PatchTheCVEnucleus cms vulnerabilities
Recent CVEs affecting nucleus cms products. 4 tracked.
nucleus cms has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2008-10-06. Highest priority: CVE-2006-6920 (score 42/100).
- CVE-2008-4446 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in Nucleus EUC-JP 3.31 SP1 and earlier allows remote attackers to inj
- CVE-2008-0497 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in action.php in Nucleus CMS 3.31 allows remote attackers to inject a
- CVE-2007-5429 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in index.php in Nucleus 3.01 allows remote attackers to inject arbitr
- CVE-2006-6920 MEDIUM 6.8 DOWNGRADE Cross-site scripting (XSS) vulnerability in Nucleus before 3.24 allows remote attackers to inject arbitrary we
FAQ
How do I fix nucleus cms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is nucleus cms being exploited right now?
None of the tracked nucleus cms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which nucleus cms CVE should I patch first?
CVE-2006-6920 currently ranks highest (42/100): Cross-site scripting (XSS) vulnerability in Nucleus before 3.24 allows remote attackers to inject arbitrary we.