CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 12/01/2024 |
| CVE-2023-50137 | 보통5.4 | JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) in the site management office. | 14/12/2023 |
| CVE-2023-50102 | 보통5.4 | JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS). | 14/12/2023 |
| CVE-2023-50101 | 보통5.4 | JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via Label management editing. | 14/12/2023 |
| CVE-2023-50100 | 보통5.4 | JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via carousel image editing. | 14/12/2023 |
| CVE-2023-50449 | 높음7.5 | JFinalCMS 5.0.0 could allow a remote attacker to read files via ../ Directory Traversal in the /common/down/file fileKey parameter. | 10/12/2023 |
| CVE-2023-49487 | 보통5.4 | JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the navigation management department. | 08/12/2023 |
| CVE-2023-49486 | 보통5.4 | JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the model management department. | 08/12/2023 |
| CVE-2023-49485 | 보통5.4 | JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the column management department. | 08/12/2023 |
| CVE-2023-49448 | 높음8.8 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/nav/delete. | 05/12/2023 |
| CVE-2023-49447 | 높음8.8 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/nav/update. | 05/12/2023 |
| CVE-2023-49446 | 높음8.8 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/nav/save. | 05/12/2023 |
| CVE-2023-49398 | 높음8.8 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/delete. | 05/12/2023 |
| CVE-2023-49397 | 높음8.8 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/updateStatus. | 05/12/2023 |
| CVE-2023-49396 | 높음8.8 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/save. | 05/12/2023 |
| CVE-2023-49395 | 높음8.8 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/update. | 05/12/2023 |
| CVE-2023-49383 | 높음8.8 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/tag/save. | 05/12/2023 |