Skip to content
Noroxi

appleple records

28 published records for vendor appleple.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 19
  3. 22
  4. 24
  5. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

28 records
  • CVE-2022-21142
    39Monitor

    Authentication bypass vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.74, Ver.2.9.x series versions prior to Ver.2.9.

    CriticalCVSS 9.8No exploitEPSS 2%

    appleple · a-blog cmsFeb 24, 2022

  • CVE-2025-36560
    36Monitor

    Server-side request forgery vulnerability exists in a-blog cms multiple versions.

    CriticalCVSS 9.2No exploitEPSS 1%

    appleple · a-blog cmsMay 19, 2025

  • CVE-2024-23180
    35Monitor

    Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3

    HighCVSS 8.8No exploitEPSS 1%

    appleple · a-blog cmsJan 23, 2024

  • CVE-2024-23348
    35Monitor

    Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3

    HighCVSS 8.8No exploitEPSS 1%

    appleple · a-blog cmsJan 23, 2024

  • CVE-2024-23182
    32Monitor

    Relative path traversal vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0

    HighCVSS 8.1No exploitEPSS 1%

    appleple · a-blog cmsJan 23, 2024

  • CVE-2025-31103
    30Monitor

    Untrusted data deserialization vulnerability exists in a-blog cms.

    HighCVSS 7.5No exploitEPSS 0%

    appleple · a-blog cmsMar 31, 2025

  • CVE-2025-29461
    30Monitor

    An issue in a-blogcms 3.1.15 allows a remote attacker to obtain sensitive information via the /bid/1/admin/entry-edit/ path.

    HighCVSS 7.6No exploitEPSS 0%

    appleple · a-blogcmsApr 17, 2025

  • CVE-2016-1178
    26Monitor

    The session management of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to obtain or modify s

    MediumCVSS 6.5No exploitEPSS 1%

    appleple · a-blog cmsApr 12, 2017

  • CVE-2022-23810
    26Monitor

    Template injection (Improper Neutralization of Special Elements Used in a Template Engine) vulnerability in a-blog cms Ver.2.8.x series vers

    MediumCVSS 6.5No exploitEPSS 1%

    appleple · a-blog cmsFeb 24, 2022

  • CVE-2024-27279
    26Monitor

    Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series Ver.3.1.9 and earlier, Ver.3.0.x series Ver.3.0.30 and earlier, Ver.

    MediumCVSS 6.5No exploitEPSS 1%

    appleple · a-blog cmsMar 12, 2024

  • CVE-2024-31394
    26Monitor

    Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver

    MediumCVSS 6.5No exploitEPSS 1%

    appleple · a-blog cmsMay 22, 2024

  • CVE-2024-31396
    26Monitor

    Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3

    MediumCVSS 6.6No exploitEPSS 0%

    appleple · a-blog cmsMay 22, 2024

  • CVE-2016-1179
    24Monitor

    Cross-site scripting (XSS) vulnerability in the standard template of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier al

    MediumCVSS 6.1No exploitEPSS 1%

    appleple · a-blog cmsApr 12, 2017

  • CVE-2022-24374
    24Monitor

    Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.4

    MediumCVSS 6.1No exploitEPSS 1%

    appleple · a-blog cmsFeb 24, 2022

  • CVE-2019-6033
    24Monitor

    Cross-site scripting vulnerability in a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8

    MediumCVSS 6.1No exploitEPSS 1%

    appleple · a-blog cmsDec 26, 2019

  • CVE-2022-23916
    24Monitor

    Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.4

    MediumCVSS 6.1No exploitEPSS 1%

    appleple · a-blog cmsFeb 24, 2022

  • CVE-2019-6034
    24Monitor

    a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allows arbitrary scripts to be exe

    MediumCVSS 6.1No exploitEPSS 1%

    appleple · a-blog cmsDec 26, 2019

  • CVE-2024-23181
    24Monitor

    Cross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29

    MediumCVSS 6.1No exploitEPSS 0%

    appleple · a-blog cmsJan 23, 2024

  • CVE-2024-31395
    24Monitor

    Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ve

    MediumCVSS 6.1No exploitEPSS 0%

    appleple · a-blog cmsMay 22, 2024

  • CVE-2024-23183
    21Monitor

    Cross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29

    MediumCVSS 5.4No exploitEPSS 0%

    appleple · a-blog cmsJan 23, 2024

  • CVE-2024-23782
    21Monitor

    Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver

    MediumCVSS 5.4No exploitEPSS 0%

    appleple · a-blog cmsJan 28, 2024

  • CVE-2024-30419
    21Monitor

    Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ve

    MediumCVSS 5.4No exploitEPSS 0%

    appleple · a-blog cmsMay 22, 2024

  • CVE-2025-27566
    20Monitor

    Path traversal vulnerability exists in a-blog cms versions prior to Ver.

    MediumCVSS 5.1No exploitEPSS 0%

    appleple · a-blog cmsMay 19, 2025

  • CVE-2025-32999
    19Monitor

    Cross-site scripting vulnerability exists in a-blog cms versions prior to Ver.

    MediumCVSS 4.8No exploitEPSS 0%

    appleple · a-blog cmsMay 19, 2025

  • CVE-2024-25559
    18Monitor

    URL spoofing vulnerability exists in a-blog cms Ver.3.1.0 to Ver.3.1.8.

    MediumCVSS 4.7No exploitEPSS 0%

    appleple · a-blog cmsFeb 15, 2024