İçeriğe atla
Noroxi

keking kayıtları

keking üreticisine ait 12 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 22
  2. 23
  3. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

12 kayıt
  • CVE-2022-42149
    40Planlayın

    kkFileView 4.0 is vulnerable to Server-side request forgery (SSRF) via controller\OnlinePreviewController.java.

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    keking · kkfileview17 Eki 2022

  • CVE-2021-43734
    33İzleyin

    kkFileview v4.0.0 has arbitrary file read through a directory traversal vulnerability which may lead to sensitive file leak on related host.

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    keking · kkfileview15 Şub 2022

  • CVE-2022-43140
    31İzleyin

    kkFileView v4.1.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component cn.keking.web.controller.OnlinePreviewCon

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    keking · kkfileview17 Kas 2022

  • CVE-2022-36593
    26İzleyin

    kkFileView v4.0.0 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter at /controller/FileControlle

    OrtaCVSS 6,5İstismar yokEPSS %1

    keking · kkfileview2 Eyl 2022

  • CVE-2022-29349
    25İzleyin

    kkFileView v4.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the url parameter at /controller/OnlinePreviewCon

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    keking · kkfileview24 May 2022

  • CVE-2022-35151
    24İzleyin

    kkFileView v4.1.0 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the urls and currentUrl parameters at /c

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    keking · kkfileview17 Ağu 2022

  • CVE-2022-40879
    24İzleyin

    kkFileView v4.1.0 is vulnerable to Cross Site Scripting (XSS) via the parameter 'errorMsg.'

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    keking · kkfileview29 Eyl 2022

  • CVE-2022-46934
    24İzleyin

    kkFileView v4.1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the url parameter at /controller/OnlinePreviewCon

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    keking · kkfileview1 Şub 2023

  • CVE-2022-4740
    24İzleyin

    kkFileView picturesPreview setWatermarkAttribute cross site scripting

    OrtaCVSS 6,1İstismar yokEPSS %1

    keking · kkfileview25 Ara 2022

  • CVE-2023-48815
    24İzleyin

    kkFileView v4.3.0 is vulnerable to Incorrect Access Control.

    OrtaCVSS 6,1İstismar yokEPSS %0

    keking · kkfileview4 Ara 2023

  • CVE-2022-42147
    24İzleyin

    kkFileView 4.0 is vulnerable to Cross Site Scripting (XSS) via controller\ Filecontroller.java.

    OrtaCVSS 6,1İstismar yokEPSS %0

    keking · kkfileview17 Eki 2022

  • CVE-2025-4538
    21İzleyin

    kkFileView fileUpload unrestricted upload

    OrtaCVSS 5,3İstismar yokEPSS %0

    keking · kkfileview11 May 2025