Vulnerabilities in vrana
18 resultsVexday analysis
A Vrana apresenta 3 vulnerabilidades catalogadas, com 1 sob exploração ativa (KEV), todas de severidade moderada ou inferior. A fraqueza predominante é validação inadequada de entrada (CWE-20), padrão comum em aplicações web, sem registros de publicações recentes que ampliem o risco imediato.
CVE-2021-21311HIGHSSRF in adminerEPSS 98.5%KEVCVE-2021-29625HIGHXSS in doc_linkEPSS 9.6%CVE-2026-25892HIGHAdminer has an Unauthenticated Persistent DoS via Array Injection in ?script=version EndpointEPSS 1.9%CVE-2026-56703HIGHAdminer before 5.4.3 Remote Code Execution via SQLite VACUUM INTOEPSS 1.2%CVE-2026-56705CRITICALAdminer before 5.4.3 Remote Code Execution via MSSQL PDO DSN InjectionEPSS 0.9%CVE-2026-56702HIGHAdminer before 5.4.3 Unrestricted File Upload via AdminerFileUploadEPSS 0.6%CVE-2026-34968HIGHAdminer before 5.4.3 Arbitrary File Deletion via SQLite DropEPSS 0.5%CVE-2026-34964MEDIUMAdminer before 5.5.0 SSRF via PDO DSN InjectionEPSS 0.4%CVE-2026-63771MEDIUMAdminer < 5.4.3 Cookie Injection via X-Forwarded-Prefix HeaderEPSS 0.4%CVE-2026-56706MEDIUMAdminer before 5.4.3 CSRF Token Secret Recovery via XOR MaskingEPSS 0.4%CVE-2026-16434LOWAdminer before 5.5.1 X-Forwarded-Prefix Backslash BypassEPSS 0.4%CVE-2026-56704MEDIUMAdminer before 5.4.3 Cross-Site Scripting via MySQL Version StringEPSS 0.3%CVE-2026-34967MEDIUMAdminer sql-log Plugin 5.3.0 through 5.4.2 Arbitrary File WriteEPSS 0.3%CVE-2026-100697MEDIUMAdminer 6.0.0 Server-Side Request Forgery via ClickHouse driverEPSS 0.3%CVE-2026-100696MEDIUMAdminer before 6.0.2 Unauthenticated SSRF via Elasticsearch DriverEPSS 0.3%CVE-2026-34959MEDIUMAdminer before 5.5.0 Open Redirect via X-Forwarded-PrefixEPSS 0.3%CVE-2026-100698MEDIUMAdminer before 6.0.2 Privileged-Port SSRF via host_port RegexEPSS 0.3%CVE-2026-100695MEDIUMAdminer before 6.0.2 XSS via CONNECTION_ID escalating to RCEEPSS 0.3%