Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
kentico kentico vulnerabilities and exploits
(subscribe to this query)
383
VMScore
CVE-2020-24794
Cross Site Scripting (XSS) vulnerability in Kentico prior to 12.0.75.
Kentico Kentico
312
VMScore
CVE-2019-19493
Kentico prior to 12.0.50 allows file uploads in which the Content-Type header is inconsistent with the file extension, leading to XSS.
Kentico Kentico
NA
CVE-2022-32387
In Kentico prior to 13.0.66, attackers can achieve Denial of Service via a crafted request to the GetResource handler.
Kentico Kentico
670
VMScore
CVE-2019-10068
An issue exists in Kentico 12.0.x prior to 12.0.15, 11.0.x prior to 11.0.48, 10.0.x prior to 10.0.52, and 9.x versions. Due to a failure to validate security headers, it was possible for a specially crafted request to the staging service to bypass the initial authentication and p...
Kentico Kentico
356
VMScore
CVE-2022-29287
Kentico CMS prior to 13.0.66 has an Insecure Direct Object Reference vulnerability. It allows an attacker with user management rights (default is Administrator) to export the user options of any user, even ones with higher privileges (like Global Administrators) than the current ...
Kentico Kentico
570
VMScore
CVE-2019-12102
Kentico 11 through 12 lets attackers upload and explore files without authentication via the cmsmodules/medialibrary/formcontrols/liveselectors/insertimageormedia/tabs_media.aspx URI. NOTE: The vendor disputes the report because the researcher did not configure the media library ...
Kentico Kentico
578
VMScore
CVE-2018-6843
Kentico 10 prior to 10.0.50 and 11 prior to 11.0.3 has SQL injection in the administration interface.
Kentico Kentico Cms
605
VMScore
CVE-2018-19453
Kentico CMS prior to 11.0.45 allows unrestricted upload of a file with a dangerous type.
Kentico Kentico Cms
801
VMScore
CVE-2018-7046
Arbitrary code execution vulnerability in Kentico 9 through 11 allows remote authenticated users to execute arbitrary operating system commands in a dynamic .NET code evaluation context via C# code in a "Pages -> Edit -> Template -> Edit template properties -> La...
Kentico Kentico Cms
312
VMScore
CVE-2018-7205
Reflected Cross-Site Scripting vulnerability in "Design" on "Edit device layout" in Kentico 9 through 11 allows remote malicious users to execute malicious JavaScript via a malicious devicename parameter in a link that is entered via the "Pages -> Edit...
Kentico Kentico Cms
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
SSRF
CVE-2023-52162
CVE-2024-23670
CVE-2024-5404
man-in-the-middle
CVE-2024-5214
CVE-2024-4358
CVE-2024-20696
hard-coded
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »