Browse CVEs

MEDIUM 5.4 CVE-2023-3821 Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.6.4. Pimcore 10.6.4+ Fix from $1,6002023-07-21 HIGH 7.2 CVE-2023-3673 SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.24. Pimcore 10.5.24+ Fix from $1,9502023-07-14 MEDIUM 6.1 CVE-2023-37280 Pimcore Admin Classic Bundle provides a Backend UI for Pimcore based on the ExtJS framework. An admin who has not setup two factor authentication bef… Admin Classic Bundle 1.0.3+ Fix from $1,6002023-07-11 MEDIUM 6.5 CVE-2023-3574 Improper Authorization in GitHub repository pimcore/customer-data-framework prior to 3.4.1. Customer Management Framework 3.4.1+ Fix from $1,6002023-07-10 HIGH 8.8 CVE-2023-2983 Privilege Defined With Unsafe Actions in GitHub repository pimcore/pimcore prior to 10.5.23. Pimcore 10.5.23+ Fix from $1,9502023-05-30 HIGH 8.8 CVE-2023-2984 Path Traversal: '\..\filename' in GitHub repository pimcore/pimcore prior to 10.5.22. Pimcore 10.5.22+ Fix from $1,9502023-05-30 HIGH 7.2 CVE-2023-2756 SQL Injection in GitHub repository pimcore/customer-data-framework prior to 3.3.10. Customer Management Framework 3.3.10+ Fix from $1,9502023-05-17 MEDIUM 5.4 CVE-2023-2730 Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3. Pimcore 10.3.3+ Fix from $1,6002023-05-16 HIGH 7.8 CVE-2023-2629 Improper Neutralization of Formula Elements in a CSV File in GitHub repository pimcore/customer-data-framework prior to 3.3.9. Customer Management Framework 3.3.9+ Fix from $1,9502023-05-10 MEDIUM 5.4 CVE-2023-2615 Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21. Pimcore 10.5.21+ Fix from $1,6002023-05-10 MEDIUM 5.4 CVE-2023-2614 Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21. Pimcore 10.5.21+ Fix from $1,6002023-05-10 MEDIUM 5.4 CVE-2023-2616 Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21. Pimcore 10.5.21+ Fix from $1,6002023-05-10 HIGH 7.5 CVE-2023-30855 Pimcore is an open source data and experience management platform. Versions of Pimcore prior to 10.5.18 are vulnerable to path traversal. The impact … Pimcore 10.5.18+ Fix from $1,9502023-05-08 MEDIUM 5.4 CVE-2023-2361 Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21. Pimcore 10.5.21+ Fix from $1,6002023-04-28 HIGH 8.8 CVE-2023-30850 Pimcore is an open source data and experience management platform. Prior to version 10.5.21, a SQL Injection vulnerability exists in the admin transl… Pimcore 10.5.21+ Fix from $1,9502023-04-27 HIGH 8.8 CVE-2023-30848 Pimcore is an open source data and experience management platform. Prior to version 10.5.21, the admin search find API has a SQL injection vulnerabil… Pimcore 10.5.21+ Fix from $1,9502023-04-27 HIGH 8.8 CVE-2023-30849 Pimcore is an open source data and experience management platform. Prior to version 10.5.21, A SQL injection vulnerability exists in the translation … Pimcore 10.5.21+ Fix from $1,9502023-04-27 MEDIUM 6.1 CVE-2023-2341 Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21. Pimcore 10.5.21+ Fix from $1,6002023-04-27 MEDIUM 5.4 CVE-2023-2342 Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21. Pimcore 10.5.21+ Fix from $1,6002023-04-27 MEDIUM 5.4 CVE-2023-2343 Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21. Pimcore 10.5.21+ Fix from $1,6002023-04-27 MEDIUM 5.4 CVE-2023-2340 Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21. Pimcore 10.5.21+ Fix from $1,6002023-04-27 HIGH 8.8 CVE-2023-2338 SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.21. Pimcore 10.5.21+ Fix from $1,9502023-04-27 MEDIUM 6.5 CVE-2023-2336 Path Traversal in GitHub repository pimcore/pimcore prior to 10.5.21. Pimcore 10.5.21+ Fix from $1,6002023-04-27 MEDIUM 5.4 CVE-2023-2339 Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21. Pimcore 10.5.21+ Fix from $1,6002023-04-27 MEDIUM 5.4 CVE-2023-2327 Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21. Pimcore 10.5.21+ Fix from $1,6002023-04-27 MEDIUM 5.4 CVE-2023-2328 Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21. Pimcore 10.5.21+ Fix from $1,6002023-04-27 MEDIUM 5.4 CVE-2023-2323 Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21. Pimcore 10.5.21+ Fix from $1,6002023-04-27 MEDIUM 5.4 CVE-2023-2322 Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21. Pimcore 10.5.21+ Fix from $1,6002023-04-27 MEDIUM 5.4 CVE-2023-28850 Pimcore Perspective Editor provides an editor for Pimcore that allows users to add/remove/edit custom views and perspectives. This vulnerability has … Perspective Editor 1.5.1+ Fix from $1,6002023-04-03 MEDIUM 5.4 CVE-2023-1701 Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.20. Pimcore 10.5.20+ Fix from $1,6002023-03-29