CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 17/06/2024 |
| GHSA-29w6-c52g-m8jc | 보통4.0 | C5 Firefly III CSV Injection. | 31/01/2024 |
| CVE-2024-22075 | 보통6.1 | Firefly III (aka firefly-iii) before 6.1.1 allows webhooks HTML Injection. | 05/01/2024 |
| CVE-2023-1788 | 심각9.8 | Insufficient Session Expiration in GitHub repository firefly-iii/firefly-iii prior to 6. | 05/04/2023 |
| CVE-2023-1789 | 심각9.8 | Improper Input Validation in GitHub repository firefly-iii/firefly-iii prior to 6.0.0. | 01/04/2023 |
| CVE-2023-0298 | 보통6.5 | Incorrect Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0. | 14/01/2023 |
| CVE-2021-4005 | 보통4.3 | firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) | 04/12/2021 |
| CVE-2021-4015 | 보통4.3 | firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) | 01/12/2021 |
| CVE-2021-3921 | 보통4.3 | firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) | 13/11/2021 |
| CVE-2021-3901 | 높음8.8 | firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) | 27/10/2021 |
| CVE-2021-3900 | 보통6.5 | firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) | 27/10/2021 |
| CVE-2021-3851 | 보통5.4 | firefly-iii is vulnerable to URL Redirection to Untrusted Site | 19/10/2021 |
| CVE-2021-3846 | 높음8.8 | firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type | 19/10/2021 |
| CVE-2021-3819 | 높음8.8 | firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) | 27/09/2021 |
| CVE-2021-3730 | 보통6.5 | firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) | 23/08/2021 |
| CVE-2021-3729 | 보통4.3 | firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) | 23/08/2021 |
| CVE-2021-3728 | 보통6.5 | firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) | 23/08/2021 |