PkgSeer

Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
contao/contao Contao: Server-Side Request Forgery (SSRF) via Unvalidated RSS Feed URL in Feed Reader Module Low Risk 3.1 3 days ago 3 days ago
contao/contao Cross site scripting in the system log Medium Risk 6.1 5 years ago 18 days ago
contao/contao Contao: Possible path traversal in job download URIs Low Risk 3.1 1 month ago 1 month ago
contao/contao Contao crawler leaks auth credentials to external hosts Low Risk 2.6 1 month ago 1 month ago
contao/contao Privilege escalation via form generator High Risk 8.0 5 years ago 2 months ago
contao/contao Cross site scripting via HTML attributes in the back end Medium Risk 5.9 5 years ago 2 months ago
contao/contao PHP file inclusion via insert tags Medium Risk 6.7 5 years ago 2 months ago
contao/contao Contao applies improper access control in the back end voters Medium Risk 4.3 1 year ago 1 year ago
contao/contao Contao does not properly manage privileges for page and article fields Medium Risk 4.3 1 year ago 1 year ago
contao/contao Contao can disclose sensitive information in the news module Medium Risk 5.3 1 year ago 1 year ago
contao/contao Contao discloses sensitive information in the front end search index Medium Risk 5.3 1 year ago 1 year ago
contao/contao Cross site scripting via canonical tag in Contao High Risk 7.2 4 years ago 1 year ago
contao/contao Contao Does Not Expire Tokens Correctly Critical 9.8 4 years ago 2 years ago
contao/contao Contao Does Not Invalidate Existing Sessions When Password Changes Critical 9.8 4 years ago 2 years ago
contao/contao Contao Core directory traversal vulnerability High Risk 8.8 4 years ago 2 years ago
contao/contao Contao CSRF Token Bypass High Risk 8.8 4 years ago 2 years ago
contao/contao Contao Information Disclosure via Access Control Flaws Medium Risk 6.5 4 years ago 2 years ago
contao/contao Contao SQL injection in the file manager Critical 9.8 4 years ago 2 years ago
contao/contao Contao SQL injection in the backend and listing module Critical 9.8 4 years ago 2 years ago
contao/contao Insert tag injection in the Contao login module Medium Risk 5.3 6 years ago 2 years ago
contao/contao Information disclosure in the Contao backend Medium Risk 5.3 6 years ago 2 years ago
contao/contao Contao Insert tag injection in forms Medium Risk 5.3 6 years ago 2 years ago
contao/contao Unrestricted file uploads in Contao High Risk 8.8 6 years ago 2 years ago
contao/contao Cross-site Scripting in Contao Medium Risk 6.1 4 years ago 2 years ago
contao/contao Path traversal vulnerability in the file manager High Risk 8.8 3 years ago 2 years ago
Data courtesy of OSV.dev
Page 1