Filter
AND
-Infinity
0
Trending
Pimcore Customer Data FrameworkPimcore customer-data-framework list sql injection
7.2
First published (updated )
Pimcore E-commerce FrameworkChange-Password via Portal-Profile sets PimcoreBackendUser password without hashing
8.7
First published (updated )
composer/pimcore/pimcorePimcore Vulnerable to Flooding Server with Thumbnail files
7.5
First published (updated )
composer/pimcore/admin-ui-classic-bundlePimcore Admin Classic Bundle SQL Injection in Admin download files as zip
8.8
EPSS
0.06%
First published (updated )
composer/pimcore/admin-ui-classic-bundlePimcore Admin Classic Bundle host header injection in the password reset
8.8
EPSS
0.09%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/pimcore/admin-ui-classic-bundlePimcore Admin UI has Two Factor Authentication disabled for non admin security firewalls
8.4
First published (updated )
composer/pimcore/pimcoreSQL Injection in Admin Grid Filter API in Pimcore
8.8
First published (updated )
composer/pimcore/admin-ui-classic-bundleUnverified Password Change in pimcore/admin-ui-classic-bundle
7.2
EPSS
0.05%
First published (updated )
composer/pimcore/pimcorePimcore Path Traversal Vulnerability in AssetController:importServerFilesAction
8.8
First published (updated )
composer/pimcore/pimcoreSQL Injection in pimcore/pimcore
7.2
EPSS
0.05%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/pimcore/pimcoreExposure of Sensitive Information to an Unauthorized Actor in pimcore/pimcore
7.6
EPSS
0.07%
First published (updated )
composer/pimcore/pimcoreSQL Injection in pimcore/pimcore
7.2
First published (updated )
Pimcore E-commerce FrameworkPath Traversal: '\..\filename' in pimcore/pimcore
8.8
First published (updated )
Pimcore E-commerce FrameworkPrivilege Defined With Unsafe Actions in pimcore/pimcore
8.8
First published (updated )
Pimcore Customer Management FrameworkSQL Injection in pimcore/customer-data-framework
7.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Pimcore Customer Management FrameworkImproper Neutralization of Formula Elements in a CSV File in pimcore/customer-data-framework
7.8
First published (updated )
composer/pimcore/pimcorePimcore Path Traversal Vulnerability in AdminBundle/Controller/Reports/CustomReportController.php
7.5
First published (updated )
composer/pimcore/pimcorePimcore SQL Injection Vulnerability in Admin Translations API
8.8
First published (updated )
composer/pimcore/pimcorePimcore vulnerable to SQL Injection in Translation Export API
8.8
First published (updated )
composer/pimcore/pimcorePimcore SQL Injection Vulnerability in Admin Search Find API
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/pimcore/pimcoreCross-site Scripting (XSS) - Generic in pimcore/pimcore
7.3
First published (updated )
composer/pimcore/pimcoreSQL Injection in pimcore/pimcore
8.8
First published (updated )
Pimcore E-commerce FrameworkPimcore vulnerable to improper quoting of filters in Custom Reports
8
First published (updated )
Pimcore E-commerce FrameworkSQL Injection in pimcore/pimcore
8.8
First published (updated )
Pimcore E-commerce FrameworkPimcore has improper quoting of columns when calling methods "getByUuid" & "exists" on UUID Model
7.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Pimcore E-commerce FrameworkCross-site Scripting (XSS) - Stored in pimcore/pimcore
7.6
First published (updated )
Pimcore E-commerce FrameworkAn improper SameSite Attribute vulnerability in pimCore v10.5.15 allows attackers to execute arbitra…
8.8
First published (updated )
Pimcore E-commerce FrameworkMissing file upload type validation in pimcore/pimcore
8.2
First published (updated )
Pimcore E-commerce FrameworkSQL injection in GridHelperService.php in pimcore/pimcore
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.