publify publify/publify vulnerabilities
10 published CVEs name publify publify/publify among the affected products.
- Published CVEs
- 10
- Last 12 months
- 0
- Critical
- 2
- Known exploited
- 0
Critical 2High 4Medium 4Low 0Not scored 0
CVEs per yearBy the year they were published
- 20226
- 20234
Newest CVEs
- CVE-2023-0569
Weak Password Requirements in publify/publify
publify · publify/publify
High8.1 - CVE-2023-0299
Improper Input Validation in publify/publify
publify · publify/publify
High8.4 - CVE-2022-2815
Insecure Storage of Sensitive Information in publify/publify
publify · publify/publify
Medium4.6 - CVE-2022-1812
Integer Overflow or Wraparound in publify/publify
publify · publify/publify
High7.6 - CVE-2022-1811
Unrestricted Upload of File with Dangerous Type in publify/publify
publify · publify/publify
Critical9.1 - CVE-2022-1810
Authorization Bypass Through User-Controlled Key in publify/publify
publify · publify/publify
Critical9.9 - CVE-2022-1553
Leaking password protected articles content due to improper access control in publify/publify
publify · publify/publify
High8.8 - CVE-2022-0578
Code Injection in publify/publify
publify · publify/publify
Medium5.3 - CVE-2022-0574
Improper Access Control in publify/publify
publify · publify/publify
Medium5.3 - CVE-2022-0524
Business Logic Errors in publify/publify
publify · publify/publify
Medium6.5
Most common weaknesses
- CWE-284 Improper access control2
- CWE-863 Incorrect authorization2
- CWE-190 Integer overflow1
- CWE-20 Improper input validation1
- CWE-434 Unrestricted file upload1
- CWE-521 1
- CWE-639 Authorization bypass through a user-controlled key (IDOR)1
- CWE-840 1
- CWE-922 Insecure storage of sensitive information1
- CWE-94 Code injection1