Known vulnerabilities in Serendipity

Vendor: s9y.org
Software: Serendipity
Software CPE: cpe:2.3:a:s9y_org:serendipity:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 16
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Serendipity Serendipity is affected by 16 known vulnerabilities: 4 high, 4 medium, 8 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU30578 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-4090
CWE-79 Low
Available
No
1.6 26.11.2019 SB2019112626
#VU30699 - Improper Control of Generation of Code ('Code Injection')
CVE-2011-1133
CWE-94 High
No
No
1.5.5 05.11.2019 SB2019110522
#VU30700 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-1134
CWE-79 Low
No
No
1.5.5 05.11.2019 SB2019110522
#VU30701 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-1135
CWE-79 Low
No
No
1.5.5 05.11.2019 SB2019110522
#VU35872 - Unrestricted Upload of File with Dangerous Type
CVE-2016-10752
CWE-434 High
No
No
- 24.05.2019 SB2017111710
#VU36236 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-10737
CWE-79 Low
No
No
- 16.01.2019 SB2019011625
#VU37895 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2017-1000129
CWE-89 Medium
No
No
- 17.11.2017 SB2017111710
#VU39138 - Cross-Site Request Forgery (CSRF)
CVE-2017-8101
CWE-352 High
No
No
- 24.04.2017 SB2017012819
#VU39139 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-8102
CWE-79 Low
No
No
- 24.04.2017 SB2017042417
#VU39768 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2017-5609
CWE-89 High
No
No
- 28.01.2017 SB2017012819
#VU42393 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-5670
CWE-79 Low
No
No
- 05.11.2013 SB2013110504
#VU42659 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-5314
CWE-79 Low
Available
No
- 20.08.2013 SB2012081403
#VU43728 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-2331
CWE-79 Low
Available
No
- 14.08.2012 SB2012081403
#VU43729 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2012-2332
CWE-89 Medium
Available
No
- 14.08.2012 SB2012081403
#VU44013 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2012-2762
CWE-89 Medium
No
No
- 07.06.2012 SB2012060703
#VU44661 - Exposure of sensitive information to an unauthorized actor
CVE-2011-3800
CWE-200 Medium
No
No
- 24.09.2011 SB2011092403