PkgSeer

Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
cakephp/cakephp CakePHP: SmtpTransport vulnerable to CRLF header injection High Risk 8.0 1 month ago 9 hours ago
cakephp/cakephp CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injection Critical 9.5 1 month ago 1 month ago
cakephp/cakephp CakePHP: View::element() is missing a path containment check Medium Risk 6.0 4 months ago 1 month ago
cakephp/cakephp CakePHP Database\\Query::offset() and limit() methods are vulnerable to SQL injection Critical 9.8 3 years ago 1 month ago
cakephp/cakephp CakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDriver Critical 9.5 1 month ago 1 month ago
cakephp/cakephp CakePHP PaginatorHelper::limitControl() vulnerable to reflected cross-site-scripting Medium Risk 5.4 9 months ago 9 months ago
cakephp/cakephp Unsafe deserialization in SmtpTransport in CakePHP High Risk 7.5 6 years ago 1 year ago
cakephp/cakephp CakePHP has incorrect Cross-Site Request Forgery validation Medium Risk 6.0 3 years ago 1 year ago
cakephp/cakephp CakePHP vulnerable to Remote File Inclusion through View template name manipulation Medium Risk 6.0 3 years ago 1 year ago
cakephp/cakephp CakePHP vulnerable to Cross-site Scripting in some development error pages Medium Risk 6.0 3 years ago 1 year ago
cakephp/cakephp CakePHP vulnerable to Denial of Service attack through XML payloads High Risk 8.0 3 years ago 1 year ago
cakephp/cakephp CakePHP allows direct access of prefixed controller actions Medium Risk 6.0 3 years ago 1 year ago
cakephp/cakephp CakePHP SecurityComponent cross form submission issue Medium Risk 6.0 3 years ago 1 year ago
cakephp/cakephp CakePHPallows remote attackers to read arbitrary files via XML data containing external entity references High Risk 7.5 4 years ago 2 years ago
cakephp/cakephp CakePHP allows remote attackers to spoof their IP High Risk 7.5 4 years ago 2 years ago
cakephp/cakephp Cross-Site Request Forgery in CakePHP Medium Risk 4.3 4 years ago 2 years ago
cakephp/cakephp CakePHP allows method override parameters to bypass CSRF checks High Risk 8.8 4 years ago 2 years ago
cakephp/cakephp CakePHP might allow remote attackers to bypass CSRF protection mechanism via the _method parameter High Risk 8.8 4 years ago 2 years ago
cakephp/cakephp CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file Medium Risk 6.0 4 years ago 2 years ago
cakephp/cakephp CakePHP allows remote attackers to modify internal Cake cache and execute arbitrary code High Risk 8.0 4 years ago 2 years ago
cakephp/cakephp CakePHP directory traversal vulnerability allows remote attackers to read arbitrary files Medium Risk 6.0 4 years ago 2 years ago
cakephp/cakephp Cross-site scripting (XSS) vulnerability in CakePHP Medium Risk 6.5 4 years ago 2 years ago
Data courtesy of OSV.dev
Page 1