appleple kayıtları
appleple üreticisine ait 28 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')11
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4
- CWE-918 Server-Side Request Forgery (SSRF)3
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-117 Improper Output Neutralization for Logs1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
28 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2022-21142İstismar yok | Authentication bypass vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.74, Ver.2.9.x series versions prior to Ver.2.9.appleple · a-blog cms · CWE-290 | Kritik9,8 | — | %1,5 | 24 Şub 2022 |
36İzleyin | CVE-2025-36560İstismar yok | Server-side request forgery vulnerability exists in a-blog cms multiple versions.appleple · a-blog cms · CWE-918 | Kritik9,2 | — | %0,5 | 19 May 2025 |
35İzleyin | CVE-2024-23180İstismar yok | Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3appleple · a-blog cms · CWE-434 | Yüksek8,8 | — | %0,9 | 23 Oca 2024 |
35İzleyin | CVE-2024-23348İstismar yok | Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3appleple · a-blog cms | Yüksek8,8 | — | %0,7 | 23 Oca 2024 |
32İzleyin | CVE-2024-23182İstismar yok | Relative path traversal vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0appleple · a-blog cms · CWE-22 | Yüksek8,1 | — | %0,7 | 23 Oca 2024 |
30İzleyin | CVE-2025-31103İstismar yok | Untrusted data deserialization vulnerability exists in a-blog cms.appleple · a-blog cms · CWE-502 | Yüksek7,5 | — | %0,5 | 31 Mar 2025 |
30İzleyin | CVE-2025-29461İstismar yok | An issue in a-blogcms 3.1.15 allows a remote attacker to obtain sensitive information via the /bid/1/admin/entry-edit/ path.appleple · a-blogcms · CWE-918 | Yüksek7,6 | — | %0,4 | 17 Nis 2025 |
26İzleyin | CVE-2016-1178İstismar yok | The session management of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to obtain or modify sappleple · a-blog cms · CWE-284 | Orta6,5 | — | %1,3 | 12 Nis 2017 |
26İzleyin | CVE-2022-23810İstismar yok | Template injection (Improper Neutralization of Special Elements Used in a Template Engine) vulnerability in a-blog cms Ver.2.8.x series versappleple · a-blog cms · CWE-94 | Orta6,5 | — | %1,1 | 24 Şub 2022 |
26İzleyin | CVE-2024-27279İstismar yok | Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series Ver.3.1.9 and earlier, Ver.3.0.x series Ver.3.0.30 and earlier, Ver.appleple · a-blog cms · CWE-22 | Orta6,5 | — | %0,8 | 12 Mar 2024 |
26İzleyin | CVE-2024-31394İstismar yok | Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Verappleple · a-blog cms · CWE-22 | Orta6,5 | — | %0,7 | 22 May 2024 |
26İzleyin | CVE-2024-31396İstismar yok | Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3appleple · a-blog cms · CWE-94 | Orta6,6 | — | %0,4 | 22 May 2024 |
24İzleyin | CVE-2016-1179İstismar yok | Cross-site scripting (XSS) vulnerability in the standard template of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier alappleple · a-blog cms · CWE-79 | Orta6,1 | — | %1,2 | 12 Nis 2017 |
24İzleyin | CVE-2022-24374İstismar yok | Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.4appleple · a-blog cms · CWE-79 | Orta6,1 | — | %0,9 | 24 Şub 2022 |
24İzleyin | CVE-2019-6033İstismar yok | Cross-site scripting vulnerability in a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8appleple · a-blog cms · CWE-79 | Orta6,1 | — | %0,8 | 26 Ara 2019 |
24İzleyin | CVE-2022-23916İstismar yok | Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.4appleple · a-blog cms · CWE-79 | Orta6,1 | — | %0,8 | 24 Şub 2022 |
24İzleyin | CVE-2019-6034İstismar yok | a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allows arbitrary scripts to be exeappleple · a-blog cms · CWE-74 | Orta6,1 | — | %0,7 | 26 Ara 2019 |
24İzleyin | CVE-2024-23181İstismar yok | Cross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29appleple · a-blog cms · CWE-79 | Orta6,1 | — | %0,4 | 23 Oca 2024 |
24İzleyin | CVE-2024-31395İstismar yok | Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Veappleple · a-blog cms · CWE-79 | Orta6,1 | — | %0,3 | 22 May 2024 |
21İzleyin | CVE-2024-23183İstismar yok | Cross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29appleple · a-blog cms · CWE-79 | Orta5,4 | — | %0,4 | 23 Oca 2024 |
21İzleyin | CVE-2024-23782İstismar yok | Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Verappleple · a-blog cms · CWE-79 | Orta5,4 | — | %0,3 | 28 Oca 2024 |
21İzleyin | CVE-2024-30419İstismar yok | Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Veappleple · a-blog cms · CWE-79 | Orta5,4 | — | %0,2 | 22 May 2024 |
20İzleyin | CVE-2025-27566İstismar yok | Path traversal vulnerability exists in a-blog cms versions prior to Ver.appleple · a-blog cms · CWE-22 | Orta5,1 | — | %0,5 | 19 May 2025 |
19İzleyin | CVE-2025-32999İstismar yok | Cross-site scripting vulnerability exists in a-blog cms versions prior to Ver.appleple · a-blog cms · CWE-79 | Orta4,8 | — | %0,2 | 19 May 2025 |
18İzleyin | CVE-2024-25559İstismar yok | URL spoofing vulnerability exists in a-blog cms Ver.3.1.0 to Ver.3.1.8.appleple · a-blog cms · CWE-601 | Orta4,7 | — | %0,4 | 15 Şub 2024 |
- CVE-2022-2114239İzleyin
Authentication bypass vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.74, Ver.2.9.x series versions prior to Ver.2.9.
KritikCVSS 9,8İstismar yokEPSS %2appleple · a-blog cms24 Şub 2022
- CVE-2025-3656036İzleyin
Server-side request forgery vulnerability exists in a-blog cms multiple versions.
KritikCVSS 9,2İstismar yokEPSS %1appleple · a-blog cms19 May 2025
- CVE-2024-2318035İzleyin
Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3
YüksekCVSS 8,8İstismar yokEPSS %1appleple · a-blog cms23 Oca 2024
- CVE-2024-2334835İzleyin
Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3
YüksekCVSS 8,8İstismar yokEPSS %1appleple · a-blog cms23 Oca 2024
- CVE-2024-2318232İzleyin
Relative path traversal vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0
YüksekCVSS 8,1İstismar yokEPSS %1appleple · a-blog cms23 Oca 2024
- CVE-2025-3110330İzleyin
Untrusted data deserialization vulnerability exists in a-blog cms.
YüksekCVSS 7,5İstismar yokEPSS %0appleple · a-blog cms31 Mar 2025
- CVE-2025-2946130İzleyin
An issue in a-blogcms 3.1.15 allows a remote attacker to obtain sensitive information via the /bid/1/admin/entry-edit/ path.
YüksekCVSS 7,6İstismar yokEPSS %0appleple · a-blogcms17 Nis 2025
- CVE-2016-117826İzleyin
The session management of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to obtain or modify s
OrtaCVSS 6,5İstismar yokEPSS %1appleple · a-blog cms12 Nis 2017
- CVE-2022-2381026İzleyin
Template injection (Improper Neutralization of Special Elements Used in a Template Engine) vulnerability in a-blog cms Ver.2.8.x series vers
OrtaCVSS 6,5İstismar yokEPSS %1appleple · a-blog cms24 Şub 2022
- CVE-2024-2727926İzleyin
Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series Ver.3.1.9 and earlier, Ver.3.0.x series Ver.3.0.30 and earlier, Ver.
OrtaCVSS 6,5İstismar yokEPSS %1appleple · a-blog cms12 Mar 2024
- CVE-2024-3139426İzleyin
Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver
OrtaCVSS 6,5İstismar yokEPSS %1appleple · a-blog cms22 May 2024
- CVE-2024-3139626İzleyin
Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3
OrtaCVSS 6,6İstismar yokEPSS %0appleple · a-blog cms22 May 2024
- CVE-2016-117924İzleyin
Cross-site scripting (XSS) vulnerability in the standard template of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier al
OrtaCVSS 6,1İstismar yokEPSS %1appleple · a-blog cms12 Nis 2017
- CVE-2022-2437424İzleyin
Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.4
OrtaCVSS 6,1İstismar yokEPSS %1appleple · a-blog cms24 Şub 2022
- CVE-2019-603324İzleyin
Cross-site scripting vulnerability in a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8
OrtaCVSS 6,1İstismar yokEPSS %1appleple · a-blog cms26 Ara 2019
- CVE-2022-2391624İzleyin
Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.4
OrtaCVSS 6,1İstismar yokEPSS %1appleple · a-blog cms24 Şub 2022
- CVE-2019-603424İzleyin
a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allows arbitrary scripts to be exe
OrtaCVSS 6,1İstismar yokEPSS %1appleple · a-blog cms26 Ara 2019
- CVE-2024-2318124İzleyin
Cross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29
OrtaCVSS 6,1İstismar yokEPSS %0appleple · a-blog cms23 Oca 2024
- CVE-2024-3139524İzleyin
Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ve
OrtaCVSS 6,1İstismar yokEPSS %0appleple · a-blog cms22 May 2024
- CVE-2024-2318321İzleyin
Cross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29
OrtaCVSS 5,4İstismar yokEPSS %0appleple · a-blog cms23 Oca 2024
- CVE-2024-2378221İzleyin
Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver
OrtaCVSS 5,4İstismar yokEPSS %0appleple · a-blog cms28 Oca 2024
- CVE-2024-3041921İzleyin
Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ve
OrtaCVSS 5,4İstismar yokEPSS %0appleple · a-blog cms22 May 2024
- CVE-2025-2756620İzleyin
Path traversal vulnerability exists in a-blog cms versions prior to Ver.
OrtaCVSS 5,1İstismar yokEPSS %0appleple · a-blog cms19 May 2025
- CVE-2025-3299919İzleyin
Cross-site scripting vulnerability exists in a-blog cms versions prior to Ver.
OrtaCVSS 4,8İstismar yokEPSS %0appleple · a-blog cms19 May 2025
- CVE-2024-2555918İzleyin
URL spoofing vulnerability exists in a-blog cms Ver.3.1.0 to Ver.3.1.8.
OrtaCVSS 4,7İstismar yokEPSS %0appleple · a-blog cms15 Şub 2024