ZeroHour

Vulnerabilities

3 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos

CVEVulnerabilityCVSSEPSSFlagsAffectedExposurePublished
CVE-2023-34169
Cross-Site Request Forgery (CSRF) vulnerability in SAKURA Internet Inc.

Cross-Site Request Forgery (CSRF) vulnerability in SAKURA Internet Inc. TS Webfonts for さくらのレンタルサーバ plugin <= 3.1.2 versions.

NVD description · AI analysis pending
8.8<1%
  • sakura ts webfonts for sakura
CVE-2023-32624
+1 in the same advisory: …32625
Cross-site scripting vulnerability in TS Webfonts for SAKURA 3.1.0 and earlier allows a remote unauthenticated attacker to inject an arbitrary script.

Cross-site scripting vulnerability in TS Webfonts for SAKURA 3.1.0 and earlier allows a remote unauthenticated attacker to inject an arbitrary script.

NVD description · AI analysis pending
6.1
group max
<1%
  • sakura ts webfonts for sakura