Nukeviet

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 14
    Known Exploited: 0
    4
    Critical Level Threats
    3
    High Level Threats
    6
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-41147

    NukeViet CMS: Stored Cross-Site Scripting (XSS) via insufficient server-side input sanitization in Request class

    Last Modified: May 26, 2026
    Published: May 22, 2026

    CVE-2025-8772

    Vinades NukeViet Module index.php server-side request forgery

    Last Modified: Sep 15, 2025
    Published: Aug 09, 2025

    CVE-2024-36528

    nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before have a Deserialization vulnerability which results in code execution via /admin/extensions/download.php and /admin/extensions/upload.php.

    Last Modified: Sep 15, 2025
    Published: Jun 10, 2024

    CVE-2024-36531

    nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before are vulnerable to arbitrary code execution via the /admin/extensions/upload.php component.

    Last Modified: Sep 15, 2025
    Published: Jun 10, 2024

    CVE-2022-3975

    NukeViet CMS Data URL Request.php filterAttr cross site scripting

    Last Modified: Apr 15, 2025
    Published: Nov 13, 2022
    Items Per Page
    Nukeviet Vulnerabilities & Security CVEs | CVE-DB