CVE Tools
Track your stack

AAS9

5 CVEs tracked since 2014. Since Jun 2014, none of them reached CISA KEV.

AAS9 CVEs per month

Jun 2014 to Feb 2015. Point at a month, or focus the strip and use the arrow keys.
AAS9 CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2014-0610
2014-0730
2014-08null or fewer
2014-09null or fewer
2014-10null or fewer
2014-11null or fewer
2014-12null or fewer
2015-01null or fewer
2015-0210

Products

The products that kept showing up in AAS9's monthly top three, with their CVEs summed over those months.

  1. Zerocms53 months

Latest CVEs

The 5 most recently published vulnerabilities affecting AAS9.

  1. CVE-2015-1442SQL injection vulnerability in views/zero_transact_user.php in the administrative backend in ZeroCMS 1.3.3, 1.3.2, and earlier allows remote authenticated users to execute arbitrary SQL commands vi...7.5
  2. CVE-2014-4710Cross-site scripting (XSS) vulnerability in zero_user_account.php in ZeroCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the Full Name field.4.3
  3. CVE-2014-4194SQL injection vulnerability in zero_transact_article.php in ZeroCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the article_id parameter in a Submit Comment action.7.5
  4. CVE-2014-4195Cross-site scripting (XSS) vulnerability in zero_view_article.php in ZeroCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the article_id parameter.4.3
  5. CVE-2014-4034SQL injection vulnerability in zero_view_article.php in ZeroCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the article_id parameter.7.5

The record

Peak rank
#41 in Jul 2014
Busiest month shown
Jul 2014, 3 CVEs
Months with a KEV entry
0 since Jun 2014
Monthly snapshots
3 since 2014
AAS9's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store