Read the docs

ARK-Web co., ltd.

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

ARK-Web co., ltd. records in CISA KEV

No ARK-Web co., ltd. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
A-form 2 records LOW A-form Pc 2 records LOW A-form Pc Mobile 2 records LOW A-form Bamboo 1 record LOW A-member 1 record MEDIUM A-reserve 1 record MEDIUM

Records

2 records in A-form · all components

TI-2022-18365 CVE-2022-38972 · GHSA-qx7m-g7vm-qw2r

Cross-site scripting in ARK-Web co., ltd. A-Form

Priority LOW 29

Cross-site scripting vulnerability in Movable Type plugin A-Form versions prior to 4.1.1 (for Movable Type 7 Series) and versions prior to 3.9.1 (for Movable Type 6 Series) allows a remote unauthenticated attacker to inj…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00975 Published 2022-09-12 No fix listed CWE-79
TI-2011-02337 CVE-2011-2676 · GHSA-mxcv-w3x2-ccgv

The A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and…

Priority LOW 27

The A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and PC/Mobile before 3.1, plug-ins for Movable Type do not require administrative authentication, which allows remote authenticated users to m…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01263 Published 2011-11-03 No fix listed CWE-287
Open these records in search →