High
ghsa-p2v5-xcqm-4fv6
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filters
Medium
ghsa-55pp-293f-3365
silverstripe/userforms file upload exposure on UserForms module
Medium
CVE-2024-35621
formwork Cross-site scripting vulnerability in Markdown fields
High
ghsa-wjg9-v8cf-f5q2
silverstripe/graphql Cross-Site Request Forgery vulnerability
High
ghsa-265q-222x-52m6
silverstripe/framework has potential SQL Injection vulnerability in PostgreSQL database connector
High
ghsa-cwgq-83w5-8jfq
silverstripe/framework has possible denial of service attack vector when flushing
Medium
ghsa-m2hh-2m46-x6j5
silverstripe/framework may disclose database credentials during connection failure
High
ghsa-vcg6-8fxc-x5cq
silverstripe/framework allows upload of dangerous file types
Medium
ghsa-crr3-h4m8-7f56
silverstripe/framework vulnerable to member disclosure in login form
Low
ghsa-vh7q-j8p5-2h4h
silverstripe/framework sends passwords back to browsers under some circumstances
Medium
ghsa-f43j-8hq4-2xj9
silverstripe/framework uploaded PHP script execution in assets
High
ghsa-vgxh-x8jv-hmff
silverstripe/framework code execution vulnerability
High
ghsa-m5q3-mvcr-gc5m
silverstripe/framework BackURL validation bypass with malformed URLs
Medium
ghsa-r3pr-fh25-wrfc
silverstripe/framework's install.php script discloses sensitive data by pre-populating DB credential forms
Medium
ghsa-xpff-c35g-j3cr
silverstripe/framework Privilege Escalation Risk in Member Edit form
Medium
ghsa-55qg-6c4m-mw6g
silverstripe/framework's URL parameters `isDev` and `isTest` unguarded
High
ghsa-xx4r-5265-48j6
silverstripe/framework SQL injection in full text search
Medium
ghsa-ph62-fv59-vf9h
silverstripe/framework users inadvertently passing sensitive data to LoginAttempt
High
ghsa-mqjc-x563-c9q8
silverstripe/framework CSV Excel Macro Injection
High
ghsa-7m2v-x7rg-5hm5
silverstripe/framework vulnerable to user enumeration via timing attack on login and password reset forms
High
ghsa-4qx8-j9vh-2628
silverstripe/framework's User-Agent header not correctly invalidating user session
Medium
ghsa-c4c3-j73v-634r
silverstripe/framework has Cross-site Scripting vulnerability in page history comparison
Medium
ghsa-pp7q-6j3f-74vj
silverstripe/framework has Cross-site Scripting vulnerability in RedirectorPage
Medium
ghsa-r85g-7jpv-8xrx
silverstripe/framework has Cross-site Scripting vulnerability in CMSSecurity BackURL
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.