CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

278 matches found

Veracode•added 2023/11/21 5:45 a.m.•32 views

Improper Authorization

strapi-plugin-protected-populate is vulnerable to Improper Authorization. The vulnerability is due to the protectPopulate function of protect-route.js, which allows a users to populate fields they don't have access, resulting in field-level security bypass...

5.3CVSS7AI score0.00601EPSS

SaveExploits0References3Affected Software1

vulnersOsv•added 2023/11/06 6:26 p.m.•2 views

@code-mancers/strapi-plugin-stellate (>=1.0.0, <=1.4.3), @mattie-bundle/mattie-strapi-bundle-example (>=1.0.0-alpha.2, <=1.0.0-alpha.3) +10 more potentially affected by CVE-2023-39345 via @strapi/plugin-users-permissions (>=4.0.2, <=4.11.2)

@strapi/plugin-users-permissions NPM version =4.0.2, =1.0.0, =1.0.0-alpha.2, =2.1.0, =1.0.0, =1.0.2 - easylaser-vn-cms 0.1.0 - sneakmax 0.1.0 - sneakmaxtesttemplate 0.1.0 - sneakmaxtesttemplatev2 0.1.0 - strapi-ent-a 0.1.0 - strapi-fcm 0.1.0 - strapi-voting 0.2.1 - sveltekit-strapi 0.1.0 Source...

7.6CVSS0.00588EPSS

SaveExploits1

vulnersOsv•added 2023/11/03 7:01 p.m.•2 views

7.6CVSS0.00588EPSS

SaveExploits1

vulnersOsv•added 2023/11/03 7:01 p.m.•2 views

7.6CVSS0.00588EPSS

SaveExploits1

vulnersOsv•added 2023/09/15 7:15 p.m.•1 views

@code-mancers/strapi-plugin-stellate (>=1.0.0, <=1.4.3), @mattie-bundle/mattie-strapi-bundle-example (>=1.0.0-alpha.0, <=1.0.0-alpha.3) +10 more potentially affected by CVE-2023-38507 via @strapi/plugin-users-permissions (>=4.0.0-beta.0, <=4.11.2)

@strapi/plugin-users-permissions NPM version =4.0.0-beta.0, =1.0.0, =1.0.0-alpha.0, =2.1.0, =1.0.0, =1.0.2 - easylaser-vn-cms 0.1.0 - sneakmax 0.1.0 - sneakmaxtesttemplate 0.1.0 - sneakmaxtesttemplatev2 0.1.0 - strapi-ent-a 0.1.0 - strapi-fcm 0.1.0 - strapi-voting 0.2.1 - sveltekit-strapi 0.1.0...

9.8CVSS0.00963EPSS

SaveExploits1

vulnersOsv•added 2023/09/15 6:57 p.m.•3 views

@antgineering-studio/strapi (4.5.5), @beardeddudes/strapi-types (0.1.0) +52 more potentially affected by CVE-2023-37263 via @strapi/plugin-content-manager (>=0.0.0-a3d182e0454ccff2702450b31621cd5026b389ca, <=4.12.0)

@strapi/plugin-content-manager NPM version =0.0.0-a3d182e0454ccff2702450b31621cd5026b389ca, =1.0.0, =1.3.0, =1.3.4, =1.2.1, =4.2.0, =4.2.2, =4.9.2, =4.9.2, =1.0.5, =2.0.13 and more Source cves: CVE-2023-37263 Source advisory: MEND:CVE-2023-37263...

6.8CVSS0.00635EPSS

SaveExploits1

vulnersOsv•added 2023/09/15 6:54 p.m.•0 views

@antgineering-studio/strapi (4.5.5), @beardeddudes/strapi-types (0.1.0) +49 more potentially affected by CVE-2023-36472 via @strapi/plugin-content-manager (>=0.0.0-a3d182e0454ccff2702450b31621cd5026b389ca, <=4.11.6)

5.8CVSS0.00672EPSS

SaveExploits1

vulnersOsv•added 2023/09/13 4:32 p.m.•1 views

9.8CVSS0.00963EPSS

SaveExploits1

vulnersOsv•added 2023/09/13 4:31 p.m.•1 views

@antgineering-studio/strapi (4.5.5), @beardeddudes/strapi-types (0.1.0) +51 more potentially affected by CVE-2023-37263 via @strapi/plugin-content-manager (>=4.0.0-beta.0, <=4.12.0)

@strapi/plugin-content-manager NPM version =4.0.0-beta.0, =1.0.0, =1.3.0, =1.3.4, =1.2.1, =4.2.0, =4.2.2, =4.9.2, =4.9.2, =1.0.5, =2.0.13 and more Source cves: CVE-2023-37263 Source advisory: GHSA-M284-85MF-CGRC...

6.8CVSS0.00635EPSS

SaveExploits1

vulnersOsv•added 2023/09/13 4:31 p.m.•2 views

@antgineering-studio/strapi (4.5.5), @beardeddudes/strapi-types (0.1.0) +51 more potentially affected by CVE-2023-37263 via @strapi/plugin-content-manager (>=4.0.0-beta.0, <=4.12.0)

6.8CVSS0.00635EPSS

SaveExploits1

vulnersOsv•added 2023/09/13 4:31 p.m.•2 views

@antgineering-studio/strapi (4.5.5), @beardeddudes/strapi-types (0.1.0) +48 more potentially affected by CVE-2023-36472 via @strapi/plugin-content-manager (>=4.0.0-beta.0, <=4.11.6)

5.8CVSS0.00672EPSS

SaveExploits1

vulnersOsv•added 2023/09/13 4:31 p.m.•1 views

@antgineering-studio/strapi (4.5.5), @beardeddudes/strapi-types (0.1.0) +48 more potentially affected by CVE-2023-36472 via @strapi/plugin-content-manager (>=4.0.0-beta.0, <=4.11.6)

5.8CVSS0.00672EPSS

SaveExploits1

vulnersOsv•added 2023/04/19 9:41 p.m.•0 views

@mattie-bundle/mattie-strapi-bundle-example (>=1.0.0-alpha.0, <=1.0.0-alpha.3), @rogwild/strapi-utils (>=2.1.0, <=2.2.0) +6 more potentially affected by CVE-2023-22621 via @strapi/plugin-users-permissions (>=4.0.0-beta.0, <=4.5.1)

@strapi/plugin-users-permissions NPM version =4.0.0-beta.0, =1.0.0-alpha.0, =2.1.0, =1.0.0, =1.0.2 - easylaser-vn-cms 0.1.0 - strapi-ent-a 0.1.0 - strapi-fcm 0.1.0 - strapi-voting 0.2.1 - sveltekit-strapi 0.1.0 Source cves: CVE-2023-22621 Source advisory: GHSA-2H87-4Q2W-V4HF...

10CVSS0.706EPSS

SaveExploits2

vulnersOsv•added 2023/04/19 9:41 p.m.•12 views

10CVSS7.1AI score0.706EPSS

SaveExploits2

vulnersOsv•added 2023/04/19 9:41 p.m.•2 views

@antgineering-studio/strapi (4.5.5), @coolcoffee/strapi (>=4.2.0, <=4.2.1) +19 more potentially affected by CVE-2023-22621 via @strapi/plugin-email (>=4.0.0-beta.0, <=4.5.5)

@strapi/plugin-email NPM version =4.0.0-beta.0, =4.2.0, =4.2.2, =1.0.1, =0.1.1, =1.0.0-alpha.0, =3.1.2, =1.0.0, =4.0.0-beta.0, =4.2.3-a, =4.3.65 - easylaser-vn-cms 0.1.0 - strapi-ent-a 0.1.0 and more Source cves: CVE-2023-22621 Source advisory: OSV:GHSA-2H87-4Q2W-V4HF...

10CVSS0.706EPSS

SaveExploits2

vulnersOsv•added 2023/04/19 9:41 p.m.•2 views

@antgineering-studio/strapi (4.5.5), @coolcoffee/strapi (>=4.2.0, <=4.2.1) +19 more potentially affected by CVE-2023-22621 via @strapi/plugin-email (>=4.0.0-beta.0, <=4.5.5)

10CVSS0.706EPSS

SaveExploits2

vulnersOsv•added 2023/04/19 6:33 p.m.•0 views

@mattie-bundle/mattie-strapi-bundle-example (>=1.0.0-alpha.0, <=1.0.0-alpha.3), @rogwild/strapi-utils (>=2.1.0, <=2.2.0) +6 more potentially affected by CVE-2023-22893 via @strapi/plugin-users-permissions (>=4.0.0-beta.0, <=4.5.1)

8.2CVSS0.04124EPSS

SaveExploits1

vulnersOsv•added 2023/04/19 12:00 a.m.•3 views

@mattie-bundle/mattie-strapi-bundle-example (>=1.0.0-alpha.0, <=1.0.0-alpha.3), @rogwild/strapi-utils (>=2.1.0, <=2.2.0) +6 more potentially affected by CVE-2023-22893 via @strapi/plugin-users-permissions (>=4.0.0-beta.0, <=4.5.1)

8.2CVSS0.04124EPSS

SaveExploits1

vulnersOsv•added 2023/04/19 12:00 a.m.•1 views

@antgineering-studio/strapi (4.5.5), @coolcoffee/strapi (>=4.2.0, <=4.2.1) +22 more potentially affected by CVE-2023-22621 via @strapi/plugin-email (>=0.0.0-a3d182e0454ccff2702450b31621cd5026b389ca, <=4.5.5)

@strapi/plugin-email NPM version =0.0.0-a3d182e0454ccff2702450b31621cd5026b389ca, =4.2.0, =4.2.2, =1.0.1, =0.1.1, =1.0.0-alpha.0, =3.1.2, =1.0.0, =0.0.0-a3ff110fc401ef4fbd6cd90780bf87a83a2cb04b, =0.0.0-a3ff110fc401ef4fbd6cd90780bf87a83a2cb04b, =0.0.0-a9fe3a0191870500b7f56ff7dd30fdda494e666a,...

10CVSS0.706EPSS

SaveExploits2

vulnersOsv•added 2023/04/19 12:00 a.m.•1 views

10CVSS0.706EPSS

SaveExploits2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by