CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
| 04/01/2019 |
| CVE-2018-19181 | 高7.5 | statics/ueditor/php/vendor/Local.class.php in YUNUCMS 1.1.5 allows arbitrary file deletion via the statics/ueditor/php/controller.php?action=remove key parameter, as demonstrated by using directory traversal to delete the install.lock file. | 11/11/2018 |
| CVE-2018-19180 | 緊急9.8 | statics/app/index/controller/Install.php in YUNUCMS 1.1.5 (if install.lock is not present) allows remote attackers to execute arbitrary PHP code by placing this code in the index.php?s=index/install/setup2 DB_PREFIX field, which is written to database.php. | 11/11/2018 |
| CVE-2018-18726 | 中4.8 | An XSS issue was discovered in admin/sitelink/editsitelink?id=16 in YUNUCMS 1.1.5. | 29/10/2018 |
| CVE-2018-18725 | 中4.8 | An XSS issue was discovered in admin/banner/editbanner?id=20 in YUNUCMS 1.1.5. | 29/10/2018 |
| CVE-2018-18724 | 中4.8 | An XSS issue was discovered in index.php/admin/category/editcategory?id=73 in YUNUCMS 1.1.5. | 29/10/2018 |
| CVE-2018-18723 | 中4.8 | An XSS issue was discovered in index.php/admin/area/editarea/id/110000 in YUNUCMS 1.1.5. | 29/10/2018 |
| CVE-2018-18722 | 中4.8 | An XSS issue was discovered in admin/content/editcontent?id=29&gopage=1 in YUNUCMS 1.1.5. | 29/10/2018 |
| CVE-2018-18721 | 中4.8 | An XSS issue was discovered in admin/link/editlink?id=5 in YUNUCMS 1.1.5. | 29/10/2018 |
| CVE-2018-18720 | 中4.8 | An XSS issue was discovered in index.php/admin/system/basic in YUNUCMS 1.1.5. | 29/10/2018 |
| CVE-2018-17322 | 中6.1 | Cross-site scripting (XSS) vulnerability in index.php/index/category/index in YUNUCMS 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the area parameter. | 22/09/2018 |
| CVE-2018-9993 | 中4.8 | YUNUCMS 1.0.7 has XSS via the content title on an admin/content/addcontent/cid/## page (aka a news center page). | 10/04/2018 |