Tra cứu CVE

Mọi CVE đã công bố cùng các advisory mã nguồn mở (NVD, OSV, GitHub), kèm CVSS, EPSS và cho biết lỗ hổng có đang bị khai thác thực tế hay không (CISA KEV). Cập nhật mỗi vài giờ. Các bài quét đối chiếu dữ liệu này với công nghệ phát hiện được trên site.

402.942 lỗ hổng · 1.766 đang bị khai thác (CISA KEV)

kent-web ✕Xoá bộ lọc

16 kết quả

Mã	Mức độ	Mô tả	Công bố
CVE-2015-0889	CAO7.5	KENT-WEB Joyful Note before 5.3 allows remote attackers to delete files or write to files, and consequently execute arbitrary code, via vectors involving an article.	28/02/2015
CVE-2015-0888	TRUNG BÌNH6.4	KENT-WEB Clip Board before 4.1 allows remote attackers to delete arbitrary files via unspecified vectors.	28/02/2015
CVE-2014-7258	TRUNG BÌNH4.3	Cross-site scripting (XSS) vulnerability in KENT-WEB Clip Board 2.91 and earlier, when running certain versions of Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	05/12/2014
CVE-2014-0812	TRUNG BÌNH4.3	Cross-site scripting (XSS) vulnerability in KENT-WEB Joyful Note 2.8 and earlier, when Internet Explorer 7 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	01/02/2014
CVE-2013-3649	TRUNG BÌNH4.3	Cross-site scripting (XSS) vulnerability in KENT-WEB CLIP-MAIL before 3.4, when Internet Explorer 7 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an unspecified form field.	28/06/2013
CVE-2013-3648	TRUNG BÌNH4.3	Cross-site scripting (XSS) vulnerability in KENT-WEB POST-MAIL before 6.7, when Internet Explorer 7 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an unspecified form field.	28/06/2013
CVE-2012-5176	TRUNG BÌNH4.3	Cross-site scripting (XSS) vulnerability in KENT-WEB ACCESS REPORT 5.02 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to tag embedding.	06/12/2012
CVE-2012-5175	TRUNG BÌNH4.3	Cross-site scripting (XSS) vulnerability in KENT-WEB ACCESS REPORT 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to access-log data.	06/12/2012
CVE-2012-2643	TRUNG BÌNH4.3	Cross-site scripting (XSS) vulnerability in KENT-WEB YY-BOARD before 6.4 allows remote attackers to inject arbitrary web script or HTML via a crafted form entry.	07/07/2012
CVE-2012-2637	TRUNG BÌNH4.3	Cross-site scripting (XSS) vulnerability in KENT-WEB WEB PATIO 4.04 and earlier might allow remote attackers to inject arbitrary web script or HTML via a crafted cookie.	19/06/2012
CVE-2012-2636	TRUNG BÌNH4.3	Cross-site scripting (XSS) vulnerability in KENT-WEB WEB PATIO 4.04 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	19/06/2012
CVE-2011-4172	TRUNG BÌNH4.3	Multiple cross-site scripting (XSS) vulnerabilities in KENT-WEB WEB FORUM before 5.1 allow remote attackers to inject arbitrary web script or HTML via (1) an e-mail address field or (2) a cookie, a related issue to CVE-2011-3383, CVE-2011-3983, and CVE-2011-3984.	24/10/2011
CVE-2011-3984	TRUNG BÌNH4.3	Cross-site scripting (XSS) vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to "web form entries."	24/10/2011
CVE-2011-3983	TRUNG BÌNH4.3	Cross-site scripting (XSS) vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to cookies.	24/10/2011
CVE-2011-3383	TRUNG BÌNH4.3	Cross-site scripting (XSS) vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to "the web page to be output."	24/10/2011
CVE-2008-5224	TRUNG BÌNH4.3	Cross-site scripting (XSS) vulnerability in Kent Web Mart 1.61 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	25/11/2008