Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
kentico kentico vulnerabilities and exploits
(subscribe to this query)
312
VMScore
CVE-2019-19493
Kentico prior to 12.0.50 allows file uploads in which the Content-Type header is inconsistent with the file extension, leading to XSS.
Kentico Kentico
NA
CVE-2022-32387
In Kentico prior to 13.0.66, attackers can achieve Denial of Service via a crafted request to the GetResource handler.
Kentico Kentico
670
VMScore
CVE-2019-10068
An issue exists in Kentico 12.0.x prior to 12.0.15, 11.0.x prior to 11.0.48, 10.0.x prior to 10.0.52, and 9.x versions. Due to a failure to validate security headers, it was possible for a specially crafted request to the staging service to bypass the initial authentication and p...
Kentico Kentico
383
VMScore
CVE-2020-24794
Cross Site Scripting (XSS) vulnerability in Kentico prior to 12.0.75.
Kentico Kentico
570
VMScore
CVE-2019-12102
Kentico 11 through 12 lets attackers upload and explore files without authentication via the cmsmodules/medialibrary/formcontrols/liveselectors/insertimageormedia/tabs_media.aspx URI. NOTE: The vendor disputes the report because the researcher did not configure the media library ...
Kentico Kentico
356
VMScore
CVE-2022-29287
Kentico CMS prior to 13.0.66 has an Insecure Direct Object Reference vulnerability. It allows an attacker with user management rights (default is Administrator) to export the user options of any user, even ones with higher privileges (like Global Administrators) than the current ...
Kentico Kentico
356
VMScore
CVE-2019-6242
Kentico v10.0.42 allows Global Administrators to read the cleartext SMTP Password by navigating to the SMTP configuration page. NOTE: the vendor considers this a best-practice violation but not a vulnerability. The vendor plans to fix it at a future time
Kentico Kentico 10.0.42
312
VMScore
CVE-2018-6842
Kentico 10 prior to 10.0.50 and 11 prior to 11.0.3 has XSS in which a crafted URL results in improper construction of a system page.
Kentico Kentico Cms
578
VMScore
CVE-2018-6843
Kentico 10 prior to 10.0.50 and 11 prior to 11.0.3 has SQL injection in the administration interface.
Kentico Kentico Cms
668
VMScore
CVE-2017-17736
Kentico 9.0 prior to 9.0.51 and 10.0 prior to 10.0.48 allows remote malicious users to obtain Global Administrator access by visiting CMSInstall/install.aspx and then navigating to the CMS Administration Dashboard.
Kentico Kentico Cms
2 Github repositories
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-5834
CVE-2024-30100
CVE-2024-4577
physical
dos
CVE-2024-30099
CVE-2024-27801
CVE-2024-32146
logic flaw
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »