CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ（NVD、OSV、GitHub）を、CVSS、EPSS、実際に悪用されているか（CISA KEV）とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ（NVD、OSV、GitHub）を、CVSS、EPSS、実際に悪用されているか（CISA KEV）とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
| 23/10/2023 |
| CVE-2023-39147 | 高7.8 | An arbitrary file upload vulnerability in Uvdesk 1.1.3 allows attackers to execute arbitrary code via uploading a crafted image file. | 01/08/2023 |
| CVE-2023-33570 | 高8.8 | Bagisto v1.5.1 is vulnerable to Server-Side Template Injection (SSTI). | 28/06/2023 |
| CVE-2023-36287 | 中6.1 | An unauthenticated Cross-Site Scripting (XSS) vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and then impersonate that user via POST controller parameter. | 23/06/2023 |
| CVE-2023-36284 | 高7.5 | An unauthenticated Time-Based SQL injection found in Webkul QloApps 1.6.0 via GET parameter date_from, date_to, and id_product allows a remote attacker to bypass a web application's authentication and authorization mechanisms and retrieve the contents of an entire database. | 23/06/2023 |
| CVE-2023-36289 | 中6.1 | An unauthenticated Cross-Site Scripting (XSS) vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and then impersonate that user via POST email_create and back parameter. | 23/06/2023 |
| CVE-2023-36288 | 中5.4 | An unauthenticated Cross-Site Scripting (XSS) vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and then impersonate that user via GET configure parameter. | 23/06/2023 |
| CVE-2023-2925 | 中5.4 | A vulnerability, which was classified as problematic, was found in Webkul krayin crm 1.2.4. This affects an unknown part of the file /admin/contacts/organizations/edit/2 of the component Edit Person Page. The manipulation of the argument Organization leads to cross site scripting. It is possible to initiate the attack | 27/05/2023 |
| CVE-2023-30256 | 中6.1 | Cross Site Scripting vulnerability found in Webkil QloApps v.1.5.2 allows a remote attacker to obtain sensitive information via the back and email_create parameters in the AuthController.php file. | 11/05/2023 |
| CVE-2021-41924 | 中6.1 | Webkul krayin crm before 1.2.2 is vulnerable to Cross Site Scripting (XSS). | 21/06/2022 |
| CVE-2019-16403 | 高8.8 | In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values (such as address, review, orders, etc.) can also be manipulated by other customers. | 18/09/2019 |
| CVE-2019-14933 | 高8.8 | Bagisto 0.1.5 allows CSRF under /admin URIs. | 11/08/2019 |
| CVE-2010-1659 | 中5.0 | Directory traversal vulnerability in the Ultimate Portfolio (com_ultimateportfolio) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. | 03/05/2010 |