web blog vulnerabilities and fixes

Recent CVEs affecting web blog, with upgrade or downgrade steps. 6 tracked.

Also searched as: webblog.

web blog has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2006-02-22. Highest priority: CVE-2004-2347 (score 55/100).

• CVE-2006-0846 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Leif M
• CVE-2006-0845 MEDIUM 6.5 DOWNGRADE Leif M
• CVE-2006-0844 HIGH 7.5 DOWNGRADE Leif M
• CVE-2006-0843 MEDIUM 5.0 DOWNGRADE Leif M
• CVE-2004-2347 HIGH 7.5 DOWNGRADE blog.cgi in Leif M
• CVE-2004-2127 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in Web Blog 1.1 allows remote attackers to read arbitrary files via a .

FAQ

How do I fix web blog vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is web blog being exploited right now?

None of the tracked web blog CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which web blog CVE should I patch first?

CVE-2004-2347 currently ranks highest (55/100): blog.cgi in Leif M.

RSS feed for web blog · ← Back to latest CVEs