civicrm vulnerabilities (Ubuntu)
15 vulnerabilities.
-
civicrmUbuntu CiviCRM CiviCRM - SQL Injection 8.8 High -
civicrmUbuntu A Stored Cross Site Scripting vulnerability exists in CiviCRM before v6.7 in the Accounting... 6.1 Medium -
civicrmUbuntu jquery-validation vulnerable to Cross-site Scripting 5.3 Medium -
civicrmUbuntu Stored Cross Site Scripting (XSS) vulnerability in the add contact function CiviCRM 5.59.alpha1,... 5.4 Medium -
civicrmUbuntu Cross site scripting vulnerability in Javascript escaping in smarty/smarty 7.1 High -
civicrmUbuntu Snappy vulnerable to PHAR deserialization, allowing remote code execution 9.8 Critical -
civicrmUbuntu External Control of File Name or Path in dompdf/dompdf 5.3 Medium -
civicrmUbuntu jquery-validation ReDoS in url2 due to incomplete fix of CVE-2021-43306 7.5 High -
civicrmUbuntu Change in port should be considered a change in origin in Guzzle 7.7 High -
civicrmUbuntu CURLOPT_HTTPAUTH option not cleared on change of origin in Guzzle 7.7 High -
civicrmUbuntu Exponential ReDoS in jquery-validation 5.9 Medium -
civicrmUbuntu In CiviCRM before 5.28.1 and CiviCRM ESR before 5.27.5 ESR, the CKEditor configuration form... 4.3 Medium -
civicrmUbuntu In CiviCRM before 5.21.3 and 5.22.x through 5.24.x before 5.24.3, users may be able to upload and... 8.8 High -
civicrmUbuntu Regular expression denial of service in jquery-validation 5.3 Medium -
civicrmUbuntu PEAR HTML_QuickForm version 3.2.14 contains an eval injection (CWE-95) vulnerability in... 9.8 Critical