| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| Privilege Chaining in GitHub repository hestiacp/hestiacp prior to 1.8.9. | 7.8 |
Haute |
||
| Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.7.8. | 6.1 |
Moyen |
||
| Improper Control of Generation of Code ('Code Injection') in GitHub repository hestiacp/hestiacp prior to 1.6.6. | 8.8 |
Haute |
||
| Incorrect Privilege Assignment in GitHub repository hestiacp/hestiacp prior to 1.6.6. | 7.2 |
Haute |
||
| OS Command Injection in GitHub repository hestiacp/hestiacp prior to 1.6.5. | 8.8 |
Haute |
||
| Command Injection Vulnerability in GitHub repository hestiacp/hestiacp prior to 1.5.12. An authenticated remote attacker with low privileges can execute arbitrary code under root context. | 9.9 |
Critique |
||
| Reflected Cross-site Scripting (XSS) Vulnerability in GitHub repository hestiacp/hestiacp prior to 1.5.11. | 6.1 |
Moyen |
||
| Cross-site Scripting (XSS) - Generic in GitHub repository hestiacp/hestiacp prior to 1.5.9. | 6.1 |
Moyen |
||
| Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.5.10. | 6.1 |
Moyen |
||
| Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.5.9. | 6.1 |
Moyen |
||
| hestiacp is vulnerable to Use of Wrong Operator in String Comparison | 9.8 |
Critique |