Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

appleple inc. vulnerabilities

25 published CVEs name appleple inc. among the affected products.

Newest CVEs

  • CVE-2026-87727

    a-blog cms Ver. 3.2.33 and earlier contains a path traversal vulnerability, which allows an unauthenticated attacker to read or delete arbitrary files on the…

    appleple inc. · a-blog cms

    Medium6.9
  • CVE-2025-27566

    Path traversal vulnerability exists in a-blog cms versions prior to Ver. 3.1.43 and versions prior to Ver. 3.0.47. This is an issue with insufficient path…

    appleple inc. · a-blog cms

    Medium5.1
  • CVE-2025-32999

    Cross-site scripting vulnerability exists in a-blog cms versions prior to Ver. 3.1.43 and prior to Ver. 3.0.47. This issue exists in a specific field in the…

    appleple inc. · a-blog cms

    Medium4.8
  • CVE-2025-36560

    Server-side request forgery vulnerability exists in a-blog cms multiple versions. If this vulnerability is exploited, a remote unauthenticated attacker may…

    appleple inc. · a-blog cms

    Critical9.2
  • CVE-2025-41429

    a-blog cms multiple versions neutralize logs improperly. If this vulnerability is exploited with CVE-2025-36560, a remote unauthenticated attacker may hijack a…

    appleple inc. · a-blog cms

    Low2.1
  • CVE-2025-31103

    Untrusted data deserialization vulnerability exists in a-blog cms. Processing a specially crafted request may store arbitrary files on the server where the…

    appleple inc. · a-blog cms (Ver.3.1.x series)

    High7.5
  • CVE-2024-31396

    Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32. If this…

    appleple inc. · a-blog cms Ver.3.1.x series

    Medium6.6
  • CVE-2024-31395

    Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32,…

    appleple inc. · a-blog cms Ver.3.1.x series

    Medium6.1
  • CVE-2024-31394

    Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x…

    appleple inc. · a-blog cms Ver.3.1.x series

    Medium6.5
  • CVE-2024-30420

    Server-side request forgery (SSRF) vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to…

    appleple inc. · a-blog cms Ver.3.1.x series

    Medium4.4