Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
kentico kentico vulnerabilities and exploits
(subscribe to this query)
6.4
CVSSv2
CVE-2019-12102
Kentico 11 through 12 lets attackers upload and explore files without authentication via the cmsmodules/medialibrary/formcontrols/liveselectors/insertimageormedia/tabs_media.aspx URI. NOTE: The vendor disputes the report because the researcher did not configure the media library ...
Kentico Kentico
NA
CVE-2022-32387
In Kentico prior to 13.0.66, attackers can achieve Denial of Service via a crafted request to the GetResource handler.
Kentico Kentico
4.3
CVSSv2
CVE-2020-24794
Cross Site Scripting (XSS) vulnerability in Kentico prior to 12.0.75.
Kentico Kentico
7.5
CVSSv2
CVE-2019-10068
An issue exists in Kentico 12.0.x prior to 12.0.15, 11.0.x prior to 11.0.48, 10.0.x prior to 10.0.52, and 9.x versions. Due to a failure to validate security headers, it was possible for a specially crafted request to the staging service to bypass the initial authentication and p...
Kentico Kentico
3.5
CVSSv2
CVE-2019-19493
Kentico prior to 12.0.50 allows file uploads in which the Content-Type header is inconsistent with the file extension, leading to XSS.
Kentico Kentico
4
CVSSv2
CVE-2022-29287
Kentico CMS prior to 13.0.66 has an Insecure Direct Object Reference vulnerability. It allows an attacker with user management rights (default is Administrator) to export the user options of any user, even ones with higher privileges (like Global Administrators) than the current ...
Kentico Kentico
6.8
CVSSv2
CVE-2018-19453
Kentico CMS prior to 11.0.45 allows unrestricted upload of a file with a dangerous type.
Kentico Kentico Cms
7.2
CVSSv2
CVE-2018-5282
Kentico 9.0 up to and including 11.0 has a stack-based buffer overflow via the SqlName, SqlPswd, Database, UserName, or Password field in a SilentInstall XML document. NOTE: the vendor disputes this issue because neither a buffer overflow nor a crash can be reproduced; also, read...
Kentico Kentico Cms
1 EDB exploit
3.5
CVSSv2
CVE-2018-6842
Kentico 10 prior to 10.0.50 and 11 prior to 11.0.3 has XSS in which a crafted URL results in improper construction of a system page.
Kentico Kentico Cms
6.5
CVSSv2
CVE-2018-6843
Kentico 10 prior to 10.0.50 and 11 prior to 11.0.3 has SQL injection in the administration interface.
Kentico Kentico Cms
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
firewall
CVE-2024-35649
stored XSS
CVE-2022-28654
CVE-2020-35153
CVE-2024-27348
CVE-2022-28652
local users
CVE-2017-3506
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »