CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 22/06/2025 |
| CVE-2021-43103 | 高危7.2 | A File Upload vulnerability exists in bbs 5.3 is via ForumManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code. | 28/03/2022 |
| CVE-2021-43102 | 高危7.2 | A File Upload vulnerability exists in bbs 5.3 is via HelpManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code. | 28/03/2022 |
| CVE-2021-43101 | 高危7.2 | A File Upload vulnerability exists in bbs 5.3 is via MembershipCardManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code. | 28/03/2022 |
| CVE-2021-43100 | 高危7.2 | A File Upload vulnerability exists in bbs 5.3 is via TopicManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code. | 28/03/2022 |
| CVE-2021-43099 | 中危4.9 | An Archive Extraction (AKA "Zip Slip) vulnerability exists in bbs 5.3 in the UpgradeNow function in UpgradeManageAction.java, which unzips the arbitrary upladed zip file without checking filenames. The vulnerability is exploited using a specially crafted archive that holds directory traversal filenames (e.g. ../../evil | 28/03/2022 |
| CVE-2021-43098 | 高危7.2 | A File Upload vulnerability exists in bbs v5.3 via QuestionManageAction.java in a getType function. | 28/03/2022 |
| CVE-2021-43097 | 高危7.2 | A Server-side Template Injection (SSTI) vulnerability exists in bbs 5.3 in TemplateManageAction.javawhich could let a malicoius user execute arbitrary code. | 28/03/2022 |
| CVE-2022-23390 | 严重9.8 | An issue in the getType function of BBS Forum v5.3 and below allows attackers to upload arbitrary files. | 14/02/2022 |