Approved changes feed: RSS · Atom
cpe:2.3:a:vvveb:vvvebjs:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Vvveb (566ec578-41e8-54d4-b6ba-4b9c621ac72f) |
|---|---|
| Product | Vvvebjs (f7be26f1-519e-57b2-980a-2410d051a7d4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-8522 |
vulnerable | 2026-06-08 07:45:20.679693 |
givanz Vvvebjs node.js save.php path traversal
MEDIUM (5)
A vulnerability, which was classified as critical, was found in givanz Vvvebjs up to 2.0.4. Affected is an unknown function of the file /save.php of the component node.js. The manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.
Published: 2025-08-04T19:02:05.798Z
Updated: 2025-08-04T19:25:56.076Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-29272 |
vulnerable | 2026-06-08 06:33:29.081172 |
Details available
Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute arbitrary code and obtain sensitive information via the sanitizeFileName parameter in save.php.
Published: 2024-03-22T00:00:00.000Z
Updated: 2024-08-02T01:10:54.465Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-29271 |
vulnerable | 2026-06-08 06:33:29.080692 |
Details available
Reflected Cross-Site Scripting (XSS) vulnerability in VvvebJs before version 1.7.7, allows remote attackers to execute arbitrary code and obtain sensitive information via the action parameter in save.php.
Published: 2024-03-22T00:00:00.000Z
Updated: 2024-08-28T14:04:35.330Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25181 |
vulnerable | 2026-06-08 06:31:22.586077 |
Details available
A critical vulnerability has been identified in givanz VvvebJs 1.7.2, which allows both Server-Side Request Forgery (SSRF) and arbitrary file reading. The vulnerability stems from improper handling of user-supplied URLs in the "file_get_contents" function within the "save.php" file.
Published: 2025-12-29T00:00:00.000Z
Updated: 2025-12-30T15:58:38.236Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.