By year
22
23
25
Bars are flaws published each year; the red part is the share attackers have used.
Latest high and critical flaws
- CVE-2023-50017 Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/database/backupHigh 8.8 · Dec 14, 2023
- CVE-2023-48914 Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/archives/add.High 8.8 · Nov 30, 2023
- CVE-2023-48913 Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/archives/delete.High 8.8 · Nov 30, 2023
- CVE-2023-48912 Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/archives/edit.High 8.8 · Nov 30, 2023
- CVE-2023-46887 In Dreamer CMS before 4.0.1, the backend attachment management office has an Arbitrary File Download vulnerability.High 7.5 · Nov 29, 2023
- CVE-2023-46886 Dreamer CMS before version 4.0.1 is vulnerable to Directory Traversal.Critical 9.1 · Nov 29, 2023
- CVE-2023-48017 Dreamer_cms 4.1.3 is vulnerable to Cross Site Request Forgery (CSRF) via Add permissions to CSRF in Permission Management.High 8.8 · Nov 17, 2023
- CVE-2023-48021 Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/task/update.High 8.8 · Nov 14, 2023
- CVE-2023-48020 Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/task/changeStatus.High 8.8 · Nov 14, 2023
- CVE-2023-45907 Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/variable/delete.High 8.8 · Oct 17, 2023
- CVE-2023-45906 Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/user/add.High 8.8 · Oct 17, 2023
- CVE-2023-45905 Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/variable/add.High 8.8 · Oct 17, 2023
- CVE-2023-45904 Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /variable/update.High 8.8 · Oct 17, 2023
- CVE-2023-45903 Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/label/delete.High 8.8 · Oct 17, 2023
- CVE-2023-45902 Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/attachment/delete.High 8.8 · Oct 17, 2023
- CVE-2023-45901 Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin\/category\/add.High 8.8 · Oct 17, 2023
- CVE-2023-43856 Dreamer CMS v4.1.3 was discovered to contain an arbitrary file read vulnerability via the component /admin/TemplateController.java.High 7.5 · Sep 27, 2023
- CVE-2023-43382 Directory Traversal vulnerability in itechyou dreamer CMS v.4.1.3 allows a remote attacker to execute arbitrary code via the themePath in the uploaded template High 8.8 · Sep 25, 2023
- CVE-2023-42279 Dreamer CMS v4.1.3 was discovered to contain a SQL injection vulnerability via the model-form-management-field form.Critical 9.8 · Sep 21, 2023
- CVE-2021-43084 An SQL Injection vulnerability exists in Dreamer CMS 4.0.0 via the tableName parameter.Critical 9.8 · Mar 24, 2022
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.