CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 27/05/2024 |
| GHSA-4qx8-j9vh-2628 | HIGH7.5 | silverstripe/framework's User-Agent header not correctly invalidating user session | 27/05/2024 |
| GHSA-c4c3-j73v-634r | MEDIUM | silverstripe/framework has Cross-site Scripting vulnerability in page history comparison | 27/05/2024 |
| GHSA-pp7q-6j3f-74vj | MEDIUM6.1 | silverstripe/framework has Cross-site Scripting vulnerability in RedirectorPage | 27/05/2024 |
| GHSA-r85g-7jpv-8xrx | MEDIUM6.1 | silverstripe/framework has Cross-site Scripting vulnerability in CMSSecurity BackURL | 27/05/2024 |
| GHSA-hhvj-mcrx-3vcf | MEDIUM6.1 | silverstripe/framework has Cross-site Scripting vulnerability in page name | 27/05/2024 |
| GHSA-g84q-cq55-xwgp | MEDIUM5.3 | silverstripe/framework member disclosure in login form | 27/05/2024 |
| GHSA-468j-6jrc-2rjx | MEDIUM6.1 | silverstripe/framework vulnerable to Cross-site Scripting In `OptionsetField` and `CheckboxSetField` | 27/05/2024 |
| GHSA-r9vp-fp72-xgf7 | MEDIUM5.4 | silverstripe/framework's `Member.Name` is not escaped | 27/05/2024 |
| GHSA-5r8w-66hq-rc39 | LOW3.1 | silverstripe/framework's pre-existing alc_enc cookies log users in if remember me is disabled | 27/05/2024 |
| GHSA-52cx-hpc5-cxwc | MEDIUM4.3 | silverstripe/framework missing ACL on reports | 27/05/2024 |
| GHSA-p5h2-vr99-xm99 | MEDIUM4.3 | silverstripe/framework ChangePasswordForm does not check `Member::canLogIn()` | 27/05/2024 |
| GHSA-f3wp-xpv2-6vmg | LOW | silverstripe/framework password encryption salt not updated | 27/05/2024 |
| GHSA-97jm-g33h-f46g | MEDIUM6.1 | silverstripe/framework ReadOnly transformation for formfields exploitable | 23/05/2024 |
| GHSA-mpqj-f4v3-334h | MEDIUM6.1 | Silverstripe Cross-site scripting vulnerability in VersionedRequestFilter | 23/05/2024 |
| GHSA-vj2j-6g3w-4662 | MEDIUM5.4 | Silverstripe Missing CSRF protection in login form | 23/05/2024 |