Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

CRITICAL 9.9 CVE-2026-27591 Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework. Prior to 1.0.477, 1.1.12, and 1.2.12, Winter CMS al… Winter 1.0.477 / 1.1.12+ Fix from $2,3002026-03-11 HIGH 8.4 CVE-2024-54149 Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework. Winter CMS prior to versions 1.2.7, 1.1.11, and 1.0… Winter 1.0.476 / 1.1.11+ Fix from $1,9502024-12-09 HIGH 7.2 CVE-2024-29686 Server-side Template Injection (SSTI) vulnerability in Winter CMS v.1.2.3 allows a remote attacker to execute arbitrary code via a crafted payload to… Winter No fix yet Fix from $1,9502024-03-29 MEDIUM 5.4 CVE-2023-52085EPSS 30% Winter is a free, open-source content management system. Users with access to backend forms that include a ColorPicker FormWidget can provide a value… Winter 1.2.4+ Fix from $1,6002023-12-29 MEDIUM 5.4 CVE-2023-52084 Winter is a free, open-source content management system. Prior to 1.2.4, Users with access to backend forms that include a ColorPicker FormWidget can… Winter 1.2.4+ Fix from $1,6002023-12-28 CRITICAL 9.8 CVE-2022-39357 Winter is a free, open-source content management system based on the Laravel PHP framework. The Snowboard framework in versions 1.1.8, 1.1.9, and 1.2… Winter Patch available Fix from $2,3002022-10-26