Vvveb records

23 published records for vendor vvveb.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 1 · 4.3%
Pre-auth RCE: 3
With a fix record: 39.1%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

23 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2025-8518Weaponized	givanz Vvveb Code Editor code.php save code injectionvvveb · vvveb · CWE-74 RCE	Low2.0	—	2.3%	Aug 4, 2025
39Monitor	CVE-2025-44022No exploit	An issue in vvveb CMS v.1.0.6 allows a remote attacker to execute arbitrary code via the Plugin mechanism.vvveb · vvveb · CWE-94 pre-auth RCE	Critical9.8	—	1.2%	May 12, 2025
39Monitor	CVE-2024-27480No exploit	givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload.vvveb · vvvebjs · CWE-434 Pre-auth File upload	Critical9.8	—	0.3%	Dec 29, 2025
39Monitor	CVE-2024-25182No exploit	givanz VvvebJs 1.7.2 suffers from a File Upload vulnerability via save.php.vvveb · vvvebjs · CWE-434 Pre-auth File upload	Critical9.8	—	0.3%	Dec 29, 2025
36Monitor	CVE-2024-25181No exploit	A critical vulnerability has been identified in givanz VvvebJs 1.7.2, which allows both Server-Side Request Forgery (SSRF) and arbitrary filvvveb · vvvebjs · CWE-918 Pre-auth SSRF	Critical9.1	—	0.2%	Dec 29, 2025
30Monitor	CVE-2024-25183No exploit	givanz VvvebJs 1.7.2 is vulnerable to Directory Traversal via scan.php.vvveb · vvvebjs · CWE-22 Pre-auth Path traversal	High7.5	—	0.7%	Dec 29, 2025
29Monitor	CVE-2024-29272Proof of concept	Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute arbitrary code and ovvveb · vvvebjs · CWE-434 pre-auth RCE File upload	Medium6.5	—	9.3%	Mar 22, 2024
24Monitor	CVE-2024-29271No exploit	Reflected Cross-Site Scripting (XSS) vulnerability in VvvebJs before version 1.7.7, allows remote attackers to execute arbitrary code and obvvveb · vvvebjs · CWE-79 pre-auth RCE XSS	Medium6.1	—	0.5%	Mar 22, 2024
22Monitor	CVE-2025-11028No exploit	givanz Vvveb Image information disclosurevvveb · vvveb · CWE-200 Pre-auth Info leak	Medium5.5	—	0.5%	Sep 26, 2025
21Monitor	CVE-2025-9728Proof of concept	givanz Vvveb login.tpl cross site scriptingvvveb · vvveb · CWE-79 Pre-auth XSS	Medium5.3	—	0.3%	Aug 31, 2025
9Monitor	CVE-2025-8517Proof of concept	givanz Vvveb session fixiationvvveb · vvveb · CWE-384	Low2.1	—	2.3%	Aug 4, 2025
8Monitor	CVE-2025-11944No exploit	givanz Vvveb Raw SQL import.php import sql injectionvvveb · vvveb · CWE-74 SQL injection	Low2.0	—	0.5%	Oct 19, 2025
8Monitor	CVE-2025-9397No exploit	givanz Vvveb media.php unrestricted uploadvvveb · vvveb · CWE-284 File upload Broken access control (IDOR)	Low2.1	—	0.5%	Aug 24, 2025
8Monitor	CVE-2025-8519No exploit	givanz Vvveb Drag-and-Drop Editor editor information disclosurevvveb · vvveb · CWE-200 Info leak	Low2.0	—	0.4%	Aug 4, 2025
8Monitor	CVE-2025-8520No exploit	givanz Vvveb Drag-and-Drop Editor editor server-side request forgeryvvveb · vvveb · CWE-918 SSRF	Low2.0	—	0.4%	Aug 4, 2025
8Monitor	CVE-2025-12203No exploit	givanz Vvveb Code Editor functions.php sanitizeFileName path traversalvvveb · vvveb · CWE-22 Path traversal	Low2.1	—	0.3%	Oct 27, 2025
8Monitor	CVE-2025-11026No exploit	givanz Vvveb Configuration File information disclosurevvveb · vvveb · CWE-200 Info leak	Low2.0	—	0.3%	Sep 26, 2025
8Monitor	CVE-2025-8975No exploit	givanz Vvveb edit.tpl cross site scriptingvvveb · vvveb · CWE-79 XSS	Low2.0	—	0.3%	Aug 14, 2025
8Monitor	CVE-2025-8976No exploit	givanz Vvveb Endpoint post cross site scriptingvvveb · vvveb · CWE-79 XSS	Low2.0	—	0.2%	Aug 14, 2025
8Monitor	CVE-2025-11029No exploit	givanz Vvveb cross-site request forgeryvvveb · vvveb · CWE-352 Pre-auth CSRF	Low2.1	—	0.2%	Sep 26, 2025
7Monitor	CVE-2025-8521No exploit	givanz Vvveb Add Type post-types cross site scriptingvvveb · vvveb · CWE-79 XSS	Low1.9	—	0.3%	Aug 4, 2025
7Monitor	CVE-2025-11027No exploit	givanz Vvveb SVG File cross site scriptingvvveb · vvveb · CWE-79 XSS	Low1.9	—	0.2%	Sep 26, 2025
5Monitor	CVE-2025-8522No exploit	givanz Vvvebjs node.js save.php path traversalvvveb · vvvebjs · CWE-22 Path traversal	Low1.3	—	0.3%	Aug 4, 2025

CVE-2025-8518
40Plan
givanz Vvveb Code Editor code.php save code injection
LowCVSS 2.0WeaponizedEPSS 2%
- RCE
vvveb · vvvebAug 4, 2025
CVE-2025-44022
39Monitor
An issue in vvveb CMS v.1.0.6 allows a remote attacker to execute arbitrary code via the Plugin mechanism.
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
vvveb · vvvebMay 12, 2025
CVE-2024-27480
39Monitor
givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- File upload
vvveb · vvvebjsDec 29, 2025
CVE-2024-25182
39Monitor
givanz VvvebJs 1.7.2 suffers from a File Upload vulnerability via save.php.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- File upload
vvveb · vvvebjsDec 29, 2025
CVE-2024-25181
36Monitor
A critical vulnerability has been identified in givanz VvvebJs 1.7.2, which allows both Server-Side Request Forgery (SSRF) and arbitrary fil
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- SSRF
vvveb · vvvebjsDec 29, 2025
CVE-2024-25183
30Monitor
givanz VvvebJs 1.7.2 is vulnerable to Directory Traversal via scan.php.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Path traversal
vvveb · vvvebjsDec 29, 2025
CVE-2024-29272
29Monitor
Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute arbitrary code and o
MediumCVSS 6.5Proof of conceptEPSS 9%
- pre-auth RCE
- File upload
vvveb · vvvebjsMar 22, 2024
CVE-2024-29271
24Monitor
Reflected Cross-Site Scripting (XSS) vulnerability in VvvebJs before version 1.7.7, allows remote attackers to execute arbitrary code and ob
MediumCVSS 6.1No exploitEPSS 0%
- pre-auth RCE
- XSS
vvveb · vvvebjsMar 22, 2024
CVE-2025-11028
22Monitor
givanz Vvveb Image information disclosure
MediumCVSS 5.5No exploitEPSS 0%
- Pre-auth
- Info leak
vvveb · vvvebSep 26, 2025
CVE-2025-9728
21Monitor
givanz Vvveb login.tpl cross site scripting
MediumCVSS 5.3Proof of conceptEPSS 0%
- Pre-auth
- XSS
vvveb · vvvebAug 31, 2025
CVE-2025-8517
9Monitor
givanz Vvveb session fixiation
LowCVSS 2.1Proof of conceptEPSS 2%
vvveb · vvvebAug 4, 2025
CVE-2025-11944
8Monitor
givanz Vvveb Raw SQL import.php import sql injection
LowCVSS 2.0No exploitEPSS 0%
- SQL injection
vvveb · vvvebOct 19, 2025
CVE-2025-9397
8Monitor
givanz Vvveb media.php unrestricted upload
LowCVSS 2.1No exploitEPSS 0%
- File upload
- Broken access control (IDOR)
vvveb · vvvebAug 24, 2025
CVE-2025-8519
8Monitor
givanz Vvveb Drag-and-Drop Editor editor information disclosure
LowCVSS 2.0No exploitEPSS 0%
- Info leak
vvveb · vvvebAug 4, 2025
CVE-2025-8520
8Monitor
givanz Vvveb Drag-and-Drop Editor editor server-side request forgery
LowCVSS 2.0No exploitEPSS 0%
- SSRF
vvveb · vvvebAug 4, 2025
CVE-2025-12203
8Monitor
givanz Vvveb Code Editor functions.php sanitizeFileName path traversal
LowCVSS 2.1No exploitEPSS 0%
- Path traversal
vvveb · vvvebOct 27, 2025
CVE-2025-11026
8Monitor
givanz Vvveb Configuration File information disclosure
LowCVSS 2.0No exploitEPSS 0%
- Info leak
vvveb · vvvebSep 26, 2025
CVE-2025-8975
8Monitor
givanz Vvveb edit.tpl cross site scripting
LowCVSS 2.0No exploitEPSS 0%
- XSS
vvveb · vvvebAug 14, 2025
CVE-2025-8976
8Monitor
givanz Vvveb Endpoint post cross site scripting
LowCVSS 2.0No exploitEPSS 0%
- XSS
vvveb · vvvebAug 14, 2025
CVE-2025-11029
8Monitor
givanz Vvveb cross-site request forgery
LowCVSS 2.1No exploitEPSS 0%
- Pre-auth
- CSRF
vvveb · vvvebSep 26, 2025
CVE-2025-8521
7Monitor
givanz Vvveb Add Type post-types cross site scripting
LowCVSS 1.9No exploitEPSS 0%
- XSS
vvveb · vvvebAug 4, 2025
CVE-2025-11027
7Monitor
givanz Vvveb SVG File cross site scripting
LowCVSS 1.9No exploitEPSS 0%
- XSS
vvveb · vvvebSep 26, 2025
CVE-2025-8522
5Monitor
givanz Vvvebjs node.js save.php path traversal
LowCVSS 1.3No exploitEPSS 0%
- Path traversal
vvveb · vvvebjsAug 4, 2025