JB
Vendor
Javaweb Blog Project
2
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2022-40037 | JB Javaweb Blog Javaweb Blog Project | 9.8 | Jan 26 | An issue discovered in Rawchen blog-ssm v1.0 allows remote attacker to escalate privileges and execute arbitrary commands via the component /upFile |
| CVE-2022-40034 | JB Javaweb Blog Javaweb Blog Project | 5.4 | Jan 23 | Cross-Site Scripting (XSS) vulnerability found in Rawchen blog-ssm v1.0 allows attackers to execute arbitrary code via the 'notifyInfo' parameter |