Alta
ghsa-xc69-p8fc-m6m5
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.071
Restablecer filtros
Alta
ghsa-p2v5-xcqm-4fv6
silverstripe/taxonomy SQL Injection vulnerability
Media
ghsa-55pp-293f-3365
silverstripe/userforms file upload exposure on UserForms module
Media
CVE-2024-35621
formwork Cross-site scripting vulnerability in Markdown fields
Alta
ghsa-wjg9-v8cf-f5q2
silverstripe/graphql Cross-Site Request Forgery vulnerability
Alta
ghsa-265q-222x-52m6
silverstripe/framework has potential SQL Injection vulnerability in PostgreSQL database connector
Alta
ghsa-cwgq-83w5-8jfq
silverstripe/framework has possible denial of service attack vector when flushing
Media
ghsa-m2hh-2m46-x6j5
silverstripe/framework may disclose database credentials during connection failure
Alta
ghsa-vcg6-8fxc-x5cq
silverstripe/framework allows upload of dangerous file types
Media
ghsa-crr3-h4m8-7f56
silverstripe/framework vulnerable to member disclosure in login form
Baja
ghsa-vh7q-j8p5-2h4h
silverstripe/framework sends passwords back to browsers under some circumstances
Media
ghsa-f43j-8hq4-2xj9
silverstripe/framework uploaded PHP script execution in assets
Alta
ghsa-vgxh-x8jv-hmff
silverstripe/framework code execution vulnerability
Alta
ghsa-m5q3-mvcr-gc5m
silverstripe/framework BackURL validation bypass with malformed URLs
Media
ghsa-r3pr-fh25-wrfc
silverstripe/framework's install.php script discloses sensitive data by pre-populating DB credential forms
Media
ghsa-xpff-c35g-j3cr
silverstripe/framework Privilege Escalation Risk in Member Edit form
Media
ghsa-55qg-6c4m-mw6g
silverstripe/framework's URL parameters `isDev` and `isTest` unguarded
Alta
ghsa-xx4r-5265-48j6
silverstripe/framework SQL injection in full text search
Media
ghsa-ph62-fv59-vf9h
silverstripe/framework users inadvertently passing sensitive data to LoginAttempt
Alta
ghsa-mqjc-x563-c9q8
silverstripe/framework CSV Excel Macro Injection
Alta
ghsa-7m2v-x7rg-5hm5
silverstripe/framework vulnerable to user enumeration via timing attack on login and password reset forms
Alta
ghsa-4qx8-j9vh-2628
silverstripe/framework's User-Agent header not correctly invalidating user session
Media
ghsa-c4c3-j73v-634r
silverstripe/framework has Cross-site Scripting vulnerability in page history comparison
Media
ghsa-pp7q-6j3f-74vj
silverstripe/framework has Cross-site Scripting vulnerability in RedirectorPage
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.