AI
Vendor
appleple inc.
72
CVEs
0
On KEV
0
New 30D
Products
AC9.8
a-blog cms
appleple inc.
22 CVEs0 on KEV0 new
AC8.8
a-blog cms Ver.3.0.x series
appleple inc.
13 CVEs0 on KEV0 new
AC8.8
a-blog cms Ver.3.1.x series
appleple inc.
13 CVEs0 on KEV0 new
AC8.8
a-blog cms Ver.2.10.x series
appleple inc.
11 CVEs0 on KEV0 new
AC8.8
a-blog cms Ver.2.11.x series
appleple inc.
11 CVEs0 on KEV0 new
AC7.5
a-blog cms (Ver. 2.8.x series)
appleple inc.
1 CVEs0 on KEV0 new
AC7.5
a-blog cms (Ver.2.9.x series)
appleple inc.
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-87727 | AC a-blog cms appleple inc. | 6.5 | Sep 11 | a-blog cms Ver. 3.2.33 and earlier contains a path traversal vulnerability, which allows an unauthenticated attacker to read or delete arbitrary files on the affected product |
| CVE-2025-27566 | AC a-blog cms appleple inc. | 7.2 | May 19 | Path traversal vulnerability exists in a-blog cms versions prior to Ver |
| CVE-2025-32999 | AC a-blog cms appleple inc. | 5.4 | May 19 | Cross-site scripting vulnerability exists in a-blog cms versions prior to Ver |
| CVE-2025-36560 | AC a-blog cms appleple inc. | 7.5 | May 19 | Server-side request forgery vulnerability exists in a-blog cms multiple versions |
| CVE-2025-41429 | AC a-blog cms appleple inc. | 9.8 | May 19 | a-blog cms multiple versions neutralize logs improperly |
| CVE-2025-31103 | AC a-blog cms (Ver.2.11.x series) appleple inc. | 7.5 | Mar 31 | Untrusted data deserialization vulnerability exists in a-blog cms |
| CVE-2024-31396 | AC a-blog cms Ver.3.0.x series appleple inc. | 6.6 | May 22 | Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32 |
| CVE-2024-31395 | AC a-blog cms Ver.2.10.x series appleple inc. | 6.1 | May 22 | Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x series versions… |
| CVE-2024-31394 | AC a-blog cms Ver.3.0.x series appleple inc. | 6.5 | May 22 | Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x series versions… |
| CVE-2024-30420 | AC a-blog cms Ver.3.1.x series appleple inc. | 4.4 | May 22 | Server-side request forgery (SSRF) vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32 |
| CVE-2024-30419 | AC a-blog cms Ver.3.1.x series appleple inc. | 5.4 | May 22 | Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x series versions… |
| CVE-2024-27279 | AC a-blog cms Ver.3.1.x series appleple inc. | 6.5 | Mar 12 | Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series Ver.3.1.9 and earlier, Ver.3.0.x series Ver.3.0.30 and earlier, Ver.2.11.x series Ver.2.11.59 and earlier,… |
| CVE-2024-25559 | AC a-blog cms appleple inc. | 4.7 | Feb 15 | URL spoofing vulnerability exists in a-blog cms Ver.3.1.0 to Ver.3.1.8 |
| CVE-2024-23782 | AC a-blog cms Ver.3.0.x series appleple inc. | 5.4 | Jan 28 | Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions… |
| CVE-2024-23348 | AC a-blog cms Ver.2.10.x series appleple inc. | 8.8 | Jan 23 | Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior… |
| CVE-2024-23183 | AC a-blog cms Ver.3.1.x series appleple inc. | 5.4 | Jan 23 | Cross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to… |
| CVE-2024-23182 | AC a-blog cms Ver.3.0.x series appleple inc. | 8.1 | Jan 23 | Relative path traversal vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior… |
| CVE-2024-23181 | AC a-blog cms Ver.3.1.x series appleple inc. | 6.1 | Jan 23 | Cross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to… |
| CVE-2024-23180 | AC a-blog cms Ver.3.1.x series appleple inc. | 8.8 | Jan 23 | Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior… |
| CVE-2022-24374 | AC a-blog cms appleple inc. | 6.1 | Feb 24 | Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to… |
| CVE-2022-23916 | AC a-blog cms appleple inc. | 6.1 | Feb 24 | Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to… |
| CVE-2022-23810 | AC a-blog cms appleple inc. | 6.5 | Feb 24 | Template injection (Improper Neutralization of Special Elements Used in a Template Engine) vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x… |
| CVE-2022-21142 | AC a-blog cms appleple inc. | 9.8 | Feb 24 | Authentication bypass vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.74, Ver.2.9.x series versions prior to Ver.2.9.39, Ver.2.10.x series versions prior to… |
| CVE-2019-6034 | AC a-blog cms appleple inc. | 6.1 | Dec 26 | a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allows arbitrary scripts to be executed in the context of the application… |
| CVE-2019-6033 | AC a-blog cms appleple inc. | 6.1 | Dec 26 | Cross-site scripting vulnerability in a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allows remote attackers to inject… |
