| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2022-39297 | Deserialization of untrusted data in MelisCms | melisplatform | melis-cms | High | 7.7 | 2022-10-12 00:00:00 | Deep Dive |
| CVE-2022-39256 | Orckestra C1 CMS's deserialization of untrusted data allows for arbitrary code execution. | Orckestra | C1-CMS-Foundation | Critical | 9.0 | 2022-09-27 15:00:15 | Deep Dive |
| CVE-2022-40635 | Improper Control of Dynamically-Managed Code Resources in Crafter Studio | Crafter Software | Crafter CMS | Medium | 6.4 | 2022-09-13 18:25:11 | Deep Dive |
| CVE-2022-40634 | Improper Control of Dynamically-Managed Code Resources in Crafter Studio | Crafter Software | Crafter CMS | Medium | 6.4 | 2022-09-13 18:25:10 | Deep Dive |
| CVE-2022-27911 | [20220801] - Core - Multiple Full Path Disclosures because of missing '_JEXEC or die check' | Joomla! Project | Joomla! CMS | 中危 | - | 2022-08-31 10:00:14 | Deep Dive |
| CVE-2021-26639 | WISA Smart Wing CMS File Download Vulnerability | WISA corp. | Smart Wing CMS | High | 8.1 | 2022-08-17 20:21:29 | Deep Dive |
| CVE-2022-2769 | SourceCodester Company Website CMS contact cross site scripting | SourceCodester | Company Website CMS | Low | 3.5 | 2022-08-11 11:50:34 | Deep Dive |
| CVE-2022-2765 | SourceCodester Company Website CMS settings improper authentication | SourceCodester | Company Website CMS | Medium | 6.3 | 2022-08-11 09:30:18 | Deep Dive |
| CVE-2022-2751 | SourceCodester Company Website CMS add-portfolio.php unrestricted upload | SourceCodester | Company Website CMS | Medium | 6.3 | 2022-08-11 04:57:23 | Deep Dive |
| CVE-2022-2750 | SourceCodester Company Website CMS Add Service add-service.php unrestricted upload | SourceCodester | Company Website CMS | Medium | 6.3 | 2022-08-11 04:57:07 | Deep Dive |
| CVE-2022-2740 | SourceCodester Company Website CMS Add Blog add-blog.php unrestricted upload | SourceCodester | Company Website CMS | Medium | 6.3 | 2022-08-11 04:55:34 | Deep Dive |
| CVE-2022-2736 | SourceCodester Company Website CMS Background Upload Logo Icon updatelogo.php unrestricted upload | SourceCodester | Company Website CMS | Medium | 6.3 | 2022-08-11 04:55:23 | Deep Dive |
| CVE-2022-2725 | SourceCodester Company Website CMS add-blog.php cross site scripting | SourceCodester | Company Website CMS | Low | 3.5 | 2022-08-09 07:11:00 | Deep Dive |
| CVE-2022-2702 | SourceCodester Company Website CMS Cookie site-settings.php access control | SourceCodester | Company Website CMS | High | 7.3 | 2022-08-08 12:26:21 | Deep Dive |
| CVE-2022-2694 | SourceCodester Company Website CMS unrestricted upload | SourceCodester | Company Website CMS | Medium | 6.3 | 2022-08-06 17:21:43 | Deep Dive |
| CVE-2017-20064 | Elefant CMS layout code injection | Elefant | CMS | Medium | 6.3 | 2022-06-20 04:50:36 | Deep Dive |
| CVE-2017-20063 | Elefant CMS File Upload drop privileges management | Elefant | CMS | Medium | 6.3 | 2022-06-20 04:50:34 | Deep Dive |
| CVE-2017-20062 | Elefant CMS cross-site request forgery | Elefant | CMS | Medium | 5.0 | 2022-06-20 04:50:33 | Deep Dive |
| CVE-2017-20061 | Elefant CMS extended Reflected cross site scriting | Elefant | CMS | Medium | 4.3 | 2022-06-20 04:50:31 | Deep Dive |
| CVE-2017-20060 | Elefant CMS Blog Post Persistent cross site scriting | Elefant | CMS | Low | 3.5 | 2022-06-20 04:50:30 | Deep Dive |