Threat database

5 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.4%	CVE-2026-87727a-blog cms · Path Traversal Medium6.5EPSS 0.4%2026-09-11CVE Database V5CVE-2026-87727 a-blog cms Ver. 3.2.33 and earlier contains a path traversal vulnerability, which allows an unauthenticated attacker to read or delete arbitrary files on the affected product. EPSS 0.4%Vulnerability appleple inc.	CVE Database V5	2026-09-11
Medium	5.4	EPSS 0.3%	CVE-2024-23782a-blog cms Ver.3.1.x series · Cross-site scripting (XSS) Medium5.4EPSS 0.3%2024-01-28CVE Database V5CVE-2024-23782 Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 and earlier versions. If this vulnerability is exploited, a user with a contributor or higher privilege may execute an arbitrary script on the web browser of the user who accessed the website using the product. EPSS 0.3%Vulnerability appleple inc.Germany France+5	CVE Database V5	2024-01-28
High	8.8	EPSS 0.7%	CVE-2024-23348a-blog cms Ver.3.1.x series · Improper input validation High8.8EPSS 0.7%2024-01-23CVE Database V5CVE-2024-23348 Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 and earlier allows a remote authenticated attacker to execute arbitrary JavaScript code by uploading a specially crafted SVG file. EPSS 0.7%Vulnerability appleple inc.Germany France+6	CVE Database V5	2024-01-23
High	8.1	EPSS 0.7%	CVE-2024-23182a-blog cms Ver.3.1.x series · Relative path traversal High8.1EPSS 0.7%2024-01-23CVE Database V5CVE-2024-23182 Relative path traversal vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 and earlier allows a remote authenticated attacker to delete arbitrary files on the server. EPSS 0.7%Vulnerability appleple inc.Germany France+6	CVE Database V5	2024-01-23
High	8.8	EPSS 0.9%	CVE-2024-23180a-blog cms Ver.3.1.x series · Improper input validation High8.8EPSS 0.9%2024-01-23CVE Database V5CVE-2024-23180 Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 and earlier allows a remote authenticated attacker to execute arbitrary code by uploading a specially crafted SVG file. EPSS 0.9%Vulnerability appleple inc.Germany France+7	CVE Database V5	2024-01-23

Showing 1–5 of 5 results