CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 高危7.2 |
SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method |
| 27/09/2023 |
| CVE-2023-39376 | 中危6.5 |
SiberianCMS - CWE-284 Improper Access Control Authorized user may disable a security feature over the network
| 27/09/2023 |
| CVE-2023-39375 | 严重9.8 |
SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges
| 27/09/2023 |
| CVE-2017-6906 | 中危6.1 | An issue was discovered in SiberianCMS before 4.10.0. The vulnerability exists due to insufficient filtration of user-supplied data (log) passed to the "SiberianCMS-master/errors/500.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. | 15/03/2017 |