CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

24 matches found

vulnersOsv•added 2026/05/14 6:38 p.m.•2 views

@code-mancers/strapi-plugin-stellate (>=1.0.0, <=1.4.3), @cowprotocol/cms (0.1.0-rc.5) +30 more potentially affected by CVE-2026-22706 via @strapi/plugin-users-permissions (>=4.0.0-beta.0, <=5.30.0)

@strapi/plugin-users-permissions NPM version =4.0.0-beta.0, =1.0.0, =1.0.0-alpha.0, =2.1.0, =1.0.0, =0.1.1, =0.0.1, =0.1.0, =1.0.10, =4.3.15 - robsen-strapi-site 0.1.0 and more Source cves: CVE-2026-22706 Source advisory: MEND:CVE-2026-22706...

6.5CVSS5.8AI score0.00341EPSS

SaveExploits0

vulnersOsv•added 2026/05/14 6:32 p.m.•3 views

@code-mancers/strapi-plugin-stellate (>=1.0.0, <=1.4.3), @cowprotocol/cms (0.1.0-rc.5) +33 more potentially affected by CVE-2025-64526 via @strapi/plugin-users-permissions (>=4.0.0-beta.0, <=5.42.1)

@strapi/plugin-users-permissions NPM version =4.0.0-beta.0, =1.0.0, =1.0.0-alpha.0, =2.1.0, =1.0.0, =0.1.1, =0.0.1, =0.1.0, =1.0.10, =4.3.15 and more Source cves: CVE-2025-64526 Source advisory: MEND:CVE-2025-64526...

6.9CVSS5.8AI score0.00492EPSS

SaveExploits0

vulnersOsv•added 2026/05/13 8:02 p.m.•1 views

@piksail/strapi-plugin-publish-coolify (0.0.1), stronges (0.1.1) +1 more potentially affected by CVE-2026-22706 via @strapi/plugin-users-permissions (>=5.11.0, <=5.30.0)

@strapi/plugin-users-permissions NPM version =5.11.0, =5.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on @strapi/plugin-users-permissions and may be impacted: - @piksail/strapi-plugin-publish-coolify 0.0.1 - stronges 0.1.1 - test-lead 0.1.0 Source...

6.5CVSS5.8AI score0.00341EPSS

SaveExploits0

vulnersOsv•added 2026/05/13 8:02 p.m.•20 views

@piksail/strapi-plugin-publish-coolify (0.0.1), cypherscan-strapi (0.1.1) +4 more potentially affected by CVE-2025-64526 via @strapi/plugin-users-permissions (>=5.11.0, <=5.42.1)

@strapi/plugin-users-permissions NPM version =5.11.0, =0.1.0, =0.1.4 - stronges 0.1.1 - test-lead 0.1.0 Source cves: CVE-2025-64526 Source advisory: SNYK:JS-STRAPIPLUGINUSERSPERMISSIONS-16683088...

6.9CVSS5.8AI score0.00492EPSS

SaveExploits0

vulnersOsv•added 2026/05/13 8:02 p.m.•2 views

@piksail/strapi-plugin-publish-coolify (0.0.1), cypherscan-strapi (0.1.1) +4 more potentially affected by CVE-2025-64526 via @strapi/plugin-users-permissions (>=5.11.0, <=5.42.1)

@strapi/plugin-users-permissions NPM version =5.11.0, =0.1.0, =0.1.4 - stronges 0.1.1 - test-lead 0.1.0 Source cves: CVE-2025-64526 Source advisory: GHSA-7MQX-WWH4-F9FW...

6.9CVSS5.8AI score0.00492EPSS

SaveExploits0

vulnersOsv•added 2026/05/13 8:02 p.m.•17 views

@piksail/strapi-plugin-publish-coolify (0.0.1), cypherscan-strapi (0.1.1) +4 more potentially affected by CVE-2025-64526 via @strapi/plugin-users-permissions (>=5.11.0, <=5.42.1)

@strapi/plugin-users-permissions NPM version =5.11.0, =0.1.0, =0.1.4 - stronges 0.1.1 - test-lead 0.1.0 Source cves: CVE-2025-64526 Source advisory: OSV:GHSA-7MQX-WWH4-F9FW...

6.9CVSS5.8AI score0.00492EPSS

SaveExploits0

vulnersOsv•added 2024/06/12 7:39 p.m.•24 views

@code-mancers/strapi-plugin-stellate (>=1.0.0, <=1.4.3), @cowprotocol/cms (0.1.0-rc.5) +17 more potentially affected by CVE-2024-34065 via @strapi/plugin-users-permissions (>=4.0.0-beta.0, <=4.19.0)

@strapi/plugin-users-permissions NPM version =4.0.0-beta.0, =1.0.0, =1.0.0-alpha.0, =2.1.0, =1.0.0, =0.0.1, =0.1.0, =0.1.10 and more Source cves: CVE-2024-34065 Source advisory: OSV:GHSA-WRVH-RCMR-9QFC...

8.1CVSS7.4AI score0.00704EPSS

SaveExploits1

vulnersOsv•added 2024/06/12 7:39 p.m.•3 views

@code-mancers/strapi-plugin-stellate (>=1.0.0, <=1.4.3), @cowprotocol/cms (0.1.0-rc.5) +17 more potentially affected by CVE-2024-34065 via @strapi/plugin-users-permissions (>=4.0.0-beta.0, <=4.19.0)

8.1CVSS7.4AI score0.00704EPSS

SaveExploits1

Mend•added 2024/06/12 2:54 p.m.•11 views

CVE-2024-34065

Strapi is an open-source content management system. By combining two vulnerabilities an "Open Redirect" and "session token sent as URL query parameter" in @strapi/plugin-users-permissions before version 4.24.2, is its possible of an unauthenticated attacker to bypass authentication mechanisms and...

8.1CVSS7.5AI score0.00704EPSS

SaveExploits1References5

vulnersOsv•added 2024/06/12 2:54 p.m.•6 views

@code-mancers/strapi-plugin-stellate (>=1.0.0, <=1.4.3), @cowprotocol/cms (0.1.0-rc.5) +17 more potentially affected by CVE-2024-34065 via @strapi/plugin-users-permissions (>=4.0.0-beta.0, <=4.19.0)

8.1CVSS7.4AI score0.00704EPSS

SaveExploits1

Rapid7 Vulnerability Database (full)•added 2024/06/12 12:00 a.m.•23 views

CVE-2024-34065: Authentication Bypass by Capture-replay

Strapi is an open-source content management system. By combining two vulnerabilities an Open Redirect and session token sent as URL query parameter in @strapi/plugin-users-permissions before version 4.24.2, is its possible of an unauthenticated attacker to bypass authentication mechanisms and...

8.1CVSS7.6AI score0.00704EPSS

SaveExploits1References1

vulnersOsv•added 2023/11/06 6:26 p.m.•2 views

@code-mancers/strapi-plugin-stellate (>=1.0.0, <=1.4.3), @mattie-bundle/mattie-strapi-bundle-example (>=1.0.0-alpha.2, <=1.0.0-alpha.3) +10 more potentially affected by CVE-2023-39345 via @strapi/plugin-users-permissions (>=4.0.2, <=4.11.2)

@strapi/plugin-users-permissions NPM version =4.0.2, =1.0.0, =1.0.0-alpha.2, =2.1.0, =1.0.0, =1.0.2 - easylaser-vn-cms 0.1.0 - sneakmax 0.1.0 - sneakmaxtesttemplate 0.1.0 - sneakmaxtesttemplatev2 0.1.0 - strapi-ent-a 0.1.0 - strapi-fcm 0.1.0 - strapi-voting 0.2.1 - sveltekit-strapi 0.1.0 Source...

7.6CVSS7.2AI score0.00588EPSS

SaveExploits1

vulnersOsv•added 2023/11/03 7:01 p.m.•3 views

7.6CVSS7.2AI score0.00588EPSS

SaveExploits1

vulnersOsv•added 2023/11/03 7:01 p.m.•2 views

7.6CVSS7.2AI score0.00588EPSS

SaveExploits1

vulnersOsv•added 2023/09/15 7:15 p.m.•2 views

@code-mancers/strapi-plugin-stellate (>=1.0.0, <=1.4.3), @mattie-bundle/mattie-strapi-bundle-example (>=1.0.0-alpha.0, <=1.0.0-alpha.3) +10 more potentially affected by CVE-2023-38507 via @strapi/plugin-users-permissions (>=4.0.0-beta.0, <=4.11.2)

@strapi/plugin-users-permissions NPM version =4.0.0-beta.0, =1.0.0, =1.0.0-alpha.0, =2.1.0, =1.0.0, =1.0.2 - easylaser-vn-cms 0.1.0 - sneakmax 0.1.0 - sneakmaxtesttemplate 0.1.0 - sneakmaxtesttemplatev2 0.1.0 - strapi-ent-a 0.1.0 - strapi-fcm 0.1.0 - strapi-voting 0.2.1 - sveltekit-strapi 0.1.0...

9.8CVSS8.2AI score0.00963EPSS

SaveExploits1

vulnersOsv•added 2023/09/13 4:32 p.m.•1 views

9.8CVSS8.2AI score0.00963EPSS

SaveExploits1

vulnersOsv•added 2023/04/19 9:41 p.m.•1 views

@mattie-bundle/mattie-strapi-bundle-example (>=1.0.0-alpha.0, <=1.0.0-alpha.3), @rogwild/strapi-utils (>=2.1.0, <=2.2.0) +6 more potentially affected by CVE-2023-22621 via @strapi/plugin-users-permissions (>=4.0.0-beta.0, <=4.5.1)

@strapi/plugin-users-permissions NPM version =4.0.0-beta.0, =1.0.0-alpha.0, =2.1.0, =1.0.0, =1.0.2 - easylaser-vn-cms 0.1.0 - strapi-ent-a 0.1.0 - strapi-fcm 0.1.0 - strapi-voting 0.2.1 - sveltekit-strapi 0.1.0 Source cves: CVE-2023-22621 Source advisory: GHSA-2H87-4Q2W-V4HF...

10CVSS0.706EPSS

SaveExploits2

vulnersOsv•added 2023/04/19 9:41 p.m.•13 views

10CVSS7.1AI score0.706EPSS

SaveExploits2

vulnersOsv•added 2023/04/19 6:33 p.m.•1 views

@mattie-bundle/mattie-strapi-bundle-example (>=1.0.0-alpha.0, <=1.0.0-alpha.3), @rogwild/strapi-utils (>=2.1.0, <=2.2.0) +6 more potentially affected by CVE-2023-22893 via @strapi/plugin-users-permissions (>=4.0.0-beta.0, <=4.5.1)

8.2CVSS0.04124EPSS

SaveExploits1

vulnersOsv•added 2023/04/19 12:00 a.m.•1 views

10CVSS0.706EPSS

SaveExploits2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by