İçeriğe atla
Noroxi

silverstripe kayıtları

silverstripe üreticisine ait 89 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
7
Düzeltme kaydı olan
%65,2
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

89 kayıt
  • CVE-2007-2321
    40Planlayın

    Unspecified vulnerability in the search functionality in SilverStripe 2.0.0 has unknown impact and attack vectors.

    KritikCVSS 10,0İstismar yokEPSS %1

    silverstripe · silverstripe26 Nis 2007

  • CVE-2019-5715
    39İzleyin

    All versions of SilverStripe 3 prior to 3.6.7 and 3.7.3, and all versions of SilverStripe 4 prior to 4.0.7, 4.1.5, 4.2.4, and 4.3.1 allows R

    KritikCVSS 9,8İstismar yokEPSS %1

    silverstripe · silverstripe11 Nis 2019

  • CVE-2019-12204
    39İzleyin

    In SilverStripe through 4.3.3, a missing warning about leaving install.php in a public webroot can lead to unauthenticated admin access.

    KritikCVSS 9,8İstismar yokEPSS %1

    silverstripe · silverstripe25 Eyl 2019

  • CVE-2019-12149
    39İzleyin

    SQL injection vulnerability in silverstripe/restfulserver module 1.0.x before 1.0.9, 2.0.x before 2.0.4, and 2.1.x before 2.1.2 and silverst

    KritikCVSS 9,8İstismar yokEPSS %1

    silverstripe · registry11 Haz 2019

  • CVE-2020-9309
    36İzleyin

    Silverstripe CMS through 4.5 can be susceptible to script execution from malicious upload contents under allowed file extensions (for exampl

    YüksekCVSS 8,8İstismar yokEPSS %1

    silverstripe · mimevalidator15 Tem 2020

  • CVE-2022-38148
    35İzleyin

    Silverstripe silverstripe/framework through 4.11 allows SQL Injection.

    YüksekCVSS 8,8İstismar yokEPSS %0

    silverstripe · framework21 Kas 2022

  • CVE-2019-12437
    35İzleyin

    In SilverStripe through 4.3.3, the previous fix for SS-2018-007 does not completely mitigate the risk of CSRF in GraphQL mutations,

    YüksekCVSS 8,8İstismar yokEPSS %0

    silverstripe · silverstripe19 Şub 2020

  • CVE-2020-6164
    31İzleyin

    In SilverStripe through 4.5.0, a specific URL path configured by default through the silverstripe/framework module can be used to disclose t

    YüksekCVSS 7,5İstismar yokEPSS %1

    silverstripe · silverstripe15 Tem 2020

  • CVE-2020-9280
    31İzleyin

    In SilverStripe through 4.5, files uploaded via Forms to folders migrated from Silverstripe CMS 3.x may be put to the default "/Uploads" fol

    YüksekCVSS 7,5İstismar yokEPSS %1

    silverstripe · silverstripe15 Nis 2020

  • CVE-2011-4960
    30İzleyin

    SQL injection vulnerability in the Folder::findOrMake method in SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6 allows remote attack

    YüksekCVSS 7,5İstismar yokEPSS %1

    silverstripe · silverstripe17 Eyl 2012

  • CVE-2023-40180
    30İzleyin

    Denial of service vulnerability in silverstripe-graphql via recursive queries

    YüksekCVSS 7,5İstismar yokEPSS %1

    silverstripe · graphql16 Eki 2023

  • CVE-2009-1433
    30İzleyin

    SQL injection vulnerability in File::find (filesystem/File.php) in SilverStripe before 2.3.1 allows remote attackers to execute arbitrary SQ

    YüksekCVSS 7,5İstismar yokEPSS %1

    silverstripe · silverstripe24 Nis 2009

  • CVE-2008-6753
    30İzleyin

    SQL injection vulnerability in SilverStripe before 2.2.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors r

    YüksekCVSS 7,5İstismar yokEPSS %1

    silverstripe · silverstripe27 Nis 2009

  • CVE-2023-28104
    30İzleyin

    silverstripe/graphql Denial of Service vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %1

    silverstripe · graphql16 Mar 2023

  • CVE-2022-42949
    30İzleyin

    Silverstripe silverstripe/subsites through 2.6.0 has Insecure Permissions.

    YüksekCVSS 7,5İstismar yokEPSS %0

    silverstripe · subsites20 Ara 2022

  • CVE-2011-4962
    28İzleyin

    code/sitefeatures/PageCommentInterface.php in SilverStripe 2.4.x before 2.4.6 might allow remote attackers to execute arbitrary code via a c

    OrtaCVSS 6,8İstismar yokEPSS %3

    silverstripe · silverstripe17 Eyl 2012

  • CVE-2010-4824
    28İzleyin

    SQL injection vulnerability in the augmentSQL method in core/model/Translatable.php in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4

    OrtaCVSS 6,8İstismar yokEPSS %2

    silverstripe · silverstripe17 Eyl 2012

  • CVE-2011-4959
    27İzleyin

    SQL injection vulnerability in the addslashes method in SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6, when connected to a MySQL d

    OrtaCVSS 6,8İstismar yokEPSS %1

    silverstripe · silverstripe17 Eyl 2012

  • CVE-2010-5080
    27İzleyin

    The Security/changepassword URL action in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 passes a token as a GET parameter while ch

    OrtaCVSS 6,8İstismar yokEPSS %1

    silverstripe · silverstripe26 Ağu 2012

  • CVE-2010-5088
    27İzleyin

    Multiple cross-site request forgery (CSRF) vulnerabilities in SilverStripe 2.3.x before 2.3.9 and 2.4.x before 2.4.3 allow remote attackers

    OrtaCVSS 6,8İstismar yokEPSS %1

    silverstripe · silverstripe26 Ağu 2012

  • CVE-2020-26136
    26İzleyin

    In SilverStripe through 4.6.0-rc1, GraphQL doesn't honour MFA (multi-factor authentication) when using basic authentication.

    OrtaCVSS 6,5İstismar yokEPSS %1

    silverstripe · silverstripe8 Haz 2021

  • CVE-2021-41559
    26İzleyin

    Silverstripe silverstripe/framework 4.8.1 has a quadratic blowup in Convert::xml2array() that enables a remote attack via a crafted XML docu

    OrtaCVSS 6,5İstismar yokEPSS %1

    silverstripe · silverstripe28 Haz 2022

  • CVE-2022-24444
    26İzleyin

    Silverstripe silverstripe/framework through 4.10 allows Session Fixation.

    OrtaCVSS 6,5İstismar yokEPSS %0

    silverstripe · silverstripe28 Haz 2022

  • CVE-2022-29254
    26İzleyin

    Failed payment recorded has completed in silverstripe/silverstripe-omnipay

    OrtaCVSS 6,5İstismar yokEPSS %0

    silverstripe · silverstripe-omnipay9 Haz 2022

  • CVE-2019-12203
    25İzleyin

    SilverStripe through 4.3.3 allows session fixation in the "change password" form.

    OrtaCVSS 6,3İstismar yokEPSS %0

    silverstripe · silverstripe25 Eyl 2019