VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

Severity

CritiqueÉlevéeMoyenneFaibleExploited in the wild (KEV)

Language / ecosystem

JavaScript / TypeScript (npm)Python (PyPI)PHP (Packagist)Java / Kotlin (Maven)GoRuby (RubyGems).NET (NuGet)

Stack

JavaScript / Node.js

Next.jsNuxtReactAngularSvelte / SvelteKitAstroRemixViteExpressNestJSFastifyNode.jsaxios

PHP

LaravelSymfonyPHP

Python

DjangoFlaskFastAPI / Starlette

Ruby

Ruby on Rails

Java

Spring

GinFiber

CMS

WordPressWooCommerceDrupalGhostStrapi

Servers & databases

nginxApache HTTP ServerMySQLPostgreSQLRedis

Vendor1

pimcoreoracleibmgoogleadobemicrosoftmozillaciscoapacheappleredhatjenkinshpAll vendors →

pimcore products

pimcore 125admin classic bundle 14customer management framework 9core 1data-hub 1e-commerce framework 1perspective editor 1web2print tools 1

402 386 vulnerabilities · 1 766 actively exploited (CISA KEV)

pimcore ✕Clear filters

153 results

ID	Severity	Summary	Published
CVE-2022-1351	MOYENNE5.4	Stored XSS in Tooltip in GitHub repository pimcore/pimcore prior to 10.4.	14/04/2022
CVE-2022-1339	ÉLEVÉE7.5	SQL injection in ElementController.php in GitHub repository pimcore/pimcore prior to 10.3.5. This vulnerability is capable of steal the data	13/04/2022
CVE-2022-1219	ÉLEVÉE7.5	SQL injection in RecyclebinController.php in GitHub repository pimcore/pimcore prior to 10.3.5. This vulnerability is capable of steal the data	08/04/2022
CVE-2022-0955	MOYENNE4.8	Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/data-hub prior to 1.2.4.	24/03/2022