CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 23/05/2024 |
| GHSA-qp29-wcc2-vmpc | 보통4.3 | Silverstripe HtmlEditor embed url sanitisation | 23/05/2024 |
| GHSA-j982-5jv7-v43r | 보통6.1 | Silverstripe Form field validation message XSS vulnerability | 23/05/2024 |
| GHSA-mqf5-275h-gf6r | 보통6.1 | Silverstripe framework is vulnerable to XSS in install.php | 23/05/2024 |
| GHSA-g4hp-pfvf-vm5w | 보통6.5 | SilverStripe Vulnerability on 'isDev', 'isTest' and 'flush' $_GET validation | 23/05/2024 |
| GHSA-hq4p-5mpr-jj9m | 보통4.7 | Silverstripe XSS in dev/build returnURL Parameter | 23/05/2024 |
| GHSA-vp8p-c6xj-xpj7 | 보통5.8 | Silverstripe External redirection risk in Security?ReturnURL | 23/05/2024 |
| GHSA-25gq-jvx2-vg9x | 높음7.2 | Silverstripe X-Forwarded-Host request hostname injection | 23/05/2024 |
| GHSA-jqp8-v74p-g8px | 보통6.1 | Silverstripe XSS in Director::force_redirect() | 23/05/2024 |
| GHSA-4h54-vwx9-3vr3 | 보통6.1 | Silverstripe XSS In FormAction | 23/05/2024 |
| GHSA-34q6-xqxh-gq39 | 보통6.1 | Silverstripe XSS In rewritten hash links | 23/05/2024 |
| GHSA-88jp-9jrv-6368 | 보통6.1 | Silverstripe XSS In GridField print | 23/05/2024 |
| GHSA-r32j-mr8p-hfp8 | 보통6.1 | Silverstripe XSS in TreeDropdownField and TreeMultiSelectField | 23/05/2024 |
| GHSA-g43w-98wp-m694 | 보통5.3 | SilverStripe framework XML Quadratic Blowup Attack | 23/05/2024 |
| GHSA-5f5v-5c3v-gw5v | 보통6.1 | Silverstripe IE requests not properly behaving with rewritehashlinks | 23/05/2024 |
| CVE-2023-48714 | 보통4.3 | Silverstripe Framework is the framework that forms the base of the Silverstripe content management system. Prior to versions 4.13.39 and 5.1.11, if a user should not be able to see a record, but that record can be added to a `GridField` using the `GridFieldAddExistingAutocompleter` component, the record's title can be | 23/01/2024 |