CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ（NVD、OSV、GitHub）を、CVSS、EPSS、実際に悪用されているか（CISA KEV）とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ（NVD、OSV、GitHub）を、CVSS、EPSS、実際に悪用されているか（CISA KEV）とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
| 21/04/2023 |
| CVE-2022-48007 | 中5.4 | A stored cross-site scripting (XSS) vulnerability in identification.php of Piwigo v13.4.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the User-Agent. | 27/01/2023 |
| CVE-2022-37183 | 中6.1 | Piwigo 12.3.0 is vulnerable to Cross Site Scripting (XSS) via /search/1940/created-monthly-list. | 31/08/2022 |
| CVE-2022-32297 | 高7.5 | Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function. | 14/07/2022 |
| CVE-2021-40553 | 高8.8 | piwigo 11.5.0 is affected by a remote code execution (RCE) vulnerability in the LocalFiles Editor. | 28/06/2022 |
| CVE-2021-40678 | 中5.4 | In Piwigo 11.5.0, there exists a persistent cross-site scripting in the single mode function through /admin.php?page=batch_manager&mode=unit. | 14/06/2022 |
| CVE-2021-40317 | 高8.8 | Piwigo 11.5.0 is affected by a SQL injection vulnerability via admin.php and the id parameter. | 26/05/2022 |
| CVE-2020-19217 | 高8.8 | SQL Injection vulnerability in admin/batch_manager.php in piwigo v2.9.5, via the filter_category parameter to admin.php?page=batch_manager. | 06/05/2022 |
| CVE-2020-19216 | 高8.8 | SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=group_perm. | 06/05/2022 |
| CVE-2020-19215 | 高8.8 | SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=user_perm. | 06/05/2022 |
| CVE-2020-19213 | 緊急9.8 | SQL Injection vulnerability in cat_move.php in piwigo v2.9.5, via the selection parameter to move_categories. | 06/05/2022 |
| CVE-2020-19212 | 中4.9 | SQL Injection vulnerability in admin/group_list.php in piwigo v2.9.5, via the group parameter to delete. | 06/05/2022 |
| CVE-2022-26267 | 高7.5 | Piwigo v12.2.0 was discovered to contain an information leak via the action parameter in /admin/maintenance_actions.php. | 18/03/2022 |
| CVE-2022-26266 | 高8.8 | Piwigo v12.2.0 was discovered to contain a SQL injection vulnerability via pwg.users.php. | 18/03/2022 |
| CVE-2022-24620 | 中5.4 | Piwigo version 12.2.0 is vulnerable to stored cross-site scripting (XSS), which can lead to privilege escalation. In this way, admin can steal webmaster's cookies to get the webmaster's access. | 24/02/2022 |
| CVE-2021-45357 | 中6.1 | Cross Site Scripting (XSS) vulnerability exists in Piwigo 12.x via the pwg_activity function in include/functions.inc.php. | 10/02/2022 |
| CVE-2016-3735 | 高8.1 | Piwigo is image gallery software written in PHP. When a criteria is not met on a host, piwigo defaults to usingmt_rand in order to generate password reset tokens. mt_rand output can be predicted after recovering the seed used to generate it. This low an unauthenticated attacker to take over an account providing they kn | 28/01/2022 |