publify vulnerabilities
11 published CVEs name publify among the affected products.
- Published CVEs
- 11
- Last 12 months
- 0
- Critical
- 2
- Known exploited
- 0
Critical 2High 4Medium 4Low 1Not scored 0
CVEs per yearBy the year they were published
- 20226
- 20234
- 20251
Newest CVEs
- CVE-2024-39311
Publify Vulnerable To Cross-Site Scripting (XSS) Via Redirects Requiring User Interaction
publify · publify
Low1.8 - CVE-2023-0569
Weak Password Requirements in publify/publify
publify · publify/publify
High8.1 - CVE-2023-0299
Improper Input Validation in publify/publify
publify · publify/publify
High8.4 - CVE-2022-2815
Insecure Storage of Sensitive Information in publify/publify
publify · publify/publify
Medium4.6 - CVE-2022-1812
Integer Overflow or Wraparound in publify/publify
publify · publify/publify
High7.6 - CVE-2022-1811
Unrestricted Upload of File with Dangerous Type in publify/publify
publify · publify/publify
Critical9.1 - CVE-2022-1810
Authorization Bypass Through User-Controlled Key in publify/publify
publify · publify/publify
Critical9.9 - CVE-2022-1553
Leaking password protected articles content due to improper access control in publify/publify
publify · publify/publify
High8.8 - CVE-2022-0578
Code Injection in publify/publify
publify · publify/publify
Medium5.3 - CVE-2022-0574
Improper Access Control in publify/publify
publify · publify/publify
Medium5.3
Products with the most CVEs
Most common weaknesses
- CWE-284 Improper access control2
- CWE-863 Incorrect authorization2
- CWE-190 Integer overflow1
- CWE-20 Improper input validation1
- CWE-434 Unrestricted file upload1
- CWE-521 1
- CWE-639 Authorization bypass through a user-controlled key (IDOR)1
- CWE-79 Cross-site scripting (XSS)1
- CWE-840 1
- CWE-922 Insecure storage of sensitive information1