TI-2024-18282 CVE-2024-27480 · GHSA-2rqx-6v8j-7xmq
givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload.
Priority HIGH 82
givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload.
givanz
Records66All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high28CVSS 7.0–8.9
Exploited now
givanz records in CISA KEVNo givanz vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records in Vvvebjs · all components
TI-2024-16622 CVE-2024-25182 · GHSA-wgr2-qr2w-94qw
givanz VvvebJs 1.7.2 suffers from a File Upload vulnerability via save.php.
Priority HIGH 82
givanz VvvebJs 1.7.2 suffers from a File Upload vulnerability via save.php.
TI-2024-16621 CVE-2024-25181 · GHSA-5r6q-cg35-jr9q
A critical vulnerability has been identified in givanz VvvebJs 1.7.2, which allows both…
Priority HIGH 80
A critical vulnerability has been identified in givanz VvvebJs 1.7.2, which allows both Server-Side Request Forgery (SSRF) and arbitrary file reading.
TI-2024-19414 CVE-2024-29272 · GHSA-pmm3-68q9-57jg
Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows…
Priority MEDIUM 64
Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute arbitrary code and obtain sensitive information via the sanitizeFileName parameter in save.php.
TI-2025-07802 CVE-2025-8522 · GHSA-mxvv-74fw-8q2r
givanz Vvvebjs node.js save.php path traversal
Priority MEDIUM 45
A vulnerability, which was classified as critical, was found in givanz Vvvebjs up to 2.0.4.
TI-2024-16623 CVE-2024-25183 · GHSA-cj98-23mv-wprf
givanz VvvebJs 1.7.2 is vulnerable to Directory Traversal via scan.php.
Priority MEDIUM 40
givanz VvvebJs 1.7.2 is vulnerable to Directory Traversal via scan.php.
TI-2024-19413 CVE-2024-29271 · GHSA-pc95-3wgm-x28p
Reflected Cross-Site Scripting (XSS) vulnerability in VvvebJs before version 1.7.7…
Priority LOW 30
Reflected Cross-Site Scripting (XSS) vulnerability in VvvebJs before version 1.7.7, allows remote attackers to execute arbitrary code and obtain sensitive information via the action parameter in save.php.