Filter
-Infinity
0

Pimcore E-commerce FrameworkPimcore Vulnerable to SQL Injection in getRelationFilterCondition

EPSS
0.01%
First published (updated )

composer/pimcore/admin-ui-classic-bundleUser enumeration in pimcore/admin-ui-classic-bundle

EPSS
0.04%
First published (updated )

Pimcore Customer Data FrameworkPimcore customer-data-framework list sql injection

7.2
First published (updated )

Pimcore E-commerce FrameworkPimcore Search Document cross site scripting

First published (updated )

Pimcore E-commerce FrameworkChange-Password via Portal-Profile sets PimcoreBackendUser password without hashing

8.7
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

composer/pimcore/pimcorePimcore Vulnerable to Flooding Server with Thumbnail files

7.5
First published (updated )

composer/pimcore/admin-ui-classic-bundlePimcore Host Header Injection in user invitation link

EPSS
0.04%
First published (updated )

composer/pimcore/admin-ui-classic-bundlePimcore Admin Classic Bundle permissions are not getting checked when working with tags

EPSS
0.06%
First published (updated )

composer/pimcore/admin-ui-classic-bundlePimcore Admin Classic Bundle SQL Injection in Admin download files as zip

8.8
EPSS
0.06%
First published (updated )

composer/pimcore/admin-ui-classic-bundlePimcore Admin Classic Bundle host header injection in the password reset

8.8
EPSS
0.09%
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

composer/pimcore/customer-management-framework-bundlepimcore/customer-data-framework is the Customer Management Framework for management of customer data…

EPSS
0.05%
First published (updated )

composer/pimcore/customer-management-framework-bundleThe Customer Management Framework (CMF) for Pimcore adds functionality for customer data management,…

EPSS
0.05%
First published (updated )

composer/pimcore/ecommerce-framework-bundleecommerce-framework-bundle is the Pimcore Ecommerce Framework Bundle. An authenticated and unauthori…

EPSS
0.05%
First published (updated )

Pimcore E-commerce FrameworkPimcore missing token/header to prevent CSRF

First published (updated )

composer/pimcore/admin-ui-classic-bundlePimcore Admin UI has Two Factor Authentication disabled for non admin security firewalls

8.4
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

composer/pimcore/pimcoreSQL Injection in Admin Grid Filter API in Pimcore

8.8
First published (updated )

composer/pimcore/admin-ui-classic-bundleFull Path Disclosure via re-export document in pimcore/admin-ui-classic-bundle

First published (updated )

composer/pimcore/admin-ui-classic-bundlePimcore Admin Classic Bundle Cross-site Scripting (XSS) in PDF previews

First published (updated )

composer/pimcore/pimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

EPSS
0.09%
First published (updated )

composer/pimcore/admin-ui-classic-bundleUnverified Password Change in pimcore/admin-ui-classic-bundle

7.2
EPSS
0.05%
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

composer/pimcore/demoExcessive Data Query Operations in a Large Data Table in pimcore/demo

First published (updated )

composer/pimcore/admin-ui-classic-bundleCross-site Scripting (XSS) in pimcore admin-ui-classic-bundle translations

First published (updated )

composer/pimcore/pimcoreCross-site Scripting (XSS) - Reflected in pimcore/pimcore

First published (updated )

composer/pimcore/pimcorePimcore Path Traversal Vulnerability in AssetController:importServerFilesAction

8.8
First published (updated )

composer/pimcore/customer-management-framework-bundleCross-site Scripting (XSS) - Stored in pimcore/customer-data-framework

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

composer/pimcore/pimcoreCross-site Scripting (XSS) - Reflected in pimcore/pimcore

First published (updated )

composer/pimcore/pimcoreCross-site Scripting (XSS) - Stored in pimcore/pimcore

First published (updated )

composer/pimcore/pimcoreSQL Injection in pimcore/pimcore

7.2
EPSS
0.05%
First published (updated )

composer/pimcore/pimcoreExposure of Sensitive Information to an Unauthorized Actor in pimcore/pimcore

7.6
EPSS
0.07%
First published (updated )

composer/pimcore/pimcoreSQL Injection in pimcore/pimcore

7.2
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203