CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 10/03/2025 |
| CVE-2025-25908 | 보통5.4 | A stored cross-site scripting (XSS) vulnerability in tianti v2.3 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the coverImageURL parameter at /article/ajax/save. | 10/03/2025 |
| CVE-2025-25907 | 높음8.8 | tianti v2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /user/ajax/save. This vulnerability allows attackers to execute arbitrary operations via a crafted GET or POST request. | 10/03/2025 |
| CVE-2018-19110 | 보통6.5 | The skin-management feature in tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/user/skin/list directly because controller\usercontroller.java maps a /skin/list request to the function skinList, and lacks an authorization check. | 08/11/2018 |
| CVE-2018-19109 | 높음8.8 | tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/cms/column/list directly to read the column list page or edit a column. | 08/11/2018 |
| CVE-2018-19091 | 보통5.4 | tianti 2.3 has reflected XSS in the user management module via the tianti-module-admin/user/list userName parameter. | 07/11/2018 |
| CVE-2018-19090 | 보통5.4 | tianti 2.3 has stored XSS in the article management module via an article title. | 07/11/2018 |
| CVE-2018-19089 | 보통5.4 | tianti 2.3 has stored XSS in the userlist module via the tianti-module-admin/user/ajax/save_role name parameter, which is mishandled in tianti-module-admin\src\main\webapp\WEB-INF\views\user\user_list.jsp. | 07/11/2018 |