valine.js records
4 published records for vendor valine.js.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 75%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
48Plan | CVE-2022-38545No exploit | Valine v1.4.18 was discovered to contain a remote code execution (RCE) vulnerability which allows attackers to execute arbitrary code via a valine.js · valine · CWE-79 | Critical9.6 | — | 34.1% | Sep 19, 2022 |
24Monitor | CVE-2018-19289No exploit | An issue was discovered in Valine v1.3.3.valine.js · valine · CWE-79 | Medium6.1 | — | 1.2% | Nov 15, 2018 |
22Monitor | CVE-2021-34801No exploit | Valine 1.4.14 allows remote attackers to cause a denial of service (application outage) by supplying a ua (aka User-Agent) value that only svaline.js · valine | Medium5.3 | — | 1.7% | Jun 16, 2021 |
21Monitor | CVE-2020-28847No exploit | Cross Site Scripting (XSS) vulnerability in xCss Valine v1.4.14 via the nick parameter to /classes/Comment.valine.js · valine · CWE-79 | Medium5.4 | — | 0.4% | Apr 5, 2022 |
- CVE-2022-3854548Plan
Valine v1.4.18 was discovered to contain a remote code execution (RCE) vulnerability which allows attackers to execute arbitrary code via a
CriticalCVSS 9.6No exploitEPSS 34%valine.js · valineSep 19, 2022
- CVE-2018-1928924Monitor
An issue was discovered in Valine v1.3.3.
MediumCVSS 6.1No exploitEPSS 1%valine.js · valineNov 15, 2018
- CVE-2021-3480122Monitor
Valine 1.4.14 allows remote attackers to cause a denial of service (application outage) by supplying a ua (aka User-Agent) value that only s
MediumCVSS 5.3No exploitEPSS 1%valine.js · valineJun 16, 2021
- CVE-2020-2884721Monitor
Cross Site Scripting (XSS) vulnerability in xCss Valine v1.4.14 via the nick parameter to /classes/Comment.
MediumCVSS 5.4No exploitEPSS 0%valine.js · valineApr 5, 2022