CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 27/05/2024 |
| GHSA-4qx8-j9vh-2628 | 高危7.5 | silverstripe/framework's User-Agent header not correctly invalidating user session | 27/05/2024 |
| GHSA-c4c3-j73v-634r | 中危 | silverstripe/framework has Cross-site Scripting vulnerability in page history comparison | 27/05/2024 |
| GHSA-pp7q-6j3f-74vj | 中危6.1 | silverstripe/framework has Cross-site Scripting vulnerability in RedirectorPage | 27/05/2024 |
| GHSA-r85g-7jpv-8xrx | 中危6.1 | silverstripe/framework has Cross-site Scripting vulnerability in CMSSecurity BackURL | 27/05/2024 |
| GHSA-hhvj-mcrx-3vcf | 中危6.1 | silverstripe/framework has Cross-site Scripting vulnerability in page name | 27/05/2024 |
| GHSA-g84q-cq55-xwgp | 中危5.3 | silverstripe/framework member disclosure in login form | 27/05/2024 |
| GHSA-468j-6jrc-2rjx | 中危6.1 | silverstripe/framework vulnerable to Cross-site Scripting In `OptionsetField` and `CheckboxSetField` | 27/05/2024 |
| GHSA-r9vp-fp72-xgf7 | 中危5.4 | silverstripe/framework's `Member.Name` is not escaped | 27/05/2024 |
| GHSA-5r8w-66hq-rc39 | 低危3.1 | silverstripe/framework's pre-existing alc_enc cookies log users in if remember me is disabled | 27/05/2024 |
| GHSA-52cx-hpc5-cxwc | 中危4.3 | silverstripe/framework missing ACL on reports | 27/05/2024 |
| GHSA-p5h2-vr99-xm99 | 中危4.3 | silverstripe/framework ChangePasswordForm does not check `Member::canLogIn()` | 27/05/2024 |
| GHSA-f3wp-xpv2-6vmg | 低危 | silverstripe/framework password encryption salt not updated | 27/05/2024 |
| GHSA-97jm-g33h-f46g | 中危6.1 | silverstripe/framework ReadOnly transformation for formfields exploitable | 23/05/2024 |
| GHSA-mpqj-f4v3-334h | 中危6.1 | Silverstripe Cross-site scripting vulnerability in VersionedRequestFilter | 23/05/2024 |
| GHSA-vj2j-6g3w-4662 | 中危5.4 | Silverstripe Missing CSRF protection in login form | 23/05/2024 |