CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 10/04/2025 |
| GHSA-74j9-xhqr-6qv3 | 낮음 | Reflected Cross Site Scripting (XSS) in error message | 23/01/2025 |
| CVE-2024-53277 | 보통5.4 | Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In some cases, form messages can contain HTML markup. This is an intentional feature, allowing links and other relevant HTML markup for the given message. Some form messages include content that the user can provide. There are scenarios in the | 14/01/2025 |
| CVE-2024-47605 | 보통5.4 | silverstripe-asset-admin is a silverstripe assets gallery for asset management. When using the "insert media" functionality, the linked oEmbed JSON includes an HTML attribute which will replace the embed shortcode. The HTML is not sanitized before replacing the shortcode, allowing a script payload to be executed on bot | 14/01/2025 |
| GHSA-mqf3-qpc3-g26q | 낮음0.0 | Silverstripe Framework has a Reflected Cross Site Scripting (XSS) in error message | 14/01/2025 |
| CVE-2024-32981 | 보통5.4 | Silverstripe framework is the PHP framework forming the base for the Silverstripe CMS. In affected versions a bad actor with access to edit content in the CMS could add send a specifically crafted encoded payload to the server, which could be used to inject a JavaScript payload on the front end of the site. The payload | 17/07/2024 |
| GHSA-52cw-pvq9-9m5v | 보통5.4 | Silverstripe uses TinyMCE which allows svg files linked in object tags | 17/07/2024 |
| GHSA-265q-222x-52m6 | 높음8.8 | silverstripe/framework has potential SQL Injection vulnerability in PostgreSQL database connector | 28/05/2024 |
| GHSA-cwgq-83w5-8jfq | 높음7.5 | silverstripe/framework has possible denial of service attack vector when flushing | 28/05/2024 |
| GHSA-m2hh-2m46-x6j5 | 보통6.5 | silverstripe/framework may disclose database credentials during connection failure | 28/05/2024 |
| GHSA-vcg6-8fxc-x5cq | 높음8.8 | silverstripe/framework allows upload of dangerous file types | 27/05/2024 |
| GHSA-crr3-h4m8-7f56 | 보통5.3 | silverstripe/framework vulnerable to member disclosure in login form | 27/05/2024 |
| GHSA-vh7q-j8p5-2h4h | 낮음3.5 | silverstripe/framework sends passwords back to browsers under some circumstances | 27/05/2024 |
| GHSA-f43j-8hq4-2xj9 | 보통 | silverstripe/framework uploaded PHP script execution in assets | 27/05/2024 |
| GHSA-vgxh-x8jv-hmff | 높음7.5 | silverstripe/framework code execution vulnerability | 27/05/2024 |
| GHSA-m5q3-mvcr-gc5m | 높음7.5 | silverstripe/framework BackURL validation bypass with malformed URLs | 27/05/2024 |
| GHSA-r3pr-fh25-wrfc | 보통6.5 | silverstripe/framework's install.php script discloses sensitive data by pre-populating DB credential forms | 27/05/2024 |
| GHSA-xpff-c35g-j3cr | 보통6.5 | silverstripe/framework Privilege Escalation Risk in Member Edit form | 27/05/2024 |