CVE-2022-0578

Code Injection in GitHub repository publify/publify prior to 9.2.8...

EUVD-2022-2964

Malicious code in bioql PyPI...

EUVD-2022-1245

Malicious code in bioql PyPI...

CVE-2022-2815

Insecure Storage of Sensitive Information in GitHub repository publify/publify prior to 9.2.10...

CVE-2014-3211

Publify before 8.0.1 is vulnerable to a Denial of Service attack...

Integer overflow

Integer Overflow or Wraparound in GitHub repository publify/publify prior to 9.2.10...

CVE-2022-2815 Insecure Storage of Sensitive Information in publify/publify

Insecure Storage of Sensitive Information in GitHub repository publify/publify prior to 9.2.10...

CVE-2021-25975

In publify, versions v8.0 to v9.2.4 are vulnerable to stored XSS as a result of an unrestricted file upload. This issue allows a user with “publisher” role to inject malicious JavaScript via the uploaded html file...