Browse CVEs

MEDIUM 5.4 CVE-2023-1702 Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.20. Pimcore 10.5.20+ Fix from $1,6002023-03-29 MEDIUM 5.4 CVE-2023-1703 Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.20. Pimcore 10.5.20+ Fix from $1,6002023-03-29 MEDIUM 5.4 CVE-2023-1704 Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.20. Pimcore 10.5.20+ Fix from $1,6002023-03-29 HIGH 8.0 CVE-2023-28438 Pimcore is an open source data and experience management platform. Prior to version 10.5.19, since a user with 'report' permission can already write … Pimcore 10.5.19+ Fix from $1,9502023-03-22 HIGH 8.8 CVE-2023-1578EPSS 63% SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.19. Pimcore 10.5.19+ Fix from $1,9502023-03-22 MEDIUM 6.1 CVE-2023-28429 Pimcore is an open source data and experience management platform. Versions prior to 10.5.19 have an unsecured tooltip field in DataObject class defi… Pimcore 10.5.19+ Fix from $1,6002023-03-20 MEDIUM 5.4 CVE-2023-1515 Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19. Pimcore 10.5.19+ Fix from $1,6002023-03-20 HIGH 7.8 CVE-2023-28108 Pimcore is an open source data and experience management platform. Prior to version 10.5.19, quoting is not done properly in UUID DAO model. There is… Pimcore 10.5.19+ Fix from $1,9502023-03-16 MEDIUM 5.4 CVE-2023-1429 Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19. Pimcore 10.5.19+ Fix from $1,6002023-03-16 MEDIUM 5.4 CVE-2023-1115 Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18. Pimcore 10.5.18+ Fix from $1,6002023-03-01 MEDIUM 5.4 CVE-2023-1116 Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18. Pimcore 10.5.18+ Fix from $1,6002023-03-01 MEDIUM 5.4 CVE-2023-1117 Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18. Pimcore 10.5.18+ Fix from $1,6002023-03-01 MEDIUM 5.4 CVE-2023-1067 Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18. Pimcore 10.5.18+ Fix from $1,6002023-02-27 MEDIUM 5.4 CVE-2023-0827 Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 1.5.17. Pimcore 1.5.17+ Fix from $1,6002023-02-14 HIGH 8.8 CVE-2023-25240 An improper SameSite Attribute vulnerability in pimCore v10.5.15 allows attackers to execute arbitrary code. Pimcore No fix yet Fix from $1,9502023-02-13 MEDIUM 5.4 CVE-2023-23937 Pimcore is an Open Source Data & Experience Management Platform: PIM, MDM, CDP, DAM, DXP/CMS & Digital Commerce. The upload functionality for updatin… Pimcore 10.5.16+ Fix from $1,6002023-02-03 MEDIUM 5.4 CVE-2023-0323 Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.14. Pimcore 10.5.14+ Fix from $1,6002023-01-16 CRITICAL 9.8 CVE-2022-39365 Pimcore is an open source data and experience management platform. Prior to version 10.5.9, the user controlled twig templates rendering in `Pimcore/… Pimcore 10.5.9+ Fix from $2,3002022-10-27 MEDIUM 5.4 CVE-2022-3211 Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.6. Pimcore 10.5.6+ Fix from $1,6002022-09-15 HIGH 8.1 CVE-2022-31092 Pimcore is an Open Source Data & Experience Management Platform. Pimcore offers developers listing classes to make querying data easier. This listing… Pimcore 10.4.4+ Fix from $1,9502022-06-27 HIGH 7.5 CVE-2022-1429EPSS 64% SQL injection in GridHelperService.php in GitHub repository pimcore/pimcore prior to 10.3.6. This vulnerability is capable of steal the data Pimcore 10.3.6+ Fix from $1,9502022-04-22 MEDIUM 5.4 CVE-2022-1351 Stored XSS in Tooltip in GitHub repository pimcore/pimcore prior to 10.4. Pimcore 10.4.0+ Fix from $1,6002022-04-14 HIGH 7.5 CVE-2022-1339EPSS 5% SQL injection in ElementController.php in GitHub repository pimcore/pimcore prior to 10.3.5. This vulnerability is capable of steal the data Pimcore 10.3.5+ Fix from $1,9502022-04-13 HIGH 7.5 CVE-2022-1219 SQL injection in RecyclebinController.php in GitHub repository pimcore/pimcore prior to 10.3.5. This vulnerability is capable of steal the data Pimcore 10.3.5+ Fix from $1,9502022-04-08 MEDIUM 5.4 CVE-2022-0705 Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0. Pimcore after 10.3.0 Fix from $1,6002022-03-16 MEDIUM 5.4 CVE-2022-0704 Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0. Pimcore after 10.3.0 Fix from $1,6002022-03-16 MEDIUM 5.4 CVE-2022-0911 Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0. Pimcore after 10.3.0 Fix from $1,6002022-03-16 MEDIUM 5.4 CVE-2022-0894 Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0. Pimcore after 10.3.0 Fix from $1,6002022-03-15 MEDIUM 5.4 CVE-2022-0893 Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0. Pimcore after 10.3.0 Fix from $1,6002022-03-15 MEDIUM 5.4 CVE-2022-0831 Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3. Pimcore 10.3.3+ Fix from $1,6002022-03-04