İçeriğe atla
Noroxi

blogengine kayıtları

blogengine üreticisine ait 14 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 22
  3. 23

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

14 kayıt
  • CVE-2019-6714
    49Planlayın

    An issue was discovered in BlogEngine.NET through 3.3.6.0.

    KritikCVSS 9,8Kavram kanıtıEPSS %32

    blogengine · blogengine.net21 Mar 2019

  • CVE-2023-33404
    47Planlayın

    An Unrestricted Upload vulnerability, due to insufficient validation on UploadControlled.cs file, in BlogEngine.Net version 3.3.8.0 and earl

    KritikCVSS 9,8Kavram kanıtıEPSS %26

    blogengine · blogengine.net26 Haz 2023

  • CVE-2018-14485
    44Planlayın

    BlogEngine.NET 3.3 allows XXE attacks via the POST body to metaweblog.axd.

    KritikCVSS 9,8Kavram kanıtıEPSS %16

    blogengine · blogengine.net7 May 2019

  • CVE-2022-41417
    39İzleyin

    BlogEngine.NET v3.3.8.0 allows an attacker to create any folder with "files" prefix under ~/App_Data/.

    KritikCVSS 9,8İstismar yokEPSS %1

    blogengine · blogengine.net18 Oca 2023

  • CVE-2019-10720
    37İzleyin

    BlogEngine.NET 3.3.7.0 and earlier allows Directory Traversal and Remote Code Execution via the theme cookie to the File Manager.

    YüksekCVSS 8,8İstismar yokEPSS %7

    blogengine · blogengine.net21 Haz 2019

  • CVE-2022-25591
    37İzleyin

    BlogEngine.NET v3.3.8.0 was discovered to contain an arbitrary file deletion vulnerability which allows attackers to delete files within the

    KritikCVSS 9,1İstismar yokEPSS %3

    blogengine · blogengine.net13 May 2022

  • CVE-2023-33405
    33İzleyin

    Blogengine.net 3.3.8.0 and earlier is vulnerable to Open Redirect.

    OrtaCVSS 6,1Kavram kanıtıEPSS %31

    blogengine · blogengine.net21 Haz 2023

  • CVE-2014-4736
    31İzleyin

    SQL injection vulnerability in E2 before 2.4 (2845) allows remote attackers to execute arbitrary SQL commands via the note-id parameter to @

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    blogengine · e224 Tem 2014

  • CVE-2022-41418
    28İzleyin

    An issue in the component BlogEngine/BlogEngine.NET/AppCode/Api/UploadController.cs of BlogEngine.NET v3.3.8.0 allows attackers to execute a

    YüksekCVSS 7,2İstismar yokEPSS %1

    blogengine · blogengine.net19 Ara 2022

  • CVE-2022-28921
    26İzleyin

    A Cross-Site Request Forgery (CSRF) vulnerability discovered in BlogEngine.Net v3.3.8.0 allows unauthenticated attackers to read arbitrary f

    OrtaCVSS 6,5İstismar yokEPSS %1

    blogengine · blogengine.net18 May 2022

  • CVE-2023-22858
    21İzleyin

    Stored cross-site scripting in BlogEngine.NET version 3.3.8.0

    OrtaCVSS 5,3İstismar yokEPSS %0

    blogengine · blogengine.net6 Mar 2023

  • CVE-2023-22856
    21İzleyin

    Stored cross-site scripting in BlogEngine.NET version 3.3.8.0

    OrtaCVSS 5,4İstismar yokEPSS %0

    blogengine · blogengine.net6 Mar 2023

  • CVE-2023-22857
    21İzleyin

    Stored cross-site scripting in BlogEngine.NET version 3.3.8.0

    OrtaCVSS 5,4İstismar yokEPSS %0

    blogengine · blogengine.net6 Mar 2023

  • CVE-2022-36600
    19İzleyin

    BlogEngine v3.3.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /blogengine/api/posts.

    OrtaCVSS 4,8İstismar yokEPSS %1

    blogengine · blogengine.net2 Eyl 2022