CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 10/04/2025 |
| GHSA-74j9-xhqr-6qv3 | NIEDRIG | Reflected Cross Site Scripting (XSS) in error message | 23/01/2025 |
| CVE-2024-53277 | MITTEL5.4 | Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In some cases, form messages can contain HTML markup. This is an intentional feature, allowing links and other relevant HTML markup for the given message. Some form messages include content that the user can provide. There are scenarios in the | 14/01/2025 |
| CVE-2024-47605 | MITTEL5.4 | silverstripe-asset-admin is a silverstripe assets gallery for asset management. When using the "insert media" functionality, the linked oEmbed JSON includes an HTML attribute which will replace the embed shortcode. The HTML is not sanitized before replacing the shortcode, allowing a script payload to be executed on bot | 14/01/2025 |
| GHSA-mqf3-qpc3-g26q | NIEDRIG0.0 | Silverstripe Framework has a Reflected Cross Site Scripting (XSS) in error message | 14/01/2025 |
| CVE-2024-32981 | MITTEL5.4 | Silverstripe framework is the PHP framework forming the base for the Silverstripe CMS. In affected versions a bad actor with access to edit content in the CMS could add send a specifically crafted encoded payload to the server, which could be used to inject a JavaScript payload on the front end of the site. The payload | 17/07/2024 |
| GHSA-52cw-pvq9-9m5v | MITTEL5.4 | Silverstripe uses TinyMCE which allows svg files linked in object tags | 17/07/2024 |
| GHSA-265q-222x-52m6 | HOCH8.8 | silverstripe/framework has potential SQL Injection vulnerability in PostgreSQL database connector | 28/05/2024 |
| GHSA-cwgq-83w5-8jfq | HOCH7.5 | silverstripe/framework has possible denial of service attack vector when flushing | 28/05/2024 |
| GHSA-m2hh-2m46-x6j5 | MITTEL6.5 | silverstripe/framework may disclose database credentials during connection failure | 28/05/2024 |
| GHSA-vcg6-8fxc-x5cq | HOCH8.8 | silverstripe/framework allows upload of dangerous file types | 27/05/2024 |
| GHSA-crr3-h4m8-7f56 | MITTEL5.3 | silverstripe/framework vulnerable to member disclosure in login form | 27/05/2024 |
| GHSA-vh7q-j8p5-2h4h | NIEDRIG3.5 | silverstripe/framework sends passwords back to browsers under some circumstances | 27/05/2024 |
| GHSA-f43j-8hq4-2xj9 | MITTEL | silverstripe/framework uploaded PHP script execution in assets | 27/05/2024 |
| GHSA-vgxh-x8jv-hmff | HOCH7.5 | silverstripe/framework code execution vulnerability | 27/05/2024 |
| GHSA-m5q3-mvcr-gc5m | HOCH7.5 | silverstripe/framework BackURL validation bypass with malformed URLs | 27/05/2024 |
| GHSA-r3pr-fh25-wrfc | MITTEL6.5 | silverstripe/framework's install.php script discloses sensitive data by pre-populating DB credential forms | 27/05/2024 |
| GHSA-xpff-c35g-j3cr | MITTEL6.5 | silverstripe/framework Privilege Escalation Risk in Member Edit form | 27/05/2024 |