NC
Product
Nuuo Cms
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 2Medium 0Low 0
Watch
Add Nuuo Cms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-17936 | 9.8 | Nov 27 | NUUO CMS All versions 3.3 and prior the application allows the upload of arbitrary files that can modify or overwrite configuration files to the server, which could allow remote… Affected: through 3.3 |
| CVE-2018-17934 | 9.8 | Nov 27 | NUUO CMS All versions 3.3 and prior the application allows external input to construct a pathname that is able to be resolved outside the intended directory Affected: through 3.3 |
| CVE-2018-17894 | 9.8 | Oct 12 | NUUO CMS all versions 3.1 and prior, The application creates default accounts that have hard-coded passwords, which could allow an attacker to gain privileged access Affected: through 3.1 |
| CVE-2018-17890 | 9.8 | Oct 12 | NUUO CMS all versions 3.1 and prior, The application uses insecure and outdated software components for functionality, which could allow arbitrary code execution Affected: through 3.1 |
| CVE-2018-17888 | 9.8 | Oct 12 | NUUO CMS all versions 3.1 and prior, The application uses a session identification mechanism that could allow attackers to obtain the active session ID, which could allow… Affected: through 3.1 |
Showing 5