Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2022-40036

An issue was discovered in Rawchen blog-ssm v1.0 allows an attacker to obtain sensitive user information by bypassing permission checks via the /adminGetUserList component.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Blog-ssm Project
Products
Blog-ssm
CVE-2022-40035

File Upload Vulnerability found in Rawchen Blog-ssm v1.0 allowing attackers to execute arbitrary commands and gain escalated privileges via the /uploadFileList component.

CVSS 3.1 · 8.8 High EPSS 2.3% KEV · Not listed
Vendors
Blog-ssm Project
Products
Blog-ssm