İçeriğe atla
Noroxi

getkirby kayıtları

getkirby üreticisine ait 44 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%75
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

44 kayıt
  • CVE-2023-38490
    41Planlayın

    Kirby XML External Entity (XXE) vulnerability in the XML data handler

    KritikCVSS 10,0Kavram kanıtıEPSS %1

    getkirby · kirby27 Tem 2023

  • CVE-2017-20174
    39İzleyin

    bastianallgeier Kirby Webmentions Plugin injection

    KritikCVSS 9,8İstismar yokEPSS %0

    getkirby · webmentions19 Oca 2023

  • CVE-2020-26255
    36İzleyin

    PHP Phar archives could be uploaded and executed in Kirby

    KritikCVSS 9,1İstismar yokEPSS %1

    getkirby · kirby8 Ara 2020

  • CVE-2024-26483
    35İzleyin

    An arbitrary file upload vulnerability in the Profile Image module of Kirby CMS v4.1.0 allows attackers to execute arbitrary code via a craf

    YüksekCVSS 8,8İstismar yokEPSS %0

    getkirby · kirby22 Şub 2024

  • CVE-2023-38488
    35İzleyin

    Kirby vulnerable to field injection in the KirbyData text storage handler

    YüksekCVSS 8,8İstismar yokEPSS %0

    getkirby · kirby27 Tem 2023

  • CVE-2024-41964
    32İzleyin

    Insufficient permission checks in the language settings in Kirby CMS

    YüksekCVSS 8,1İstismar yokEPSS %0

    getkirby · kirby29 Ağu 2024

  • CVE-2023-38492
    30İzleyin

    Kirby vulnerable to denial of service from unlimited password lengths

    YüksekCVSS 7,5İstismar yokEPSS %1

    getkirby · kirby27 Tem 2023

  • CVE-2026-34587
    30İzleyin

    Kirby has Server-Side Template Injection (SSTI) via double template resolution in option rendering

    YüksekCVSS 7,6İstismar yokEPSS %0

    getkirby · kirby24 Nis 2026

  • CVE-2023-38489
    29İzleyin

    Kirby vulnerable to Insufficient Session Expiration after a password change

    YüksekCVSS 7,3İstismar yokEPSS %0

    getkirby · kirby27 Tem 2023

  • CVE-2026-41325
    28İzleyin

    Kirby is vulnerable to authorization bypass during page, file and user creation via blueprint injection

    YüksekCVSS 7,1İstismar yokEPSS %0

    getkirby · kirby24 Nis 2026

  • CVE-2024-26482
    28İzleyin

    An HTML injection vulnerability exists in the Edit Content Layout module of Kirby CMS v4.1.0.

    YüksekCVSS 7,1İstismar yokEPSS %0

    getkirby · kirby22 Şub 2024

  • CVE-2026-42137
    28İzleyin

    Kirby: `pages.access/list` and `files.access/list` permissions are not consistently checked in the REST API and changes dialog

    YüksekCVSS 7,1İstismar yokEPSS %0

    getkirby · kirby9 May 2026

  • CVE-2026-42069
    28İzleyin

    Kirby: Read access to site, user and role information is not gated by permissions

    YüksekCVSS 7,1İstismar yokEPSS %0

    getkirby · kirby9 May 2026

  • CVE-2026-32870
    27İzleyin

    Kirby has XML injection in its XML creator toolkit

    OrtaCVSS 6,9İstismar yokEPSS %0

    getkirby · kirby24 Nis 2026

  • CVE-2026-29905
    26İzleyin

    Kirby CMS through 5.1.4 allows an authenticated user with 'Editor' permissions to cause a persistent Denial of Service (DoS) via a malformed

    OrtaCVSS 6,5İstismar yokEPSS %0

    getkirby · kirby26 Mar 2026

  • CVE-2025-30159
    25İzleyin

    Kirby vulnerable to path traversal of snippet names in the `snippet()` helper

    OrtaCVSS 6,3İstismar yokEPSS %0

    getkirby · kirby13 May 2025

  • CVE-2025-31493
    25İzleyin

    Path traversal of collection names during file system lookup

    OrtaCVSS 6,3İstismar yokEPSS %0

    getkirby · kirby13 May 2025

  • CVE-2018-16627
    24İzleyin

    panel/login in Kirby v2.5.12 allows Host header injection via the "forget password" feature.

    OrtaCVSS 6,1İstismar yokEPSS %0

    getkirby · kirby20 Ara 2018

  • CVE-2024-26484
    24İzleyin

    A stored cross-site scripting (XSS) vulnerability in the Edit Content Layout module of Kirby CMS v4.1.0 allows attackers to execute arbitrar

    OrtaCVSS 6,1İstismar yokEPSS %0

    getkirby · kirby22 Şub 2024

  • CVE-2020-26253
    23İzleyin

    .dev domains treated as local in Kirby

    OrtaCVSS 5,9İstismar yokEPSS %0

    getkirby · kirby7 Ara 2020

  • CVE-2026-21896
    23İzleyin

    Kirby is missing permission checks in the content changes API

    OrtaCVSS 5,8İstismar yokEPSS %0

    getkirby · kirby8 Oca 2026

  • CVE-2021-29460
    22İzleyin

    Cross-site scripting (XSS) from unsanitized uploaded SVG files

    OrtaCVSS 5,4Kavram kanıtıEPSS %3

    getkirby · kirby27 Nis 2021

  • CVE-2017-16807
    22İzleyin

    A cross-site Scripting (XSS) vulnerability in Kirby Panel before 2.3.3, 2.4.x before 2.4.2, and 2.5.x before 2.5.7 exists when displaying a

    OrtaCVSS 5,4Kavram kanıtıEPSS %2

    getkirby · panel13 Kas 2017

  • CVE-2021-41252
    21İzleyin

    Cross-site scripting (XSS) from writer field content in the site frontend

    OrtaCVSS 5,4İstismar yokEPSS %0

    getkirby · kirby16 Kas 2021

  • CVE-2022-36037
    21İzleyin

    Cross-site scripting (XSS) from dynamic options in the multiselect field in Kirby

    OrtaCVSS 5,4İstismar yokEPSS %0

    getkirby · kirby29 Ağu 2022