Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,829

CVE-2024-55456

lunasvg v3.0.1 was discovered to contain a segmentation violation via the component gray_find_cell

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Sammycage
Products
Lunasvg
CVE-2025-2951

Bluestar Micro Mall data.php sql injection

A vulnerability classified as critical has been found in Bluestar Micro Mall 1.0. Affected is an unknown function of the file /api/data.php. The manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Bluestar
Products
Micro Mall
CVE-2024-34957

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/sysImages_deal.php?mudi=infoSet.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-35011

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoType_deal.php?mudi=rev&nohrefStr=close.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-35012

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoType_deal.php?mudi=add&nohrefStr=close.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-35108

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/homePro_deal.php?mudi=del&dataType=&dataTypeCN.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-35109

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /homePro_deal.php?mudi=add&nohrefStr=close.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-36670

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/vpsClass_deal.php?mudi=del

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Idccms
Products
Idccms
CVE-2024-39020

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/vpsApiData_deal.php?mudi=rev&nohrefStr=close

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-39021

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsApiData_deal.php?mudi=del

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Idccms
Products
Idccms
CVE-2024-39023

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/info_deal.php?mudi=add&nohrefStr=close

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-39153

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/info_deal.php?mudi=del&dataType=news&dataTypeCN.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-39154

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/keyWord_deal.php?mudi=del&dataType=word&dataTypeCN.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms