Vulnerabilidades em givanz
57 resultadosAnálise Vexday
A givanz possui 39 vulnerabilidades registradas, com preocupação elevada pelo volume recente: 18 CVEs publicadas nos últimos 90 dias, sinalizando ritmo de descobertas acelerado. Embora nenhuma esteja sob ataque ativo no momento e apenas 2 sejam críticas, a fraqueza dominante (CWE-79, injeção de scripts) indica padrão sistemático de falhas em validação de entrada, típico de controles de segurança deficientes no desenvolvimento.
CVE-2025-8518MEDIUMgivanz Vvveb Code Editor code.php save code injectionEPSS 2.6%CVE-2025-8517MEDIUMgivanz Vvveb session fixiationEPSS 2.5%CVE-2026-5615MEDIUMgivanz Vvvebjs File Upload Endpoint upload.php cross site scriptingEPSS 0.8%CVE-2026-54612HIGHVvveb: Authenticated editor path traversal to PHP file write/RCE via data-v-save-globalEPSS 0.8%CVE-2026-41938HIGHVvveb < 1.0.8.2 RCE via Media Upload HandlerEPSS 0.7%CVE-2026-110799CRITICALVvveb: Authentication Bypass via PHP Array Injection leading to full Account TakeoverEPSS 0.7%CVE-2026-39918CRITICALVvveb < 1.0.8.1 Code Injection via Installation EndpointEPSS 0.7%CVE-2025-11028MEDIUMgivanz Vvveb Image information disclosureEPSS 0.6%CVE-2025-11944MEDIUMgivanz Vvveb Raw SQL import.php import sql injectionEPSS 0.6%CVE-2026-34427HIGHVvveb < 1.0.8.1 Privilege Escalation via admin/user/saveEPSS 0.6%CVE-2026-49228HIGHVvveb product authorization bypass allows Vendors to read, duplicate, or delete other Vendors' productsEPSS 0.6%CVE-2026-49221HIGHVvveb digital asset authorization bypass allows Vendors to list, read, edit, or delete other Vendors' digital assetsEPSS 0.6%CVE-2026-41934HIGHVvveb < 1.0.8.2 Authenticated RCE via Code EditorEPSS 0.5%CVE-2025-9397MEDIUMgivanz Vvveb media.php unrestricted uploadEPSS 0.5%CVE-2026-55231HIGHVvveb: Path traversal in Vvveb via sanitizeFileName() bypass enables arbitrary file read and delete through backup toolsEPSS 0.5%CVE-2026-112905CRITICALVvveb: Authenticated IDOR on admin/auth-token Allows Admin Privilege Escalation via API Token TheftEPSS 0.5%CVE-2025-8519MEDIUMgivanz Vvveb Drag-and-Drop Editor editor information disclosureEPSS 0.5%CVE-2026-112904HIGHVvveb: Path Traversal in nextRestore() and nextBackup()EPSS 0.5%CVE-2026-49225HIGHVvveb product revision authorization bypass allows Vendors to read, restore, or delete other Vendors' product revisionsEPSS 0.5%CVE-2026-49224HIGHVvveb post revision authorization bypass allows Authors to read, restore, or delete other Authors' post revisionsEPSS 0.5%