Known Vulnerabilities for products from Exponent
Listed below are 16 of the newest known vulnerabilities associated with the vendor "Exponent".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-48095 json | Not Provided | 2026-06-05 | 2026-06-08 | |
| CVE-2026-44368 json | Not Provided | 2026-05-13 | 2026-05-13 | |
| CVE-2026-33983 json | Not Provided | 2026-03-30 | 2026-06-30 | |
| CVE-2026-33894 json | Not Provided | 2026-03-27 | 2026-07-02 | |
| CVE-2026-32686 json | Not Provided | 2026-05-07 | 2026-05-08 | |
| CVE-2026-7830 json | Not Provided | 2026-07-01 | 2026-07-09 | |
| CVE-2026-4602 json | Not Provided | 2026-03-23 | 2026-07-01 | |
| CVE-2025-71305 json | Not Provided | 2026-05-27 | 2026-05-30 | |
| CVE-2025-40281 json | Not Provided | 2025-12-06 | 2026-06-02 | |
| CVE-2025-39788 json | Not Provided | 2025-09-11 | 2026-05-12 | |
| CVE-2007-2253 json | Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain path information via a direct request for (1) sdk/bla... | Not Provided | 2007-04-25 | 2026-04-23 |
| CVE-2007-2252 json | Directory traversal vulnerability in iconspopup.php in Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtai... | Not Provided | 2007-04-25 | 2026-04-23 |
| CVE-2006-4963 json | Directory traversal vulnerability in index.php in Exponent CMS 0.96.3 allows remote attackers to read and execute arbitrary l... | 6.4 - MEDIUM | 2006-09-23 | 2017-10-19 |
| CVE-2006-1607 json | Unspecified vulnerability in the banner module in Exponent CMS before 0.96.5 RC 1 allows "php injection" via unknown attack v... | Not Provided | 2006-04-04 | 2025-04-03 |
| CVE-2006-1606 json | Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows "directory disclosure" with unknown a... | Not Provided | 2006-04-04 | 2025-04-03 |
| CVE-2006-1605 json | Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows remote attackers to execute arbitrary... | Not Provided | 2006-04-04 | 2025-04-03 |
| CVE-2006-1604 json | Unspecified vulnerability in Exponent CMS before 0.96.5 RC 1 has unknown impact and remote attack vectors related to variable... | Not Provided | 2006-04-04 | 2025-04-03 |
| CVE-2005-3767 json | Exponent CMS 0.96.3 and later versions does not properly restrict the types of uploaded files, which allows remote attackers ... | Not Provided | 2005-11-22 | 2025-04-03 |
| CVE-2005-3766 json | Exponent CMS 0.96.3 and later versions stores sensitive user pages under the web document root with insufficient access contr... | Not Provided | 2005-11-22 | 2025-04-03 |
| CVE-2005-3765 json | Exponent CMS 0.96.3 and later versions performs a chmod on uploaded files to give them execute permissions, which allows remo... | Not Provided | 2005-11-22 | 2025-04-03 |