Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 184

Export CSV
CVE-2024-33401

Cross Site Scripting vulnerability in DedeCMS v.5.7.113 allows a remote attacker to run arbitrary code via the mnum parameter.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Dedecms
Products
Dedecms
CVE-2024-28678

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_description_main.php

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Dedecms
Products
Dedecms
CVE-2024-28679

DedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via Photo Collection.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Dedecms
Products
Dedecms
CVE-2024-28680

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/diy_add.php.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Dedecms
Products
Dedecms
CVE-2024-28681

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/plus_edit.php.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Dedecms
Products
Dedecms
CVE-2024-28682

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/sys_cache_up.php.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Dedecms
Products
Dedecms
CVE-2024-28683

DedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via create file.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Dedecms
Products
Dedecms
CVE-2024-28430

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/catalog_edit.php.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Dedecms
Products
Dedecms
CVE-2024-28431

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/catalog_del.php.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Dedecms
Products
Dedecms
CVE-2024-28432

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_edit.php.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Dedecms
Products
Dedecms
CVE-2024-28665

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_add.php

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Dedecms
Products
Dedecms
CVE-2024-28666

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/media_add.php

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Dedecms
Products
Dedecms
CVE-2024-28667

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/templets_one_edit.php

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Dedecms
Products
Dedecms
CVE-2024-28668

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/mychannel_add.php

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Dedecms
Products
Dedecms
CVE-2024-28675

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/diy_edit.php

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Dedecms
Products
Dedecms
CVE-2024-28684

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/module_main.php

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Dedecms
Products
Dedecms
CVE-2024-28669

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/freelist_edit.php.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Dedecms
Products
Dedecms
CVE-2024-28670

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/freelist_main.php.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Dedecms
Products
Dedecms
CVE-2024-28672

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/media_edit.php.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Dedecms
Products
Dedecms
CVE-2024-28673

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/mychannel_edit.php.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Dedecms
Products
Dedecms