CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| GHSA-2vh3-cj9j-mcj5 | MITTEL | eZ Publish Legacy Cross-site Scripting (XSS) in 'disabled module' error template | 15/05/2024 |
| GHSA-82rv-45pc-v28w | HOCH | eZ Publish Legacy Patch EZSA-2018-001 for Several vulnerabilities | 15/05/2024 |
| GHSA-cc2j-92jq-wgjg | HOCH | eZ Publish Information disclosure in backend content tree menu | 15/05/2024 |
| GHSA-jpwx-ffjq-wr4w | HOCH | Content object state fetch functions open to SQL injection | 07/09/2021 |
| CVE-2020-10806 | KRITISCH9.8 | eZ Publish Kernel before 5.4.14.1, 6.x before 6.13.6.2, and 7.x before 7.5.6.2 and eZ Publish Legacy before 5.4.14.1, 2017 before 2017.12.7.2, and 2019 before 2019.03.4.2 allow remote attackers to execute arbitrary code by uploading PHP code, unless the vhost configuration permits only app.php execution. | 22/03/2020 |
| CVE-2017-1000431 | MITTEL6.1 | eZ Systems eZ Publish version 5.4.0 to 5.4.9, and 5.3.12 and older, is vulnerable to an XSS issue in the search module, resulting in a risk of attackers injecting scripts which may e.g. steal authentication credentials. | 02/01/2018 |