CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ（NVD、OSV、GitHub）を、CVSS、EPSS、実際に悪用されているか（CISA KEV）とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ（NVD、OSV、GitHub）を、CVSS、EPSS、実際に悪用されているか（CISA KEV）とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
| CVE-2024-6416 | 緊急9.8 | A vulnerability was found in SeaCMS 12.9. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /js/player/dmplayer/dmku/?ac=edit. The manipulation of the argument cid with the input (select(0)from(select(sleep(10)))v) leads to sql injection. The attack can be launched | 30/06/2024 |
| CVE-2024-31611 | 緊急9.1 | SeaCMS 12.9 has a file deletion vulnerability via admin_template.php. | 10/06/2024 |
| CVE-2024-30565 | 高8.8 | An issue was discovered in SeaCMS version 12.9, allows remote attackers to execute arbitrary code via admin notify.php. | 04/04/2024 |
| CVE-2024-29275 | 緊急9.8 | SQL injection vulnerability in SeaCMS version 12.9, allows remote unauthenticated attackers to execute arbitrary code and obtain sensitive information via the id parameter in class.php. | 22/03/2024 |
| CVE-2023-50470 | 中5.4 | A cross-site scripting (XSS) vulnerability in the component admin_ Video.php of SeaCMS v12.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. | 28/12/2023 |
| CVE-2023-46987 | 高8.8 | SeaCMS v12.9 was discovered to contain a remote code execution (RCE) vulnerability via the component /augap/adminip.php. | 28/12/2023 |
| CVE-2023-46010 | 緊急9.8 | An issue in SeaCMS v.12.9 allows an attacker to execute arbitrary commands via the admin_safe.php component. | 25/10/2023 |
| CVE-2023-44848 | 高8.1 | An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_template.php component. | 10/10/2023 |
| CVE-2023-44847 | 高7.2 | An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_ Weixin.php component. | 10/10/2023 |
| CVE-2023-44846 | 高8.8 | An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_ notify.php component. | 10/10/2023 |
| CVE-2023-44172 | 緊急9.8 | SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_weixin.php. | 27/09/2023 |
| CVE-2023-44171 | 緊急9.8 | SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_smtp.php. | 27/09/2023 |
| CVE-2023-44170 | 緊急9.8 | SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_ping.php. | 27/09/2023 |
| CVE-2023-44169 | 緊急9.8 | SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_notify.php. | 27/09/2023 |
| CVE-2023-43222 | 緊急9.8 | SeaCMS v12.8 has an arbitrary code writing vulnerability in the /jxz7g2/admin_ping.php file. | 27/09/2023 |
| CVE-2023-43216 | 緊急9.8 | SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_ip.php. | 27/09/2023 |
| CVE-2023-43278 | 高8.8 | A Cross-Site Request Forgery (CSRF) in admin_manager.php of Seacms up to v12.8 allows attackers to arbitrarily add an admin account. | 25/09/2023 |