v3.0.1.	14/03/2020
CVE-2018-14978	HOCH8.8	An issue was discovered in QCMS 3.0.1. CSRF exists via the backend/user/admin/add.html URI.	06/08/2018
CVE-2018-14977	MITTEL6.1