Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

packagist pimcore/pimcore Security Advisories

Loading...
Moderate
GSA_kwCzR0hTQS12andnLTI4Z3YtcG04aM4AA7R7
Pimcore TinyMCE Bundle - tinymce CVE-2024-29203, CVE-2024-29881
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.2
Published: about 3 hours ago
Moderate
GSA_kwCzR0hTQS01NzM3LXJxdjQtdjQ0Nc4AA6Tc
Pimcore Preview Documents are not restricted to logged in users anymore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.2
Published: 29 days ago
High
GSA_kwCzR0hTQS03MmhoLXhmNzktNDI5cM4AA3ML
Pimcore SQL Injection in Admin Grid Filter API through Multiselect::getFilterConditionExt()
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: 5 months ago
Moderate
GSA_kwCzR0hTQS1qNTl2LWhoNHAtcTkybc4AA20D
Pimcore Cross-site Scripting vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: 6 months ago
Moderate
GSA_kwCzR0hTQS01OTl2LWgzcTUtZzZyOc4AA1aZ
Pimcore Cross-site Scripting (XSS) vulnerability in DataObject datetime fields
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: 8 months ago
Moderate
GSA_kwCzR0hTQS0zNGhqLXY4Zm0teDg4N84AA1CJ
Pimcore Path Traversal Vulnerability in AssetController:importServerFilesAction
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.7
Published: 9 months ago
High
GSA_kwCzR0hTQS1yODdyLTk4MnEtMmMzcc4AA01l
Pimcore vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 18.9
Published: 9 months ago
High
GSA_kwCzR0hTQS1jOWh3LTU1N3EtZjhocc4AA01k
Pimcore vulnerable to SQL Injection in Dataobjects sorting
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 17.9
Published: 9 months ago
Moderate
GSA_kwCzR0hTQS03OHEyLWN2M3AteDlmbc4AA01Y
Pimcore Cross-site Scripting vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.2
Published: 9 months ago
Moderate
GSA_kwCzR0hTQS12bXB2LXFqaHEtcjQ2M84AA01a
Pimcore Cross-site Scripting vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 14.9
Published: 9 months ago
High
GSA_kwCzR0hTQS1yeHA1LXF3cmYtcGZ2M84AA0ta
Pimcore SQL Injection vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 17.9
Published: 10 months ago
Moderate
GSA_kwCzR0hTQS00NmczLWY5cjgteGo0ds4AAzpL
Pimcore vulnerable to Pre-Auth Path Traversal in pimcore_log parameter
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.7
Published: 11 months ago
Moderate
GSA_kwCzR0hTQS1tNG12LXJtcjctaDVmNc4AAzpI
Pimcore Privilege Defined With Unsafe Actions vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.2
Published: 11 months ago
Moderate
GSA_kwCzR0hTQS1xM3A0LXYyY20tcTk0Nc4AAzWk
Pimcore Cross-site Scripting vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: 11 months ago
Moderate
GSA_kwCzR0hTQS13NzY2LTM1NzItZjJods4AAzSl
Pimcore Cross-site Scripting (XSS) vulnerability in Admin Translations
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 11.9
Published: 12 months ago
Moderate
GSA_kwCzR0hTQS1taHBqLTdtN2gtOHA2eM4AAzSc
Pimcore Cross-site Scripting (XSS) in Static Routes name field
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.9
Published: 12 months ago
Moderate
GSA_kwCzR0hTQS1tNm05LWdyODUtNzl2bc4AAzRH
Pimcore Cross-site Scripting (XSS) in name field of Custom Reports
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 12 months ago
Moderate
GSA_kwCzR0hTQS1xN2NjLW02anctbTI2Ms4AAzRG
Pimcore Cross-site Scripting (XSS) in Predefined Properties delete
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.9
Published: 12 months ago
Moderate
GSA_kwCzR0hTQS1nMm1jLWZxcWMtaHhnM84AAzD1
Pimcore Path Traversal Vulnerability in AdminBundle/Controller/Reports/CustomReportController.php
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.2
Published: 12 months ago
Moderate
GSA_kwCzR0hTQS05eGc2LTc1bWgtN3gzZs4AAzCi
Cross-site Scripting (XSS) in pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: 12 months ago
Moderate
GSA_kwCzR0hTQS1qNWMzLXI4NGYtOTU5Ns4AAzAV
Arbitrary File Read in Admin JS CSS files
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 10.9
Published: 12 months ago
Moderate
GSA_kwCzR0hTQS1nOTN4LWZtMnctNXB4d84AAzAU
Cross-site Scripting (XSS) in DataObject columns grid
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: 12 months ago
Moderate
GSA_kwCzR0hTQS02ZnZmLXg4YzYtMmY2as4AAzAT
Cross-site Scripting (XSS) in DataObject Any Getter grid operator
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: 12 months ago
Moderate
GSA_kwCzR0hTQS1oZzc3LXZ4OXYtZjQ5eM4AAzAS
Path Traversal in Asset "import from server" option
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.2
Published: 12 months ago
Moderate
GSA_kwCzR0hTQS1yN21tLWp4NmgtaHY3bc4AAzAR
Cross-site Scripting (XSS) in Conditions tab of Pricing Rules
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: 12 months ago
Moderate
GSA_kwCzR0hTQS0yMjk1LXZoMjgtcHBoY84AAzAC
Cross-site Scripting (XSS) in DataObjects QuantityValue Unit Definition
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 12.9
Published: 12 months ago
Moderate
GSA_kwCzR0hTQS14OXhqLXBxbXYtOGpmN84AAzAB
Cross-site Scripting (XSS) in pimcore via DataObject Class date fields
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 10.0
Published: 12 months ago
Moderate
GSA_kwCzR0hTQS1janY2LXc1aGYtNXdyNs4AAzAA
Cross-site Scripting (XSS) in Ecommerce Pricing Rules name field
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.9
Published: 12 months ago
Moderate
GSA_kwCzR0hTQS00NzZnLXY3aGYtY3c1bc4AAy__
Cross-site Scripting (XSS) in Document Properties Parameter
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 12.9
Published: 12 months ago
High
GSA_kwCzR0hTQS00eDM1LXZyODIteHZqNs4AAy_6
SQL Injection in AssetController
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: 12 months ago
Moderate
GSA_kwCzR0hTQS0yYzY3LXA0eGgtbTM0d84AAy_5
Cross-site Scripting (XSS) in Website Settings name field
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: 12 months ago
Moderate
GSA_kwCzR0hTQS1mcTk1LXJ4NHEtcWdnMs4AAy_4
Cross-site Scripting (XSS) in Admin Login too many attempts notice
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.2
Published: 12 months ago
Moderate
GSA_kwCzR0hTQS05cTdxLXI1NHEtM2YzZ84AAy_3
Cross-site Scripting (XSS) in DataObject Classification Store
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: 12 months ago
High
GSA_kwCzR0hTQS1qd2c0LXFjZ3YtNXdnNs4AAy_2
SQL Injection in Admin Translations API
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: 12 months ago
High
GSA_kwCzR0hTQS14bWc4LXc0NjUtbXI1Ns4AAy_1
SQL Injection in Translation Export API
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: 12 months ago
High
GSA_kwCzR0hTQS02bWhtLWdjcGYtNWdyOM4AAy_0
SQL Injection in Admin Search Find API
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: 12 months ago
Moderate
GSA_kwCzR0hTQS00ZjI1LTJ4MmMtdmc2ds4AAyhj
pimcore is vulnerable to cross-site scripting in Composite indices key field
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS03cjM1LWNodjQteHIzcs4AAye9
Pimcore vulnerable to Reflected XSS in Predefined Properties module in Settings
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS02cWptLTM5dmgtNzI5d84AAye8
Pimcore Cross-site Scripting in Predefined Asset Metadata module in Settings
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS1oZm1nLWczOWMtNTQ0NM4AAye7
pimcore is vulnerable to cross-site scripting in translate module
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS12ZjdxLWcycHYtanh2eM4AAyO9
Pimcore vulnerable to improper quoting of filters in Custom Reports
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS00MmMzLXd2d3ctZ2Nxas4AAyO8
Pimcore Remote Code Execution vulnerability in Search function
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.2
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS1yY2c5LWhyaHgtNnE2Oc4AAyMM
Pimcore has Cross-site Scripting vulnerability in DataObject tooltip field
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.2
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS02NmNtLWM3Y2gtNWo4cc4AAyML
Pimcore vulnerable to Cross-site Scripting (XSS) in Redirects
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS00Mng4LTJ2NTMtcHFtas4AAyMK
Pimcore has Cross site Scripting vulnerability in Schedule tab of Documents
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 11.9
Published: about 1 year ago
High
GSA_kwCzR0hTQS14YzlwLXI1cWotOHhtOc4AAyK5
Improper quoting of columns when calling methods "getByUuid" & "exists" on UUID Model
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 19.7
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS14NWozLW1xOWctOGpjOM4AAyK4
Cross-site Scripting (XSS) in UrlSlug Data type
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 11.9
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS0yeHBtLWNtdnctM2pjY84AAyKA
Reflected XSS in Application Logger module
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 11.9
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS0zMjIzLXc3NzQtOTlmcc4AAyJ_
Cross-site Scripting (XSS) in Document Types
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS1ycndtLTh3cW0tZ3dnds4AAyJ-
Cross-site Scripting (XSS) - stored in Print Documents
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS1naDRnLTY1ZjYtODRnNc4AAyBs
pimcore is vulnerable to cross-site scripting
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 11.9
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS04anY3LXZ3cmMtbXY0Z84AAyAp
Cross-site Scripting (XSS) in pimcore/pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 11.9
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS05NmhwLTM4d3gtajN3Y84AAx57
Pimcore vulnerable to Cross Site Scripting in Email Blacklist
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS1xeGN3LXJmNHYtaHAyNs4AAx56
Pimcore vulnerable to Cross Site Scripting in image/video thumbnail config
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS05N2NwLTg4NzMtdjJnZs4AAx55
Pimcore vulnerable to Cross Site Scripting in Documents Link Editable
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS1mMmpoLW1mMmMtODI3OM4AAx0h
Pimcore vulnerable to Cross-site Scripting
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS03NnI3LWg0NnctNDYzcs4AAxps
Cross Site Scripting (XSS) in Model\DataObject\Data\UrlSlug
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS0zdzk2LXA2dmgtYzI5OM4AAxni
Cross-site Scripting in pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.7
Published: about 1 year ago
High
GSA_kwCzR0hTQS1yMnZxLXA2NTgtcDI3NM4AAxlx
SameSite Attribute vulnerability in pimCore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS04eHY0LWpqNGgtcXd3Ns4AAxYX
Pimcore contains Unrestricted Upload of File with Dangerous Type
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS02dmY2LWczcHItajgzaM4AAxFw
pimcore is vulnerable to cross-site scripting via "title field " in data objects
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 1 year ago
Critical
GSA_kwCzR0hTQS01cXhxLXZnbW0tcTM5bc4AAvli
RCE vulnerability in Pimcore/Mail & Dynamic Text Layout
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 24.4
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS13cXI2LTU3cW0taGhyNc4AAu-u
Pimcore vulnerable to cross site scripting
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.9
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS00ODQ5LXgzangtNDVxcs4AAu07
Pimcore vulnerable to stored stored Cross-site Scripting via`properties` when creating new users
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS1wcjRmLTRwY3gtMnIzaM4AAuZp
Pimcore Cross-site Scripting (XSS)
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.7
Published: over 1 year ago
High
GSA_kwCzR0hTQS1ndm1mLXdjeDYtcDk3NM4AAs60
Improper quoting of columns when using setOrderBy() or setGroupBy() on listing classes in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 20.2
Published: almost 2 years ago
High
GSA_kwCzR0hTQS04ODg5LTlnM2YtNzNyas4AAitK
Pimcore Discloses Usernames In Use
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 18.7
Published: almost 2 years ago
Critical
GSA_kwCzR0hTQS1oZjYyLTV2eGgtanB3as4AAitU
Pimcore 2FA Vulnerable to Brute Forcing
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 24.4
Published: almost 2 years ago
Moderate
GSA_kwCzR0hTQS1tNHgzLXhtanYtcjc3OM4AAitR
Pimcore Cross-site Scripting (XSS) vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.2
Published: almost 2 years ago
Critical
GSA_kwCzR0hTQS1qaGNmLWo0aGctdjY0cs4AAitC
Pimcore Access Control Issues
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 24.4
Published: almost 2 years ago
Moderate
GSA_kwCzR0hTQS02NXA4LTU0MjMtZnczeM4AAiji
Pimcore XSS Vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.2
Published: almost 2 years ago
High
GSA_kwCzR0hTQS0zNTJ4LWhjMmYtZndmZs4AAiD6
Pimcore RCE via PHAR upload
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: almost 2 years ago
High
GSA_kwCzR0hTQS1jeGo3LTRqcGotMnEzOM4AAiD2
Pimcore Unrestricted Upload of File with Dangerous Type
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: almost 2 years ago
High
GSA_kwCzR0hTQS1nN3BqLTN2OTctM3Z4cM4AAems
Pimcore Vulnerable to PHP Object Injection Attacks
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago
Moderate
GSA_kwCzR0hTQS1xNGh3LWM2NmgtNHhxY84AAVvi
Pimcore SQLi Vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.2
Published: almost 2 years ago
High
GSA_kwCzR0hTQS1nbWZmLXZjdjYtbW1mcs4AAVvS
Pimcore CSRF Vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: almost 2 years ago
Moderate
GSA_kwCzR0hTQS0yNzZyLTI0eHEtaHdnOM4AAU63
Pimcore XSS Vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: almost 2 years ago
High
GSA_kwCzR0hTQS03aHFyLWoyNm0tZ213cM4AAQnJ
Pimcore Unserialize Remote Code Execution
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: almost 2 years ago
High
GSA_kwCzR0hTQS0ydjdwLWY0cW0tcjVwY80_rw
SQL Injection found in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 18.7
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS14Y3IzLTRxdnItNTRyaM07zw
Cross-site Scripting in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.9
Published: about 2 years ago
High
GSA_kwCzR0hTQS1tajJjLTVtanYtZ21tas07WA
SQL Injection in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 18.7
Published: about 2 years ago
High
GSA_kwCzR0hTQS02Z203LWo2NjgtdzZoOc05sw
SQL Injection in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 18.7
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS1wYzMyLXg3MzctNzRjds0zpg
Cross-site Scripting in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS1qMjlmLW0yM2gtM3A4cM0zyw
Cross-site Scripting in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS14bXEzLWhnangtNjk5N80zxQ
Cross-site Scripting in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS0yMmhjLTQ3Y2MtN3g2Zs0zFQ
Cross-site Scripting in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS1nNzk1LTRoeHgtcXF3bc0zKA
Cross-site Scripting in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS02cWNjLXdoZ3AtcGpqMs0wag
Cross-site Scripting in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS1xNjdmLTNqcTQtbXd3Ms0wVg
Cross-site Scripting in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS1nanE0LTY5d2otcDZwcs0uLA
Path traversal in pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.2
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS1oOXZjLTJwOWctNjNncM0r-w
Exposure of Sensitive Information to an Unauthorized Actor in pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.9
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS1jZzNoLXJjOXEtZzh2Oc0pwQ
Cross-site Scripting in pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS1teGgzLTI2OTktOThnOc0pxg
Cross-site Scripting pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS04eDQ0LXB3cjItcmdjNs0nMA
Cross-site Scripting in pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS1mN3E2LXh4cGgtbWZtOM0m0A
Cross-site Scripting in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS00NTV3LWd2NXAtd2dnM80kXg
Cross-site Scripting in pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS01NGh3LW1oZ2gteDR2Y80kXQ
Business Logic Errors in pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 10.7
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS12NTY3LXEyNjctcGhwZ80kBg
pimcore is vulnerable to Cross-site Scripting
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 2 years ago
High
GSA_kwCzR0hTQS12ajl4LXc3Y2gtZjQ2cM0kBw
pimcore is vulnerable to SQL Injection
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 20.7
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS01N2hnLTI2aDctOXFnds0kCA
pimcore is vulnerable to Cross-site Scripting
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 2 years ago
Statistics
Advisories: 17,859
Packages: 8,198
Repositories: 3
Ecosystems: 12
Filter by Severity
Moderate 7,671 High 6,206 Critical 2,736 Low 964
Filter by Ecosystem
maven 5,513 pypi 3,541 npm 3,530 packagist 3,522 go 1,837 nuget 1,390 rubygems 812 cargo 773 swift 31 hex 29 actions 16 pub 8
Filter by Package
moodle/moodle 318 magento/community-edition 182 pimcore/pimcore 116 typo3/cms 94 phpmyadmin/phpmyadmin 91 microweber/microweber 91 typo3/cms-core 70 thorsten/phpmyfaq 70 drupal/core 70 dolibarr/dolibarr 60 drupal/drupal 56 librenms/librenms 52 concrete5/concrete5 52 shopware/platform 47 symfony/symfony 46 baserproject/basercms 43 showdoc/showdoc 40 craftcms/cms 36 shopware/core 35 snipe/snipe-it 32 intelliants/subrion 31 mautic/core 28 froxlor/froxlor 28 centreon/centreon 27 silverstripe/framework 27 shopware/shopware 26 magento/core 24 prestashop/prestashop 24 getgrav/grav 24 remdex/livehelperchat 23 pocketmine/pocketmine-mp 23 getkirby/cms 22 nilsteampassnet/teampass 22 grumpydictator/firefly-iii 22 forkcms/forkcms 18 tribalsystems/zenario 18 cakephp/cakephp 17 cockpit-hq/cockpit 17 francoisjacquet/rosariosis 17 yetiforce/yetiforce-crm 16 openmage/magento-lts 15 contao/core-bundle 15 phpmailer/phpmailer 14 typo3/cms-backend 14 zendframework/zendframework1 14 symfony/security 13 codeigniter4/framework 13 impresscms/impresscms 13 elefant/cms 13 october/system 13 ezsystems/ezpublish-kernel 13 bolt/bolt 12 phpmyfaq/phpmyfaq 12 phpbb/phpbb 12 symfony/security-http 12 studio-42/elfinder 12 lavalite/cms 12 smarty/smarty 12 topthink/framework 11 contao/contao 11 zendframework/zendframework 11 feehi/cms 11 silverstripe/cms 11 feehi/feehicms 11 admidio/admidio 10 nukeviet/nukeviet 10 sylius/sylius 10 opencart/opencart 10 wallabag/wallabag 10 wwbn/avideo 10 dompdf/dompdf 10 pimcore/admin-ui-classic-bundle 10 ezsystems/ezplatform-kernel 10 laravel/framework 9 alextselegidis/easyappointments 9 concrete5/core 9 ssddanbrown/bookstack 9 simplesamlphp/simplesamlphp 9 tinymce 9 kevinpapst/kimai2 9 october/october 9 TinyMCE 9 tinymce/tinymce 9 funadmin/funadmin 9 gilacms/gila 8 sulu/sulu 8 october/cms 8 pimcore/customer-management-framework-bundle 8 yiisoft/yii2 8 facturascripts/facturascripts 8 statamic/cms 7 silverstripe/admin 7 flarum/core 7 october/backend 7 croogo/croogo 7 silverstripe/graphql 7 symfony/http-foundation 7 backdrop/backdrop 6 dweeves/magmi 6 pagekit/pagekit 6 directmailteam/direct-mail 6 nystudio107/craft-seomatic 6 yiisoft/yii2-dev 6 wpglobus/wpglobus 6 composer/composer 6 in2code/femanager 6 yourls/yourls 6 guzzlehttp/guzzle 6 pterodactyl/panel 6 symfony/http-kernel 5 vrana/adminer 5 phpseclib/phpseclib 5 cachethq/cachet 5 phpxmlrpc/phpxmlrpc 5 billz/raspap-webgui 5 automad/automad 5 elgg/elgg 5 anchorcms/anchor-cms 5 bottelet/flarepoint 5 typo3/cms-install 5 oro/platform 5 ibexa/core 5 bagisto/bagisto 5 pear/archive_tar 5 gugoan/economizzer 5 modx/revolution 4 symfony/security-bundle 4 idno/known 4 shopware/storefront 4 codeigniter4/shield 4 oro/commerce 4 ezsystems/ezplatform-admin-ui 4 bytefury/crater 4 notrinos/notrinos-erp 4 phpservermon/phpservermon 4 wintercms/winter 4 magento/product-community-edition 4 typo3/html-sanitizer 4 symfony/security-core 4 silverstripe/assets 4 bref/bref 4 wp-premium/gravityforms 4 spatie/browsershot 4 typo3/cms-frontend 4 woocommerce/woocommerce 4 joomla/joomla-cms 3 qcubed/qcubed 3 yiisoft/yii 3 kimai/kimai 3 appwrite/server-ce 3 zencart/zencart 3 joomla/framework 3 typo3/cms-form 3 illuminate/database 3 ckeditor4 3 sylius/resource-bundle 3 facade/ignition 3 enshrined/svg-sanitize 3 quickapps/cms 3 mantisbt/mantisbt 3 phenx/php-svg-lib 3 enhavo/enhavo-app 3 phpoffice/phpspreadsheet 3 pixelfed/pixelfed 3 tecnickcom/tcpdf 3 prestashop/productcomments 3 artesaos/seotools 3 shopxo/shopxo 3 adodb/adodb-php 3 codeigniter/framework 3 rudloff/alltube 3 zendframework/zendservice-amazon 3 zendframework/zendservice-windowsazure 3 zendframework/zendservice-api 3 flarum/framework 3 zendframework/zendopenid 3 twig/twig 3 froala/wysiwyg-editor 3 zendframework/zendrest 3 verot/class.upload.php 3 processwire/processwire 3 zendframework/zendservice-audioscrobbler 3 zendframework/zendservice-nirvanix 3 apache-solr-for-typo3/solr 3 icecoder/icecoder 3 uvdesk/community-skeleton 3 zoujingli/thinkadmin 3 limesurvey/limesurvey 3 verbb/comments 3 zendframework/zendservice-slideshare 3 zendframework/zendservice-technorati 3 munkireport/managedinstalls 2 yiisoft/yii2-gii 2 amphp/http-client 2 munkireport/munkireport 2 codiad/codiad 2 ckeditor/ckeditor 2 buddypress/buddypress 2 ether/logs 2 juzaweb/cms 2
Filter by Repository
https://github.com/pimcore/pimcore 111 https://github.com/nu11secur1ty/CVE-nu11secur1ty 1