Vvveb
Vulnerability activity for Vvveb: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 5
- Critical (CVSS 9+)
- 4
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 9.1CriticalApr 20, 2026Vvveb CMS Path traversal / file handlingCVE-2026-6257Vvveb CMS before 1.0.8.2 contains a remote code execution vulnerability in its media management functionality where a missing return statement in the file rename handler allows authenticated attackers to rename files to blocked extensions .php or .htaccess. Attackers can exploit this logic flaw by first uploading a text file and renaming it to .htaccess to inject Apache directives that register PHP-executable MIME types, then uploading another file and renaming it to .php to execute arbitrary op
- 9.8CriticalDec 29, 2025vvvebjs Path traversal / file handlingCVE-2024-27480givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload.
- 7.5HighDec 29, 2025vvvebjs Path traversal / file handlingCVE-2024-25183givanz VvvebJs 1.7.2 is vulnerable to Directory Traversal via scan.php.
- 9.8CriticalDec 29, 2025vvvebjs Path traversal / file handlingCVE-2024-25182givanz VvvebJs 1.7.2 suffers from a File Upload vulnerability via save.php.
- 9.1CriticalDec 29, 2025vvvebjs SSRFCVE-2024-25181A critical vulnerability has been identified in givanz VvvebJs 1.7.2, which allows both Server-Side Request Forgery (SSRF) and arbitrary file reading. The vulnerability stems from improper handling of user-supplied URLs in the "file_get_contents" function within the "save.php" file.
Top products
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.