Skip to contentB3log vulnerabilities
Newest
- b3log siyuanSiYuan has an SSTI via /api/template/renderSprigCVE-2024-556606.9 Medium
- b3log siyuanA SQL injection vulnerability was discovered in Siyuan 3.1.11 in /getHistoryItems.CVE-2024-535079.8 Critical
- b3log siyuanA SQL injection vulnerability has been identified in Siyuan 3.1.11 via the ids array parameter in...CVE-2024-535069.8 Critical
- b3log siyuanA SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at ...CVE-2024-535059.8 Critical
- b3log siyuanA SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in ...CVE-2024-535049.8 Critical
- b3log siyuanSiYuan PDF PDF.js cross site scriptingCVE-2024-69385.3 Medium
- b3log vditorvditor v.3.9.8 and before is vulnerable to Arbitrary file read via a crafted data packet.CVE-2024-391505.9 Medium
- b3log vditorVditor allows Cross-site Scripting via an attribute of an `A` elementCVE-2024-34449Disputed6.1 Medium
- b3log siyuanSiYuan 3.0.3 - RCE via Server Side XSSCVE-2024-26929.0 Critical
- b3log symphonyAn issue in symphony v.3.6.3 and before allows a remote attacker to execute arbitrary code via...CVE-2024-230499.8 Critical
- b3log vditorvditor vulnerable to Cross-site ScriptingCVE-2021-32855Fix available6.1 Medium
- b3log vditor, vanessa219 vanessa219/vditor +1 moreCross-site Scripting (XSS) - Stored in vanessa219/vditorCVE-2022-0350Fix available6.1 Medium
- b3log vditor, vanessa219 vanessa219/vditor +1 moreCross-site Scripting (XSS) - Stored in vanessa219/vditorCVE-2022-0341Fix available6.6 Medium
- b3log vditor, vanessa219 vanessa219/vditor +1 moreCross-site Scripting (XSS) - Stored in vanessa219/vditorCVE-2021-4103Fix available6.8 Medium
- b3log symphonyb3log Symphony (aka Sym) before 3.6.0 has XSS via the HTTP User-Agent header.CVE-2019-174886.1 Medium
- b3log wideb3log Wide unauthenticated file accessCVE-2019-13915Fix available7.5 High
- b3log solob3log Solo 2.9.3 has XSS in the Input page under the "Publish Articles" menu with an ID of ...CVE-2018-162486.1 Medium
- b3log symphonyIn Symphony before 3.3.0, there is XSS in the Title under Post. The ID "articleTitle" of this is...CVE-2018-162494.8 Medium
- b3log symphonyModerate severity vulnerability that affects org.b3log:symphonyCVE-2019-9142Fix available6.1 Medium
- b3log soloIn b3log Solo 2.9.3, XSS in the Input page under the Publish Articles menu, with an ID of...CVE-2018-168054.8 Medium
- b3log symphonyb3log Symphony (aka Sym) 2.6.0 allows remote attackers to upload and execute arbitrary JSP files...CVE-2018-104699.8 Critical
- b3log symphonyb3log Symphony (aka Sym) 2.2.0 has XSS in processor/AdminProcessor.java in the admin console, as...CVE-2017-168215.4 Medium