Approved changes feed: RSS · Atom

cpe:2.3:a:aquaverde:aquarius_cms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAquaverde (72a06d86-8752-50d2-a87c-8a05481197a3)
ProductAquarius Cms (8e32fe72-9ed9-5326-a950-63bd584e6524)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/aquaverde/aquarius-core purl2cpe 2026-06-01 10:18:08.859892

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-9734 vulnerable 2026-06-08 05:14:26.160845 Details available
Aquarius CMS through 4.3.5 writes POST and GET parameters (including passwords) to a log file due to an overwriting of configuration parameters under certain circumstances.
Published: 2019-04-24T14:04:53.000Z
Updated: 2024-08-04T22:01:54.075Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9724 vulnerable 2026-06-08 05:14:26.148091 Details available
aquaverde Aquarius CMS through 4.3.5 allows Information Exposure through Log Files because of an error in the Log-File writer component.
Published: 2019-04-24T13:56:18.000Z
Updated: 2024-08-04T22:01:53.932Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1010308 vulnerable 2026-06-08 05:12:21.795505 Details available
Aquaverde GmbH Aquarius CMS prior to version 4.1.1 is affected by: Incorrect Access Control. The impact is: The access to the log file is not restricted. It contains sensitive information like passwords etc. The component is: log file. The attack vector is: open the file.
Published: 2019-07-15T17:01:22.000Z
Updated: 2024-08-05T03:07:18.494Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.