Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

packagist pimcore/pimcore Security Advisories

Loading...
Critical
GSA_kwCzR0hTQS01cXhxLXZnbW0tcTM5bc4AAvli
RCE vulnerability in Pimcore/Mail & Dynamic Text Layout
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 24.4
Published: over 1 year ago
Critical
GSA_kwCzR0hTQS1qaGNmLWo0aGctdjY0cs4AAitC
Pimcore Access Control Issues
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 24.4
Published: almost 2 years ago
Critical
GSA_kwCzR0hTQS1oZjYyLTV2eGgtanB3as4AAitU
Pimcore 2FA Vulnerable to Brute Forcing
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 24.4
Published: almost 2 years ago
High
GSA_kwCzR0hTQS0zNTJ4LWhjMmYtZndmZs4AAiD6
Pimcore RCE via PHAR upload
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: almost 2 years ago
High
GSA_kwCzR0hTQS1nbWZmLXZjdjYtbW1mcs4AAVvS
Pimcore CSRF Vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: almost 2 years ago
High
GSA_kwCzR0hTQS14bWc4LXc0NjUtbXI1Ns4AAy_1
SQL Injection in Translation Export API
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: about 1 year ago
High
GSA_kwCzR0hTQS02bWhtLWdjcGYtNWdyOM4AAy_0
SQL Injection in Admin Search Find API
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: about 1 year ago
High
GSA_kwCzR0hTQS1jeGo3LTRqcGotMnEzOM4AAiD2
Pimcore Unrestricted Upload of File with Dangerous Type
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: almost 2 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWc4angtNjZwOC12Y20y
SQL injection in pimcore/pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: almost 3 years ago
High
GSA_kwCzR0hTQS03aHFyLWoyNm0tZ213cM4AAQnJ
Pimcore Unserialize Remote Code Execution
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: almost 2 years ago
High
GSA_kwCzR0hTQS00eDM1LXZyODIteHZqNs4AAy_6
SQL Injection in AssetController
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: about 1 year ago
High
GSA_kwCzR0hTQS1yMnZxLXA2NTgtcDI3NM4AAxlx
SameSite Attribute vulnerability in pimCore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: about 1 year ago
High
GSA_kwCzR0hTQS03MmhoLXhmNzktNDI5cM4AA3ML
Pimcore SQL Injection in Admin Grid Filter API through Multiselect::getFilterConditionExt()
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: 6 months ago
High
GSA_kwCzR0hTQS1qd2c0LXFjZ3YtNXdnNs4AAy_2
SQL Injection in Admin Translations API
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: about 1 year ago
High
GSA_kwCzR0hTQS12ajl4LXc3Y2gtZjQ2cM0kBw
pimcore is vulnerable to SQL Injection
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 20.7
Published: over 2 years ago
High
GSA_kwCzR0hTQS1ndm1mLXdjeDYtcDk3NM4AAs60
Improper quoting of columns when using setOrderBy() or setGroupBy() on listing classes in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 20.2
Published: almost 2 years ago
High
GSA_kwCzR0hTQS0ydjg4LXFxN3gteHE1Zs0ViA
Improper Encoding or Escaping of Output in Asset Metadata Component
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 19.9
Published: over 2 years ago
High
GSA_kwCzR0hTQS13Nmo4LWpjMzYteDVxOc0Vhw
Improper Neutralization of Text-Values in Object Version Preview
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 19.9
Published: over 2 years ago
High
GSA_kwCzR0hTQS14YzlwLXI1cWotOHhtOc4AAyK5
Improper quoting of columns when calling methods "getByUuid" & "exists" on UUID Model
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 19.7
Published: about 1 year ago
High
GSA_kwCzR0hTQS1jNjk3LXIyMjctcHE2aM0kag
Unrestricted Upload of File with Dangerous Type in pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 19.4
Published: over 2 years ago
High
GSA_kwCzR0hTQS1yODdyLTk4MnEtMmMzcc4AA01l
Pimcore vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 18.9
Published: 10 months ago
High
GSA_kwCzR0hTQS04ODg5LTlnM2YtNzNyas4AAitK
Pimcore Discloses Usernames In Use
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 18.7
Published: almost 2 years ago
High
GSA_kwCzR0hTQS02Z203LWo2NjgtdzZoOc05sw
SQL Injection in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 18.7
Published: about 2 years ago
High
GSA_kwCzR0hTQS0ydjdwLWY0cW0tcjVwY80_rw
SQL Injection found in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 18.7
Published: about 2 years ago
High
GSA_kwCzR0hTQS1tajJjLTVtanYtZ21tas07WA
SQL Injection in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 18.7
Published: about 2 years ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThqbWgtYzZ2ci1wbXZt
SQL Injection in pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 17.9
Published: almost 3 years ago
High
GSA_kwCzR0hTQS1yeHA1LXF3cmYtcGZ2M84AA0ta
Pimcore SQL Injection vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 17.9
Published: 10 months ago
High
GSA_kwCzR0hTQS1jOWh3LTU1N3EtZjhocc4AA01k
Pimcore vulnerable to SQL Injection in Dataobjects sorting
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 17.9
Published: 10 months ago
High
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg3ZjktY3ZoNS1xdzdm
Path traversal in pimcore/pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 17.7
Published: about 3 years ago
Moderate
GSA_kwCzR0hTQS1janY2LXc1aGYtNXdyNs4AAzAA
Cross-site Scripting (XSS) in Ecommerce Pricing Rules name field
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.9
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS1taHBqLTdtN2gtOHA2eM4AAzSc
Pimcore Cross-site Scripting (XSS) in Static Routes name field
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.9
Published: 12 months ago
Moderate
GSA_kwCzR0hTQS14Y3IzLTRxdnItNTRyaM07zw
Cross-site Scripting in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.9
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS13cXI2LTU3cW0taGhyNc4AAu-u
Pimcore vulnerable to cross site scripting
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.9
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS1xN2NjLW02anctbTI2Ms4AAzRG
Pimcore Cross-site Scripting (XSS) in Predefined Properties delete
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.9
Published: 12 months ago
Moderate
GSA_kwCzR0hTQS1wcjRmLTRwY3gtMnIzaM4AAuZp
Pimcore Cross-site Scripting (XSS)
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.7
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS00ZjV4LXE0amMteGZjZs0kWw
Cross-site Scripting in pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.4
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS04eHg5LXJ4cmotMm0yd80dig
Cross-site Scripting in pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.4
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS1xNGh3LWM2NmgtNHhxY84AAVvi
Pimcore SQLi Vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.2
Published: almost 2 years ago
Moderate
GSA_kwCzR0hTQS00MmMzLXd2d3ctZ2Nxas4AAyO8
Pimcore Remote Code Execution vulnerability in Search function
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.2
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS1nMm1jLWZxcWMtaHhnM84AAzD1
Pimcore Path Traversal Vulnerability in AdminBundle/Controller/Reports/CustomReportController.php
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.2
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS1nanE0LTY5d2otcDZwcs0uLA
Path traversal in pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.2
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS1tNG12LXJtcjctaDVmNc4AAzpI
Pimcore Privilege Defined With Unsafe Actions vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.2
Published: 11 months ago
Moderate
GSA_kwCzR0hTQS1oZzc3LXZ4OXYtZjQ5eM4AAzAS
Path Traversal in Asset "import from server" option
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.2
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS01NzM3LXJxdjQtdjQ0Nc4AA6Tc
Pimcore Preview Documents are not restricted to logged in users anymore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.2
Published: about 1 month ago
Moderate
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZwZmYtMzg0ai12eHE3
Data leakage via SQL Injection in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.2
Published: over 4 years ago
Moderate
GSA_kwCzR0hTQS1oOXZjLTJwOWctNjNncM0r-w
Exposure of Sensitive Information to an Unauthorized Actor in pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.9
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS0zdzk2LXA2dmgtYzI5OM4AAxni
Cross-site Scripting in pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.7
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS0zNGhqLXY4Zm0teDg4N84AA1CJ
Pimcore Path Traversal Vulnerability in AssetController:importServerFilesAction
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.7
Published: 9 months ago
Moderate
GSA_kwCzR0hTQS00NmczLWY5cjgteGo0ds4AAzpL
Pimcore vulnerable to Pre-Auth Path Traversal in pimcore_log parameter
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.7
Published: 11 months ago
Moderate
GSA_kwCzR0hTQS12ZjdxLWcycHYtanh2eM4AAyO9
Pimcore vulnerable to improper quoting of filters in Custom Reports
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS1mcTk1LXJ4NHEtcWdnMs4AAy_4
Cross-site Scripting (XSS) in Admin Login too many attempts notice
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.2
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS1tNHgzLXhtanYtcjc3OM4AAitR
Pimcore Cross-site Scripting (XSS) vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.2
Published: almost 2 years ago
Moderate
GSA_kwCzR0hTQS12andnLTI4Z3YtcG04aM4AA7R7
Pimcore TinyMCE Bundle - tinymce CVE-2024-29203, CVE-2024-29881
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.2
Published: 10 days ago
Moderate
GSA_kwCzR0hTQS04dzN4LXI2eDctYzVyNc0ayw
Cross-site Scripting in pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.2
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS02NXA4LTU0MjMtZnczeM4AAiji
Pimcore XSS Vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.2
Published: almost 2 years ago
Moderate
GSA_kwCzR0hTQS0zcDg1LXA0cWctaGNycM0azQ
pimcore is vulnerable to Cross-site Scripting
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.2
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS03OHEyLWN2M3AteDlmbc4AA01Y
Pimcore Cross-site Scripting vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.2
Published: 10 months ago
Moderate
GSA_kwCzR0hTQS1yY2c5LWhyaHgtNnE2Oc4AAyMM
Pimcore has Cross-site Scripting vulnerability in DataObject tooltip field
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.2
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS12bXB2LXFqaHEtcjQ2M84AA01a
Pimcore Cross-site Scripting vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 14.9
Published: 10 months ago
Moderate
GSA_kwCzR0hTQS1xM3A0LXYyY20tcTk0Nc4AAzWk
Pimcore Cross-site Scripting vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: 12 months ago
Moderate
GSA_kwCzR0hTQS02ZnZmLXg4YzYtMmY2as4AAzAT
Cross-site Scripting (XSS) in DataObject Any Getter grid operator
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS0yNzZyLTI0eHEtaHdnOM4AAU63
Pimcore XSS Vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: almost 2 years ago
Moderate
GSA_kwCzR0hTQS04eHY0LWpqNGgtcXd3Ns4AAxYX
Pimcore contains Unrestricted Upload of File with Dangerous Type
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS00NTV3LWd2NXAtd2dnM80kXg
Cross-site Scripting in pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS0yYzY3LXA0eGgtbTM0d84AAy_5
Cross-site Scripting (XSS) in Website Settings name field
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS02cWNjLXdoZ3AtcGpqMs0wag
Cross-site Scripting in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS12NTY3LXEyNjctcGhwZ80kBg
pimcore is vulnerable to Cross-site Scripting
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS05eGc2LTc1bWgtN3gzZs4AAzCi
Cross-site Scripting (XSS) in pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS1wYzMyLXg3MzctNzRjds0zpg
Cross-site Scripting in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS1xNjdmLTNqcTQtbXd3Ms0wVg
Cross-site Scripting in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS1nOTN4LWZtMnctNXB4d84AAzAU
Cross-site Scripting (XSS) in DataObject columns grid
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS14bXEzLWhnangtNjk5N80zxQ
Cross-site Scripting in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS1wbTN2LXF4ZjYtZmd4ds0ljw
Cross-site Scripting in pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS01N2hnLTI2aDctOXFnds0kCA
pimcore is vulnerable to Cross-site Scripting
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS02dmY2LWczcHItajgzaM4AAxFw
pimcore is vulnerable to cross-site scripting via "title field " in data objects
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS0yMmhjLTQ3Y2MtN3g2Zs0zFQ
Cross-site Scripting in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS05cTdxLXI1NHEtM2YzZ84AAy_3
Cross-site Scripting (XSS) in DataObject Classification Store
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS00ZjI1LTJ4MmMtdmc2ds4AAyhj
pimcore is vulnerable to cross-site scripting in Composite indices key field
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS1nNzk1LTRoeHgtcXF3bc0zKA
Cross-site Scripting in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS1qMjlmLW0yM2gtM3A4cM0zyw
Cross-site Scripting in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS1qNTl2LWhoNHAtcTkybc4AA20D
Pimcore Cross-site Scripting vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: 6 months ago
Moderate
GSA_kwCzR0hTQS1mN3E2LXh4cGgtbWZtOM0m0A
Cross-site Scripting in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS04eDQ0LXB3cjItcmdjNs0nMA
Cross-site Scripting in pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS1mMmpoLW1mMmMtODI3OM4AAx0h
Pimcore vulnerable to Cross-site Scripting
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS02NmNtLWM3Y2gtNWo4cc4AAyML
Pimcore vulnerable to Cross-site Scripting (XSS) in Redirects
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS0zMjIzLXc3NzQtOTlmcc4AAyJ_
Cross-site Scripting (XSS) in Document Types
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS1jZzNoLXJjOXEtZzh2Oc0pwQ
Cross-site Scripting in pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS01OTl2LWgzcTUtZzZyOc4AA1aZ
Pimcore Cross-site Scripting (XSS) vulnerability in DataObject datetime fields
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: 9 months ago
Moderate
GSA_kwCzR0hTQS05N2NwLTg4NzMtdjJnZs4AAx55
Pimcore vulnerable to Cross Site Scripting in Documents Link Editable
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS00ODQ5LXgzangtNDVxcs4AAu07
Pimcore vulnerable to stored stored Cross-site Scripting via`properties` when creating new users
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS05NmhwLTM4d3gtajN3Y84AAx57
Pimcore vulnerable to Cross Site Scripting in Email Blacklist
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS1xeGN3LXJmNHYtaHAyNs4AAx56
Pimcore vulnerable to Cross Site Scripting in image/video thumbnail config
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS1teGgzLTI2OTktOThnOc0pxg
Cross-site Scripting pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS01Nzl4LWNqdnItY3FqOc0V2g
Observable Response Discrepancy in Lost Password Service
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.2
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS00NzZnLXY3aGYtY3c1bc4AAy__
Cross-site Scripting (XSS) in Document Properties Parameter
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 12.9
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS0yMjk1LXZoMjgtcHBoY84AAzAC
Cross-site Scripting (XSS) in DataObjects QuantityValue Unit Definition
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 12.9
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS14NWozLW1xOWctOGpjOM4AAyK4
Cross-site Scripting (XSS) in UrlSlug Data type
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 11.9
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS04anY3LXZ3cmMtbXY0Z84AAyAp
Cross-site Scripting (XSS) in pimcore/pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 11.9
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS0yeHBtLWNtdnctM2pjY84AAyKA
Reflected XSS in Application Logger module
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 11.9
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS1naDRnLTY1ZjYtODRnNc4AAyBs
pimcore is vulnerable to cross-site scripting
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 11.9
Published: about 1 year ago
Statistics
Advisories: 18,369
Packages: 8,294
Repositories: 3
Ecosystems: 12
Filter by Severity
Moderate 7,928 High 6,358 Critical 2,809 Low 985
Filter by Ecosystem
maven 5,531 packagist 3,809 pypi 3,712 npm 3,543 go 1,895 nuget 1,390 rubygems 814 cargo 777 swift 31 hex 30 actions 16 pub 8
Filter by Package
moodle/moodle 323 magento/community-edition 182 pimcore/pimcore 116 dolibarr/dolibarr 107 typo3/cms 102 phpmyadmin/phpmyadmin 92 microweber/microweber 91 drupal/core 76 typo3/cms-core 73 thorsten/phpmyfaq 70 drupal/drupal 61 librenms/librenms 54 symfony/symfony 53 concrete5/concrete5 52 shopware/platform 48 baserproject/basercms 43 showdoc/showdoc 40 craftcms/cms 40 intelliants/subrion 40 nilsteampassnet/teampass 37 froxlor/froxlor 36 shopware/core 36 silverstripe/framework 32 snipe/snipe-it 32 mautic/core 29 getgrav/grav 28 shopware/shopware 27 centreon/centreon 27 magento/core 24 prestashop/prestashop 24 pocketmine/pocketmine-mp 23 remdex/livehelperchat 23 grumpydictator/firefly-iii 22 getkirby/cms 22 contao/core-bundle 21 forkcms/forkcms 18 tribalsystems/zenario 18 contao/contao 18 cakephp/cakephp 17 cockpit-hq/cockpit 17 simplesamlphp/simplesamlphp 17 genix/cms 17 francoisjacquet/rosariosis 17 symfony/security 17 topthink/framework 16 yetiforce/yetiforce-crm 16 openmage/magento-lts 15 symfony/security-http 14 typo3/cms-backend 14 phpmailer/phpmailer 14 zendframework/zendframework1 14 ec-cube/ec-cube 14 smarty/smarty 14 ezsystems/ezpublish-kernel 14 elefant/cms 13 codeigniter4/framework 13 lavalite/cms 13 impresscms/impresscms 13 bolt/bolt 13 october/system 13 phpmyfaq/phpmyfaq 12 dompdf/dompdf 12 phpbb/phpbb 12 studio-42/elfinder 12 zendframework/zendframework 11 feehi/cms 11 feehi/feehicms 11 silverstripe/cms 11 wallabag/wallabag 10 ezsystems/ezplatform-kernel 10 admidio/admidio 10 opencart/opencart 10 wwbn/avideo 10 sylius/sylius 10 laravel/framework 10 pagekit/pagekit 10 nukeviet/nukeviet 10 pimcore/admin-ui-classic-bundle 10 tinymce/tinymce 9 TinyMCE 9 ssddanbrown/bookstack 9 tinymce 9 funadmin/funadmin 9 kevinpapst/kimai2 9 concrete5/core 9 october/october 9 alextselegidis/easyappointments 9 croogo/croogo 8 facturascripts/facturascripts 8 gilacms/gila 8 pimcore/customer-management-framework-bundle 8 yiisoft/yii2 8 october/cms 8 sulu/sulu 8 codiad/codiad 8 pterodactyl/panel 7 october/backend 7 wpglobus/wpglobus 7 silverstripe/admin 7 statamic/cms 7 symfony/http-foundation 7 flarum/core 7 silverstripe/graphql 7 contao/core 6 zoujingli/thinkadmin 6 directmailteam/direct-mail 6 backdrop/backdrop 6 in2code/femanager 6 nystudio107/craft-seomatic 6 composer/composer 6 yourls/yourls 6 bagisto/bagisto 6 guzzlehttp/guzzle 6 yiisoft/yii2-dev 6 dweeves/magmi 6 symfony/http-kernel 6 phpseclib/phpseclib 5 phpxmlrpc/phpxmlrpc 5 vrana/adminer 5 symfony/security-core 5 oro/platform 5 typo3/cms-install 5 bottelet/flarepoint 5 billz/raspap-webgui 5 thinkcmf/thinkcmf 5 silverstripe/assets 5 simplesamlphp/saml2 5 gleez/cms 5 cachethq/cachet 5 elgg/elgg 5 automad/automad 5 ibexa/core 5 anchorcms/anchor-cms 5 gugoan/economizzer 5 ezsystems/ezplatform-admin-ui 5 pear/archive_tar 5 magento/product-community-edition 4 typo3/html-sanitizer 4 typo3/cms-frontend 4 woocommerce/woocommerce 4 wintercms/winter 4 idno/known 4 bref/bref 4 notrinos/notrinos-erp 4 modx/revolution 4 evolutioncms/evolution 4 bytefury/crater 4 spatie/browsershot 4 oro/commerce 4 wp-premium/gravityforms 4 codeigniter4/shield 4 symfony/security-bundle 4 pyrocms/pyrocms 4 phpservermon/phpservermon 4 shopware/storefront 4 appwrite/server-ce 4 adodb/adodb-php 3 bbpress/bbpress 3 ezsystems/ezpublish-legacy 3 artesaos/seotools 3 joomla/framework 3 zendframework/zendrest 3 zencart/zencart 3 kimai/kimai 3 zendframework/zendservice-audioscrobbler 3 pixelfed/pixelfed 3 buddypress/buddypress 3 codeigniter/framework 3 mantisbt/mantisbt 3 twig/twig 3 tecnickcom/tcpdf 3 zendframework/zendservice-nirvanix 3 apache-solr-for-typo3/solr 3 limesurvey/limesurvey 3 symfony/form 3 zendframework/zendservice-slideshare 3 zendframework/zendservice-technorati 3 zendframework/zendservice-windowsazure 3 zendframework/zendservice-amazon 3 illuminate/database 3 phpoffice/phpspreadsheet 3 qcubed/qcubed 3 typo3/cms-form 3 quickapps/cms 3 prestashop/productcomments 3 verbb/comments 3 icecoder/icecoder 3 sylius/resource-bundle 3 facade/ignition 3 uvdesk/community-skeleton 3 enshrined/svg-sanitize 3 joomla/joomla-cms 3 yiisoft/yii 3 flarum/framework 3 verot/class.upload.php 3 ckeditor4 3 phenx/php-svg-lib 3 processwire/processwire 3 enhavo/enhavo-app 3 froala/wysiwyg-editor 3
Filter by Repository
https://github.com/pimcore/pimcore 111 https://github.com/nu11secur1ty/CVE-nu11secur1ty 1