GI
Vendor
givanz
25
CVEs
0
On KEV
0
New 30D
Products
VV9.8
Vvveb
givanz
16 CVEs0 on KEV0 new
VV9.8
Vvvebjs
Vvveb
7 CVEs0 on KEV0 new
VC9.1
Vvveb CMS
Vvveb
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-6249 | VC Vvveb CMS Vvveb | 8.8 | Apr 20 | Vvveb CMS 1.0.8.2 Remote Code Execution via Media Upload |
| CVE-2026-6257 | VC Vvveb CMS Vvveb | 9.1 | Apr 20 | Vvveb CMS < v1.0.8.2 Remote Code Execution via Media Management |
| CVE-2024-25181 | VV Vvvebjs Vvveb | 9.1 | Dec 29 | A critical vulnerability has been identified in givanz VvvebJs 1.7.2, which allows both Server-Side Request Forgery (SSRF) and arbitrary file reading |
| CVE-2024-27480 | VV Vvvebjs Vvveb | 9.8 | Dec 29 | givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload |
| CVE-2024-25183 | VV Vvvebjs Vvveb | 7.5 | Dec 29 | givanz VvvebJs 1.7.2 is vulnerable to Directory Traversal via scan.php |
| CVE-2024-25182 | VV Vvvebjs Vvveb | 9.8 | Dec 29 | givanz VvvebJs 1.7.2 suffers from a File Upload vulnerability via save.php |
| CVE-2025-12203 | VV Vvveb givanz | 4.9 | Oct 27 | givanz Vvveb Code Editor functions.php sanitizeFileName path traversal |
| CVE-2025-11944 | VV Vvveb givanz | 7.2 | Oct 19 | givanz Vvveb Raw SQL import.php import sql injection |
| CVE-2025-11029 | VV Vvveb Vvveb | 8.8 | Sep 26 | givanz Vvveb cross-site request forgery |
| CVE-2025-11028 | VV Vvveb Vvveb | 7.5 | Sep 26 | givanz Vvveb Image information disclosure |
| CVE-2025-11027 | VV Vvveb Vvveb | 5.4 | Sep 26 | givanz Vvveb SVG File cross site scripting |
| CVE-2025-11026 | VV Vvveb Vvveb | 7.5 | Sep 26 | givanz Vvveb Configuration File information disclosure |
| CVE-2025-9728 | VV Vvveb Vvveb | 6.1 | Aug 31 | givanz Vvveb login.tpl cross site scripting |
| CVE-2025-9397 | VV Vvveb Vvveb | 9.8 | Aug 24 | givanz Vvveb media.php unrestricted upload |
| CVE-2025-8976 | VV Vvveb Vvveb | 5.4 | Aug 14 | givanz Vvveb Endpoint post cross site scripting |
| CVE-2025-8975 | VV Vvveb Vvveb | 5.4 | Aug 14 | givanz Vvveb edit.tpl cross site scripting |
| CVE-2025-8522 | VV Vvvebjs Vvveb | 5.0 | Aug 4 | givanz Vvvebjs node.js save.php path traversal |
| CVE-2025-8521 | VV Vvveb Vvveb | 5.4 | Aug 4 | givanz Vvveb Add Type post-types cross site scripting |
| CVE-2025-8520 | VV Vvveb Vvveb | 4.7 | Aug 4 | givanz Vvveb Drag-and-Drop Editor editor server-side request forgery |
| CVE-2025-8519 | VV Vvveb Vvveb | 2.7 | Aug 4 | givanz Vvveb Drag-and-Drop Editor editor information disclosure |
| CVE-2025-8518 | VV Vvveb Vvveb | 7.2 | Aug 4 | givanz Vvveb Code Editor code.php save code injection |
| CVE-2025-8517 | VV Vvveb Vvveb | 6.3 | Aug 4 | givanz Vvveb session fixiation |
| CVE-2025-44022 | VV Vvveb Vvveb | 9.8 | May 12 | An issue in vvveb CMS v.1.0.6 allows a remote attacker to execute arbitrary code via the Plugin mechanism |
| CVE-2024-29272 | VV Vvvebjs Vvveb | 6.5 | Mar 22 | Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute arbitrary code and obtain sensitive information via the… |
| CVE-2024-29271 | VV Vvvebjs Vvveb | 6.1 | Mar 22 | Reflected Cross-Site Scripting (XSS) vulnerability in VvvebJs before version 1.7.7, allows remote attackers to execute arbitrary code and obtain sensitive information via the… |