AP
Vendor
Appleple
28
CVEs
0
On KEV
0
New 30D
Products
AC9.8
A-blog Cms
Appleple
26 CVEs0 on KEV0 new
AB7.6
A-blogcms
Appleple
1 CVEs0 on KEV0 new
AN–
A-news
Appleple
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-27566 | AC A-blog Cms Appleple | 7.2 | May 19 | Path traversal vulnerability exists in a-blog cms versions prior to Ver |
| CVE-2025-32999 | AC A-blog Cms Appleple | 5.4 | May 19 | Cross-site scripting vulnerability exists in a-blog cms versions prior to Ver |
| CVE-2025-36560 | AC A-blog Cms Appleple | 7.5 | May 19 | Server-side request forgery vulnerability exists in a-blog cms multiple versions |
| CVE-2025-41429 | AC A-blog Cms Appleple | 9.8 | May 19 | a-blog cms multiple versions neutralize logs improperly |
| CVE-2025-29461 | AB A-blogcms Appleple | 7.6 | Apr 17 | An issue in a-blogcms 3.1.15 allows a remote attacker to obtain sensitive information via the /bid/1/admin/entry-edit/ path |
| CVE-2025-31103 | AC A-blog Cms Appleple | 7.5 | Mar 31 | Untrusted data deserialization vulnerability exists in a-blog cms |
| CVE-2024-31396 | AC A-blog Cms Appleple | 6.6 | May 22 | Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32 |
| CVE-2024-31395 | AC A-blog Cms Appleple | 6.1 | May 22 | Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x series versions… |
| CVE-2024-31394 | AC A-blog Cms Appleple | 6.5 | May 22 | Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x series versions… |
| CVE-2024-30420 | AC A-blog Cms Appleple | 4.4 | May 22 | Server-side request forgery (SSRF) vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32 |
| CVE-2024-30419 | AC A-blog Cms Appleple | 5.4 | May 22 | Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x series versions… |
| CVE-2024-27279 | AC A-blog Cms Appleple | 6.5 | Mar 12 | Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series Ver.3.1.9 and earlier, Ver.3.0.x series Ver.3.0.30 and earlier, Ver.2.11.x series Ver.2.11.59 and earlier,… |
| CVE-2024-25559 | AC A-blog Cms Appleple | 4.7 | Feb 15 | URL spoofing vulnerability exists in a-blog cms Ver.3.1.0 to Ver.3.1.8 |
| CVE-2024-23782 | AC A-blog Cms Appleple | 5.4 | Jan 28 | Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions… |
| CVE-2024-23348 | AC A-blog Cms Appleple | 8.8 | Jan 23 | Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior… |
| CVE-2024-23183 | AC A-blog Cms Appleple | 5.4 | Jan 23 | Cross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to… |
| CVE-2024-23182 | AC A-blog Cms Appleple | 8.1 | Jan 23 | Relative path traversal vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior… |
| CVE-2024-23181 | AC A-blog Cms Appleple | 6.1 | Jan 23 | Cross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to… |
| CVE-2024-23180 | AC A-blog Cms Appleple | 8.8 | Jan 23 | Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior… |
| CVE-2022-24374 | AC A-blog Cms Appleple | 6.1 | Feb 24 | Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to… |
| CVE-2022-23916 | AC A-blog Cms Appleple | 6.1 | Feb 24 | Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to… |
| CVE-2022-23810 | AC A-blog Cms Appleple | 6.5 | Feb 24 | Template injection (Improper Neutralization of Special Elements Used in a Template Engine) vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x… |
| CVE-2022-21142 | AC A-blog Cms Appleple | 9.8 | Feb 24 | Authentication bypass vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.74, Ver.2.9.x series versions prior to Ver.2.9.39, Ver.2.10.x series versions prior to… |
| CVE-2019-6034 | AC A-blog Cms Appleple | 6.1 | Dec 26 | a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allows arbitrary scripts to be executed in the context of the application… |
| CVE-2019-6033 | AC A-blog Cms Appleple | 6.1 | Dec 26 | Cross-site scripting vulnerability in a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allows remote attackers to inject… |
| CVE-2016-1178 | AC A-blog Cms Appleple | 6.5 | Apr 12 | The session management of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to obtain or modify sensitive data via unspecified vectors |
| CVE-2016-1179 | AC A-blog Cms Appleple | 6.1 | Apr 12 | Cross-site scripting (XSS) vulnerability in the standard template of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to inject… |
| CVE-2009-2292 | AN A-news Appleple | – | Jul 1 | Cross-site scripting (XSS) vulnerability in Appleple a-News 2.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors |
