Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
civicrm civicrm vulnerabilities and exploits
(subscribe to this query)
9.8
CVSSv3
CVE-2023-28115
Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. Prior to version 1.4.2, Snappy is vulnerable to PHAR deserialization due to a lack of checking on the protocol before passing it into the `file_exists()` function. If an attacker can...
Knplabs Snappy
NA
CVE-2023-254402023
CiviCRM version 5.59.alpha1 suffers from a persistent cross site scripting vulnerability.
NA
CVE-2012-5554
The default configuration for the Webform CiviCRM Integration module 7.x-3.x prior to 7.x-3.2 has "Enforce Permissions" disabled, which allows remote malicious users to obtain contact information by reading webforms.
Coleman Watts Webform Civicrm 7.x-3.0
Coleman Watts Webform Civicrm 7.x-3.1
Coleman Watts Webform Civicrm 7.x-3.x
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463
CVE-2024-3400
deserialization
CVE-2024-21788
CVE-2023-42433
CVE-2024-21841
CVE-2024-22095
local file inclusion
memory leak
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2