Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

givanz — Vulnerabilities & Security Advisories 21

Browse all 21 CVE security advisories affecting givanz. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top products by givanz:VvvebVvvebjs
CVE IDTitleCVSSSeverityPublished
CVE-2026-39918 Vvveb < 1.0.8.1 Code Injection via Installation Endpoint — VvvebCWE-94 9.8 Critical2026-04-20
CVE-2026-34428 Vvveb < 1.0.8.1 SSRF via oEmbedProxy — VvvebCWE-918 7.7 High2026-04-20
CVE-2026-34427 Vvveb < 1.0.8.1 Privilege Escalation via admin/user/save — VvvebCWE-915 8.8 High2026-04-20
CVE-2026-34429 Vvveb < 1.0.8.1 Stored XSS via Media Upload and Rename — VvvebCWE-79 5.4 Medium2026-04-20
CVE-2026-5615 givanz Vvvebjs File Upload Endpoint upload.php cross site scripting — VvvebjsCWE-79 4.3 Medium2026-04-06
CVE-2025-12203 givanz Vvveb Code Editor functions.php sanitizeFileName path traversal — VvvebCWE-22 6.3 Medium2025-10-27
CVE-2025-11944 givanz Vvveb Raw SQL import.php import sql injection — VvvebCWE-89 4.7 Medium2025-10-19
CVE-2025-11029 givanz Vvveb cross-site request forgery — VvvebCWE-352 4.3 Medium2025-09-26
CVE-2025-11028 givanz Vvveb Image information disclosure — VvvebCWE-200 5.3 Medium2025-09-26
CVE-2025-11027 givanz Vvveb SVG File cross site scripting — VvvebCWE-79 2.4 Low2025-09-26
CVE-2025-11026 givanz Vvveb Configuration File information disclosure — VvvebCWE-200 3.5 Low2025-09-26
CVE-2025-9728 givanz Vvveb login.tpl cross site scripting — VvvebCWE-79 4.3 Medium2025-08-31
CVE-2025-9397 givanz Vvveb media.php unrestricted upload — VvvebCWE-434 6.3 Medium2025-08-24
CVE-2025-8976 givanz Vvveb Endpoint post cross site scripting — VvvebCWE-79 3.5 Low2025-08-14
CVE-2025-8975 givanz Vvveb edit.tpl cross site scripting — VvvebCWE-79 3.5 Low2025-08-14
CVE-2025-8522 givanz Vvvebjs node.js save.php path traversal — VvvebjsCWE-22 5.0 Medium2025-08-04
CVE-2025-8521 givanz Vvveb Add Type post-types cross site scripting — VvvebCWE-79 2.4 Low2025-08-04
CVE-2025-8520 givanz Vvveb Drag-and-Drop Editor editor server-side request forgery — VvvebCWE-918 4.7 Medium2025-08-04
CVE-2025-8519 givanz Vvveb Drag-and-Drop Editor editor information disclosure — VvvebCWE-200 2.7 Low2025-08-04
CVE-2025-8518 givanz Vvveb Code Editor code.php save code injection — VvvebCWE-94 4.7 Medium2025-08-04
CVE-2025-8517 givanz Vvveb session fixiation — VvvebCWE-384 6.3 Medium2025-08-04

This page lists every published CVE security advisory associated with givanz. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.