Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

29 records

Vendor: appleple inc. Clear all filters
TI-2026-59886 CVE-2026-87727 · GHSA-qv9f-qp83-98hf

Path traversal in appleple inc. a-blog cms

Priority LOW 37

a-blog cms Ver. 3.2.33 and earlier contains a path traversal vulnerability, which allows an unauthenticated attacker to read or delete arbitrary files on the affected product.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00408 Published 2026-09-11 No fix listed CWE-22
TI-2025-20384 CVE-2025-27566 · GHSA-w57q-v7qr-v5m7

Path traversal in appleple inc. a-blog cms

Priority LOW 24

Path traversal vulnerability exists in a-blog cms versions prior to Ver.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00492 Published 2025-05-19 No fix listed CWE-22
TI-2025-24006 CVE-2025-32999 · GHSA-8wqw-fgqf-9mf2

Cross-site scripting in appleple inc. a-blog cms

Priority LOW 22

Cross-site scripting vulnerability exists in a-blog cms versions prior to Ver.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00248 Published 2025-05-19 No fix listed CWE-79
TI-2024-20768 CVE-2024-31396 · GHSA-chxf-xv64-xxfr

Code injection in appleple inc. a-blog cms Ver.3.1.x series

Priority LOW 31

Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32.

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00414 Published 2024-05-22 No fix listed CWE-94
TI-2024-20767 CVE-2024-31395 · GHSA-vh8v-4rwj-rmrh

Cross-site scripting in appleple inc. a-blog cms Ver.3.1.x series

Priority LOW 27

Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x series versions prior to Ver.2.11.61, Ver.2.10.x series ver…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00304 Published 2024-05-22 No fix listed CWE-79
TI-2024-20766 CVE-2024-31394 · GHSA-r868-7jmm-2qf4

Path traversal in appleple inc. a-blog cms Ver.3.1.x series

Priority LOW 30

Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x series versions prior to Ver.2.11.61, Ver.2.10.x series vers…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00739 Published 2024-05-22 No fix listed CWE-22
TI-2024-20146 CVE-2024-30420 · GHSA-5p7q-vjp4-vcrg

Server-side request forgery in appleple inc. a-blog cms Ver.3.1.x series

Priority LOW 22

Server-side request forgery (SSRF) vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32.

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00317 Published 2024-05-22 No fix listed CWE-918
TI-2024-20145 CVE-2024-30419 · GHSA-h8rv-v4gm-prcg

Cross-site scripting in appleple inc. a-blog cms Ver.3.1.x series

Priority LOW 24

Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x series versions prior to Ver.2.11.61, Ver.2.10.x series ver…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00249 Published 2024-05-22 No fix listed CWE-79
TI-2024-18118 CVE-2024-27279 · GHSA-75r2-hvcc-gw3v

Path traversal in appleple inc. a-blog cms Ver.3.1.x series

Priority LOW 30

Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series Ver.3.1.9 and earlier, Ver.3.0.x series Ver.3.0.30 and earlier, Ver.2.11.x series Ver.2.11.59 and earlier, Ver.2.10.x series Ver.2.10.51 and earlier…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00832 Published 2024-03-12 No fix listed CWE-22
TI-2024-16795 CVE-2024-25559 · GHSA-4qxf-cfrr-vxjg

Open redirect in appleple inc. a-blog cms

Priority LOW 22

URL spoofing vulnerability exists in a-blog cms Ver.3.1.0 to Ver.3.1.8.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00448 Published 2024-02-15 No fix listed CWE-601
TI-2024-15776 CVE-2024-23782 · GHSA-2jx2-r7f9-93pw

Cross-site scripting in appleple inc. a-blog cms Ver.3.1.x series

Priority LOW 24

Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series vers…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00298 Published 2024-01-28 No fix listed CWE-79
TI-2024-15448 CVE-2024-23348 · GHSA-6253-5q75-wc4w

Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to…

Priority MEDIUM 41

Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versio…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0069 Published 2024-01-23 No fix listed
TI-2024-15295 CVE-2024-23183 · GHSA-hr8f-72r6-vq27

Cross-site scripting in appleple inc. a-blog cms Ver.3.1.x series

Priority LOW 24

Cross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions pr…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00361 Published 2024-01-23 No fix listed CWE-79
TI-2024-15294 CVE-2024-23182 · GHSA-qrph-vx83-8q9v

Path traversal in appleple inc. a-blog cms Ver.3.1.x series

Priority LOW 37

Relative path traversal vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00749 Published 2024-01-23 No fix listed CWE-22
TI-2024-15293 CVE-2024-23181 · GHSA-vvwc-xg9v-c7jf

Cross-site scripting in appleple inc. a-blog cms Ver.3.1.x series

Priority LOW 27

Cross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions pr…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00411 Published 2024-01-23 No fix listed CWE-79
TI-2024-15292 CVE-2024-23180 · GHSA-vhw4-mjfv-p3gg

Unrestricted file upload in appleple inc. a-blog cms Ver.3.1.x series

Priority MEDIUM 42

Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versio…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00918 Published 2024-01-23 No fix listed CWE-434
TI-2022-08251 CVE-2022-24374 · GHSA-g667-p784-m7j2

Cross-site scripting in appleple inc. a-blog cms

Priority LOW 29

Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to Ver.2.10.44, Ver.2.11.x series versions p…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00905 Published 2022-02-24 No fix listed CWE-79
TI-2022-07894 CVE-2022-23916 · GHSA-cvcv-669g-4hcw

Cross-site scripting in appleple inc. a-blog cms

Priority LOW 29

Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to Ver.2.10.44, Ver.2.11.x series versions p…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00774 Published 2022-02-24 No fix listed CWE-79
TI-2022-07831 CVE-2022-23810 · GHSA-xx3c-ww24-2pgq

Code injection in appleple inc. a-blog cms

Priority LOW 31

Template injection (Improper Neutralization of Special Elements Used in a Template Engine) vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.1…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01116 Published 2022-02-24 No fix listed CWE-94
TI-2022-05545 CVE-2022-21142 · GHSA-56mw-g4x8-4wwm

Authentication bypass by spoofing in appleple inc. a-blog cms

Priority MEDIUM 45

Authentication bypass vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.74, Ver.2.9.x series versions prior to Ver.2.9.39, Ver.2.10.x series versions prior to Ver.2.10.43, and Ver.2.11.x series versi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01547 Published 2022-02-24 No fix listed CWE-290
TI-2019-04322 CVE-2019-6034 · GHSA-m66p-hgxv-mh75

Injection in appleple inc. a-blog cms

Priority LOW 28

a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allows arbitrary scripts to be executed in the context of the application due to unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00655 Published 2019-12-26 No fix listed CWE-74
Load more