CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
| 26/04/2024 |
| CVE-2023-36984 | 高7.5 | LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure. | 01/08/2023 |
| CVE-2023-36983 | 高7.5 | LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure. | 01/08/2023 |
| CVE-2023-30124 | 中5.4 | LavaLite v9.0.0 is vulnerable to Cross Site Scripting (XSS). | 18/05/2023 |
| CVE-2023-27238 | 緊急9.8 | LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning. | 12/05/2023 |
| CVE-2023-27237 | 中6.1 | LavaLite CMS v 9.0.0 was discovered to be vulnerable to a host header injection attack. | 12/05/2023 |
| CVE-2022-42188 | 高7.5 | In Lavalite 9.0.0, the XSRF-TOKEN cookie is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server. | 18/10/2022 |
| CVE-2020-23234 | 中4.8 | Cross Site Scripting (XSS) vulnerabiity exists in LavaLite CMS 5.8.0 via the Menu Blocks feature, which can be bypassed by using HTML event handlers, such as "ontoggle,". | 26/07/2021 |
| CVE-2020-23700 | 中4.8 | Cross Site Scripting (XSS) vulnerability in LavaLite-CMS 5.8.0 via the Menu Links feature. | 07/07/2021 |
| CVE-2020-36397 | 中5.4 | A stored cross site scripting (XSS) vulnerability in the /admin/contact/contact component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" parameter. | 02/07/2021 |
| CVE-2020-36396 | 中5.4 | A stored cross site scripting (XSS) vulnerability in the /admin/roles/role component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" parameter. | 02/07/2021 |
| CVE-2020-36395 | 中5.4 | A stored cross site scripting (XSS) vulnerability in the /admin/user/team component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" parameter. | 02/07/2021 |
| CVE-2020-28124 | 中5.4 | Cross Site Scripting (XSS) in LavaLite 5.8.0 via the Address field. | 14/04/2021 |
| CVE-2019-18883 | 中6.1 | XSS exists in Lavalite CMS 5.7 via the admin/profile name or designation field. | 13/11/2019 |
| CVE-2019-17434 | 中5.4 | LavaLite through 5.7 has XSS via a crafted account name that is mishandled on the Manage Clients screen. | 10/10/2019 |
| CVE-2018-16551 | 中5.4 | LavaLite 5.5 has XSS via a /edit URI, as demonstrated by client/job/job/Zy8PWBekrJ/edit. | 05/09/2018 |
| CVE-2017-1000467 | 中5.4 | LavaLite version 5.2.4 is vulnerable to stored cross-site scripting vulnerability, within the blog creation page, which can result in disruption of service and execution of javascript code. | 03/01/2018 |