Vulnerabilities (CVE)

Total 395814 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-42618 1 Pligg 1 Pligg Cms 2026-06-17 N/A 8.8 HIGH
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /module.php?module=karma
CVE-2024-42617 1 Pligg 1 Pligg Cms 2026-06-17 N/A 8.8 HIGH
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_config.php?action=save&var_id=32
CVE-2024-42616 1 Pligg 1 Pligg Cms 2026-06-17 N/A 8.8 HIGH
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_widgets.php?action=remove&widget=Statistics
CVE-2024-42613 1 Pligg 1 Pligg Cms 2026-06-17 N/A 8.8 HIGH
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_widgets.php?action=install&widget=akismet
CVE-2024-42612 1 Pligg 1 Pligg Cms 2026-06-17 N/A 8.8 HIGH
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/domain_management.php?whitelist_add
CVE-2024-42611 1 Pligg 1 Pligg Cms 2026-06-17 N/A 8.8 HIGH
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/admin_page.php?link_id=1&mode=delete
CVE-2024-42610 1 Pligg 1 Pligg Cms 2026-06-17 N/A 8.8 HIGH
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=files
CVE-2024-42609 1 Pligg 1 Pligg Cms 2026-06-17 N/A 8.8 HIGH
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=avatars
CVE-2024-42608 1 Pligg 1 Pligg Cms 2026-06-17 N/A 8.8 HIGH
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/submit_page.php.
CVE-2024-42607 1 Pligg 1 Pligg Cms 2026-06-17 N/A 8.8 HIGH
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=database
CVE-2024-42606 1 Pligg 1 Pligg Cms 2026-06-17 N/A 8.8 HIGH
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_log.php?clear=1
CVE-2024-42605 1 Pligg 1 Pligg Cms 2026-06-17 N/A 8.8 HIGH
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/edit_page.php?link_id=1
CVE-2024-42604 1 Pligg 1 Pligg Cms 2026-06-17 N/A 8.8 HIGH
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_group.php?mode=delete&group_id=3
CVE-2024-42603 1 Pligg 1 Pligg Cms 2026-06-17 N/A 8.8 HIGH
Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.php?dobackup=clearall
CVE-2024-42599 1 Seacms 1 Seacms 2026-06-17 N/A 8.8 HIGH
SeaCMS 13.0 has a remote code execution vulnerability. The reason for this vulnerability is that although admin_files.php imposes restrictions on edited files, attackers can still bypass these restrictions and write code, allowing authenticated attackers to exploit the vulnerability to execute arbitrary commands and gain system privileges.
CVE-2024-42598 1 Seacms 1 Seacms 2026-06-17 N/A 6.7 MEDIUM
SeaCMS 13.0 has a remote code execution vulnerability. The reason for this vulnerability is that although admin_editplayer.php imposes restrictions on edited files, attackers can still bypass these restrictions and write code, allowing authenticated attackers to exploit the vulnerability to execute arbitrary commands and gain system privileges.
CVE-2024-42586 1 Siamonhasan 1 Warehouse Inventory System 2026-06-17 N/A 8.8 HIGH
A Cross-Site Request Forgery (CSRF) in the component categorie.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
CVE-2024-42585 1 Siamonhasan 1 Warehouse Inventory System 2026-06-17 N/A 8.8 HIGH
A Cross-Site Request Forgery (CSRF) in the component delete_media.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
CVE-2024-42584 1 Siamonhasan 1 Warehouse Inventory System 2026-06-17 N/A 8.8 HIGH
A Cross-Site Request Forgery (CSRF) in the component delete_product.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.
CVE-2024-42583 1 Siamonhasan 1 Warehouse Inventory System 2026-06-17 N/A 8.8 HIGH
A Cross-Site Request Forgery (CSRF) in the component delete_user.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges.