CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 10/03/2025 |
| CVE-2025-25908 | 中危5.4 | A stored cross-site scripting (XSS) vulnerability in tianti v2.3 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the coverImageURL parameter at /article/ajax/save. | 10/03/2025 |
| CVE-2025-25907 | 高危8.8 | tianti v2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /user/ajax/save. This vulnerability allows attackers to execute arbitrary operations via a crafted GET or POST request. | 10/03/2025 |
| CVE-2018-19110 | 中危6.5 | The skin-management feature in tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/user/skin/list directly because controller\usercontroller.java maps a /skin/list request to the function skinList, and lacks an authorization check. | 08/11/2018 |
| CVE-2018-19109 | 高危8.8 | tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/cms/column/list directly to read the column list page or edit a column. | 08/11/2018 |
| CVE-2018-19091 | 中危5.4 | tianti 2.3 has reflected XSS in the user management module via the tianti-module-admin/user/list userName parameter. | 07/11/2018 |
| CVE-2018-19090 | 中危5.4 | tianti 2.3 has stored XSS in the article management module via an article title. | 07/11/2018 |
| CVE-2018-19089 | 中危5.4 | tianti 2.3 has stored XSS in the userlist module via the tianti-module-admin/user/ajax/save_role name parameter, which is mishandled in tianti-module-admin\src\main\webapp\WEB-INF\views\user\user_list.jsp. | 07/11/2018 |