Sploitus

10 exploited vulnerabilities in Little Cms

Vulnerabilities with publicly known exploits

Vendors
Little Cms, Red Hat, Lcms, Alt Linux, Linux Mint, Unknown
With known exploits
10
Affected Littlecms Little Cms versions
≤ 1.17, 2.9, 2.18
Affected Littlecms Lcms versions
≤ 1.14, 1.07, 1.08, 1.09, 1.10, 1.11, 1.12, 1.13
Affected Cms Little versions
= 0.0.1
Affected Oracle Jdk versions
= 1.8.0, 1.9.0
Affected Oracle Jre versions
= 1.8.0, 1.9.0
Affected Little Cms versions
= 0.0.1
Affected Littlecms Little Cms Color Engine versions
= 2.9

Vulnerabilities with exploits

Highest CVSS first — 4 of these already have exploit code on Sploitus

CVE-2009-0581 1 exploit
CVSS 9.3 HIGH 1970-01-01FIX AVAILABLE
Little CMS内存泄露及整数溢出漏洞
CVE-2007-2741
CVSS 9.3 HIGH 2007-05-17FIX AVAILABLE
CVE-2018-11556
CVSS 7.8 HIGH 2018-05-30
CVE-2018-11555
CVSS 7.8 HIGH 2018-05-30FIX AVAILABLE
CVE-2026-41254
CVSS 7.5 HIGH 2026-04-18FIX AVAILABLE
CVE-2008-3036 1 exploit
CVSS 7.5 HIGH 2008-07-07FIX AVAILABLE
CMS little 0.0.1 - 'template' Local File Inclusion
CVE-2017-10309 5 exploits
CVSS 7.1 HIGH 2017-10-19
Oracle Java SE Wv8u131 Information DisclosureOracle Java SE - Web Start jnlp XML External Entity Processing Information Disclosure Exploit
CVE-2008-5628 1 exploit
CVSS 6.8 MEDIUM 2008-12-17FIX AVAILABLE
CMS little 0.0.1 - 'term' SQL Injection
CVE-2018-16435
CVSS 5.5 MEDIUM 2018-08-14FIX AVAILABLE
CVE-2026-42798
CVSS 4.0 MEDIUM 2026-04-30FIX AVAILABLE