dbcve.org
Vulnerability index

Browse CVEs

132 matching
Cards Compact
Filters 1 Clear all
Severity

Filters apply as you choose them.

Top technology Linux 13140 Google 12525 Microsoft 12378 Apple 6692 Oracle 6649 Adobe 6383 Ibm 6266 Cisco 5746 Debian 3919 Apache 2864 Mozilla 2857 Redhat 2581
Pimcore MEDIUM 5.4
CVE-2023-1702

Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.20.

Fix: 10.5.20+
Fix from $1,600 2023-03-29
Pimcore MEDIUM 5.4
CVE-2023-1703

Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.20.

Fix: 10.5.20+
Fix from $1,600 2023-03-29
Pimcore MEDIUM 5.4
CVE-2023-1704

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.20.

Fix: 10.5.20+
Fix from $1,600 2023-03-29
Pimcore HIGH 8.0
CVE-2023-28438

Pimcore is an open source data and experience management platform. Prior to version 10.5.19, since a user with 'report' permission can already write …

Fix: 10.5.19+
Fix from $1,950 2023-03-22
Pimcore HIGH 8.8
CVE-2023-1578EPSS 63%

SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.19.

Fix: 10.5.19+
Fix from $1,950 2023-03-22
Pimcore MEDIUM 6.1
CVE-2023-28429

Pimcore is an open source data and experience management platform. Versions prior to 10.5.19 have an unsecured tooltip field in DataObject class defi…

Fix: 10.5.19+
Fix from $1,600 2023-03-20
Pimcore MEDIUM 5.4
CVE-2023-1515

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19.

Fix: 10.5.19+
Fix from $1,600 2023-03-20
Pimcore HIGH 7.8
CVE-2023-28108

Pimcore is an open source data and experience management platform. Prior to version 10.5.19, quoting is not done properly in UUID DAO model. There is…

Fix: 10.5.19+
Fix from $1,950 2023-03-16
Pimcore MEDIUM 5.4
CVE-2023-1429

Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19.

Fix: 10.5.19+
Fix from $1,600 2023-03-16
Pimcore MEDIUM 5.4
CVE-2023-1115

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.

Fix: 10.5.18+
Fix from $1,600 2023-03-01
Pimcore MEDIUM 5.4
CVE-2023-1116

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.

Fix: 10.5.18+
Fix from $1,600 2023-03-01
Pimcore MEDIUM 5.4
CVE-2023-1117

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.

Fix: 10.5.18+
Fix from $1,600 2023-03-01
Pimcore MEDIUM 5.4
CVE-2023-1067

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.

Fix: 10.5.18+
Fix from $1,600 2023-02-27
Pimcore MEDIUM 5.4
CVE-2023-0827

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 1.5.17.

Fix: 1.5.17+
Fix from $1,600 2023-02-14
Pimcore HIGH 8.8
CVE-2023-25240

An improper SameSite Attribute vulnerability in pimCore v10.5.15 allows attackers to execute arbitrary code.

No fix yet
Fix from $1,950 2023-02-13
Pimcore MEDIUM 5.4
CVE-2023-23937

Pimcore is an Open Source Data & Experience Management Platform: PIM, MDM, CDP, DAM, DXP/CMS & Digital Commerce. The upload functionality for updatin…

Fix: 10.5.16+
Fix from $1,600 2023-02-03
Pimcore MEDIUM 5.4
CVE-2023-0323

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.14.

Fix: 10.5.14+
Fix from $1,600 2023-01-16
Pimcore CRITICAL 9.8
CVE-2022-39365

Pimcore is an open source data and experience management platform. Prior to version 10.5.9, the user controlled twig templates rendering in `Pimcore/…

Fix: 10.5.9+
Fix from $2,300 2022-10-27
Pimcore MEDIUM 5.4
CVE-2022-3211

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.6.

Fix: 10.5.6+
Fix from $1,600 2022-09-15
Pimcore HIGH 8.1
CVE-2022-31092

Pimcore is an Open Source Data & Experience Management Platform. Pimcore offers developers listing classes to make querying data easier. This listing…

Fix: 10.4.4+
Fix from $1,950 2022-06-27
Pimcore HIGH 7.5
CVE-2022-1429EPSS 64%

SQL injection in GridHelperService.php in GitHub repository pimcore/pimcore prior to 10.3.6. This vulnerability is capable of steal the data

Fix: 10.3.6+
Fix from $1,950 2022-04-22
Pimcore MEDIUM 5.4
CVE-2022-1351

Stored XSS in Tooltip in GitHub repository pimcore/pimcore prior to 10.4.

Fix: 10.4.0+
Fix from $1,600 2022-04-14
Pimcore HIGH 7.5
CVE-2022-1339EPSS 5%

SQL injection in ElementController.php in GitHub repository pimcore/pimcore prior to 10.3.5. This vulnerability is capable of steal the data

Fix: 10.3.5+
Fix from $1,950 2022-04-13
Pimcore HIGH 7.5
CVE-2022-1219

SQL injection in RecyclebinController.php in GitHub repository pimcore/pimcore prior to 10.3.5. This vulnerability is capable of steal the data

Fix: 10.3.5+
Fix from $1,950 2022-04-08
Pimcore MEDIUM 5.4
CVE-2022-0705

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.

Fix: after 10.3.0
Fix from $1,600 2022-03-16
Pimcore MEDIUM 5.4
CVE-2022-0704

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.

Fix: after 10.3.0
Fix from $1,600 2022-03-16
Pimcore MEDIUM 5.4
CVE-2022-0911

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.

Fix: after 10.3.0
Fix from $1,600 2022-03-16
Pimcore MEDIUM 5.4
CVE-2022-0894

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.

Fix: after 10.3.0
Fix from $1,600 2022-03-15
Pimcore MEDIUM 5.4
CVE-2022-0893

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.

Fix: after 10.3.0
Fix from $1,600 2022-03-15
Pimcore MEDIUM 5.4
CVE-2022-0831

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3.

Fix: 10.3.3+
Fix from $1,600 2022-03-04