Vulnerabilities
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-11-15 | CVE-2021-3741 | Cross-site Scripting vulnerability in Chatwoot A stored cross-site scripting (XSS) vulnerability was discovered in chatwoot/chatwoot, affecting all versions prior to 2.6. | 5.4 |
| 2024-11-15 | CVE-2021-3742 | Server-Side Request Forgery (SSRF) vulnerability in Chatwoot A Server-Side Request Forgery (SSRF) vulnerability was discovered in chatwoot/chatwoot, affecting all versions prior to 2.5.0. | 8.8 |
| 2024-11-15 | CVE-2021-3838 | Deserialization of Untrusted Data vulnerability in Dompdf Project Dompdf DomPDF before version 2.0.0 is vulnerable to PHAR deserialization due to a lack of checking on the protocol before passing it into the file_get_contents() function. | 9.8 |
| 2024-11-15 | CVE-2021-3841 | Cross-site Scripting vulnerability in Sylius sylius/sylius versions prior to 1.9.10, 1.10.11, and 1.11.2 are vulnerable to stored cross-site scripting (XSS) through SVG files. | 5.4 |
| 2024-11-15 | CVE-2021-3902 | XXE vulnerability in Dompdf Project Dompdf An improper restriction of external entities (XXE) vulnerability in dompdf/dompdf's SVG parser allows for Server-Side Request Forgery (SSRF) and deserialization attacks. | 9.8 |
| 2024-11-15 | CVE-2021-3986 | Information Exposure Through an Error Message vulnerability in Janeczku Calibre-Web A vulnerability in janeczku/calibre-web allows unauthorized users to view the names of private shelves belonging to other users. | 4.3 |
| 2024-11-15 | CVE-2021-3987 | Missing Authorization vulnerability in Janeczku Calibre-Web An improper access control vulnerability exists in janeczku/calibre-web. | 4.3 |
| 2024-11-15 | CVE-2021-3988 | Cross-site Scripting vulnerability in Janeczku Calibre-Web A Cross-site Scripting (XSS) vulnerability exists in janeczku/calibre-web, specifically in the file `edit_books.js`. | 6.1 |
| 2024-11-15 | CVE-2021-3991 | Authorization Bypass Through User-Controlled Key vulnerability in Dolibarr Erp/Crm An Improper Authorization vulnerability exists in Dolibarr versions prior to the 'develop' branch. | 4.3 |
| 2024-11-15 | CVE-2022-1226 | Cross-site Scripting vulnerability in PHPipam A Cross-Site Scripting (XSS) vulnerability in phpipam/phpipam versions prior to 1.4.7 allows attackers to execute arbitrary JavaScript code in the browser of a victim. | 4.8 |