ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Vulnerabilities

5 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos

ShowKEV onlyPublic PoCCVSS ≥ 9CVSS ≥ 7EPSS ≥ 10%EPSS ≥ 50%Window24h7d30d90dAll
StackAllWordPressE-commerceDrupalJoomlanpmpipMavenGoPackagistRubyGemsNuGet
SortpublishedepsscvssKEV dateupdatedvendor: dotnetblogengine ✕
CVEVulnerabilityCVSSEPSSFlagsAffectedExposurePublished
CVE-2019-10717
+1 in the same advisory: …10721
BlogEngine.NET 3.3.7.0 allows /api/filemanager Directory Traversal via the path parameter.

BlogEngine.NET 3.3.7.0 allows /api/filemanager Directory Traversal via the path parameter.

NVD description · AI analysis pending		7.1
group max
5% PoC
  • dotnetblogengine blogengine.net
—
CVE-2019-10719
+2 in the same advisory: …10718 …11392
BlogEngine.NET 3.3.7.0 and earlier allows Directory Traversal and Remote Code Execution because file creation is mishandled, related to /api/upload and BlogEngi

BlogEngine.NET 3.3.7.0 and earlier allows Directory Traversal and Remote Code Execution because file creation is mishandled, related to /api/upload and BlogEngine.NET/AppCode/Api/UploadController.cs. NOTE: this issue exists because of an incomplete fix for CVE-2019-6714.

NVD description · AI analysis pending		8.8
group max
8% PoC ×2
  • dotnetblogengine blogengine.net
—