CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 27/05/2024 |
| GHSA-4qx8-j9vh-2628 | 높음7.5 | silverstripe/framework's User-Agent header not correctly invalidating user session | 27/05/2024 |
| GHSA-c4c3-j73v-634r | 보통 | silverstripe/framework has Cross-site Scripting vulnerability in page history comparison | 27/05/2024 |
| GHSA-pp7q-6j3f-74vj | 보통6.1 | silverstripe/framework has Cross-site Scripting vulnerability in RedirectorPage | 27/05/2024 |
| GHSA-r85g-7jpv-8xrx | 보통6.1 | silverstripe/framework has Cross-site Scripting vulnerability in CMSSecurity BackURL | 27/05/2024 |
| GHSA-hhvj-mcrx-3vcf | 보통6.1 | silverstripe/framework has Cross-site Scripting vulnerability in page name | 27/05/2024 |
| GHSA-g84q-cq55-xwgp | 보통5.3 | silverstripe/framework member disclosure in login form | 27/05/2024 |
| GHSA-468j-6jrc-2rjx | 보통6.1 | silverstripe/framework vulnerable to Cross-site Scripting In `OptionsetField` and `CheckboxSetField` | 27/05/2024 |
| GHSA-r9vp-fp72-xgf7 | 보통5.4 | silverstripe/framework's `Member.Name` is not escaped | 27/05/2024 |
| GHSA-5r8w-66hq-rc39 | 낮음3.1 | silverstripe/framework's pre-existing alc_enc cookies log users in if remember me is disabled | 27/05/2024 |
| GHSA-52cx-hpc5-cxwc | 보통4.3 | silverstripe/framework missing ACL on reports | 27/05/2024 |
| GHSA-p5h2-vr99-xm99 | 보통4.3 | silverstripe/framework ChangePasswordForm does not check `Member::canLogIn()` | 27/05/2024 |
| GHSA-f3wp-xpv2-6vmg | 낮음 | silverstripe/framework password encryption salt not updated | 27/05/2024 |
| GHSA-97jm-g33h-f46g | 보통6.1 | silverstripe/framework ReadOnly transformation for formfields exploitable | 23/05/2024 |
| GHSA-mpqj-f4v3-334h | 보통6.1 | Silverstripe Cross-site scripting vulnerability in VersionedRequestFilter | 23/05/2024 |
| GHSA-vj2j-6g3w-4662 | 보통5.4 | Silverstripe Missing CSRF protection in login form | 23/05/2024 |