CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| ÉLEVÉE7.2 |
SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method |
| 27/09/2023 |
| CVE-2023-39376 | MOYENNE6.5 |
SiberianCMS - CWE-284 Improper Access Control Authorized user may disable a security feature over the network
| 27/09/2023 |
| CVE-2023-39375 | CRITIQUE9.8 |
SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges
| 27/09/2023 |
| CVE-2017-6906 | MOYENNE6.1 | An issue was discovered in SiberianCMS before 4.10.0. The vulnerability exists due to insufficient filtration of user-supplied data (log) passed to the "SiberianCMS-master/errors/500.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. | 15/03/2017 |