Export limit exceeded: 10819 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2024-29469

A stored cross-site scripting (XSS) vulnerability in OneBlog v2.3.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category List parameter under the Lab module.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Oneblog Project Zhyd
Products
Oneblog Oneblog
CVE-2021-46085

OneBlog <= 2.2.8 is vulnerable to Insecure Permissions. Low level administrators can delete high-level administrators beyond their authority.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Oneblog Project
Products
Oneblog
CVE-2021-46025

A Cross SIte Scripting (XSS) vulnerability exists in OneBlog <= 2.2.8. via the add function in the operation tab list in the background.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Oneblog Project
Products
Oneblog