Medium
ghsa-v858-922f-fj9v
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,406
Reset filters
Medium
ghsa-55pp-293f-3365
silverstripe/userforms file upload exposure on UserForms module
Medium
ghsa-m2hh-2m46-x6j5
silverstripe/framework may disclose database credentials during connection failure
Medium
ghsa-crr3-h4m8-7f56
silverstripe/framework vulnerable to member disclosure in login form
Medium
ghsa-55qg-6c4m-mw6g
silverstripe/framework's URL parameters `isDev` and `isTest` unguarded
Medium
ghsa-ph62-fv59-vf9h
silverstripe/framework users inadvertently passing sensitive data to LoginAttempt
High
ghsa-mqjc-x563-c9q8
silverstripe/framework CSV Excel Macro Injection
Medium
ghsa-g84q-cq55-xwgp
silverstripe/framework member disclosure in login form
Medium
ghsa-468j-6jrc-2rjx
silverstripe/framework vulnerable to Cross-site Scripting In `OptionsetField` and `CheckboxSetField`
Medium
ghsa-r9vp-fp72-xgf7
silverstripe/framework's `Member.Name` is not escaped
Medium
ghsa-frm9-7pm9-5rgc
SilverStripe comments module includes version of jQuery vulnerable to Cross-site Scripting
Medium
CVE-2024-5312
PHP Server Monitor vulnerable to Cross-site Scripting
Medium
ghsa-vj2j-6g3w-4662
Silverstripe Missing CSRF protection in login form
Critical
ghsa-8v6m-7f5v-hhx6
Silverstripe Brute force bypass on default admin
Medium
ghsa-87pf-7x99-5xc4
Silverstripe Hostname, IP and Protocol Spoofing through HTTP Headers
Medium
ghsa-j982-5jv7-v43r
Silverstripe Form field validation message XSS vulnerability
Medium
ghsa-mqf5-275h-gf6r
Silverstripe framework is vulnerable to XSS in install.php
Medium
ghsa-g4hp-pfvf-vm5w
SilverStripe Vulnerability on 'isDev', 'isTest' and 'flush' $_GET validation
Medium
ghsa-vp8p-c6xj-xpj7
Silverstripe External redirection risk in Security?ReturnURL
High
ghsa-25gq-jvx2-vg9x
Silverstripe X-Forwarded-Host request hostname injection
Medium
ghsa-34q6-xqxh-gq39
Silverstripe XSS In rewritten hash links
Critical
CVE-2024-25738
VuFind Server-Side Request Forgery (SSRF) vulnerability
Unrated
CVE-2024-13256
drupal/email_contact - SA-CONTRIB-2024-020
Critical
ghsa-83jv-4prm-34g7
Shopware Remote Code Execution Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.