sfu kayıtları
sfu üreticisine ait 18 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')11
- CWE-352 Cross-Site Request Forgery (CSRF)5
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
18 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2019-19909İstismar yok | An issue was discovered in Public Knowledge Project (PKP) pkp-lib before 3.1.2-2, as used in Open Journal Systems (OJS) before 3.1.2-2.sfu · open journal system · CWE-94 | Yüksek8,8 | — | %1,4 | 19 Ara 2019 |
35İzleyin | CVE-2023-5893İstismar yok | Cross-Site Request Forgery (CSRF) in pkp/pkp-libsfu · pkp web application library · CWE-352 | Yüksek8,8 | — | %0,3 | 31 Eki 2023 |
35İzleyin | CVE-2023-5626İstismar yok | Cross-Site Request Forgery (CSRF) in pkp/ojssfu · open journal system · CWE-352 | Yüksek8,8 | — | %0,3 | 17 Eki 2023 |
35İzleyin | CVE-2023-5897İstismar yok | Cross-Site Request Forgery (CSRF) in pkp/customLocalesfu · customlocale · CWE-352 | Yüksek8,8 | — | %0,2 | 31 Eki 2023 |
25İzleyin | CVE-2018-12229İstismar yok | Cross-site scripting (XSS) vulnerability in Public Knowledge Project (PKP) Open Journal System (OJS) 3.0.0 to 3.1.1-1 allows remote attackersfu · open journal system · CWE-79 | Orta6,1 | — | %1,8 | 12 Haz 2018 |
24İzleyin | CVE-2024-25436İstismar yok | A cross-site scripting (XSS) vulnerability in the Production module of Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTMsfu · open journal systems · CWE-79 | Orta6,1 | — | %0,4 | 1 Mar 2024 |
21İzleyin | CVE-2023-47271İstismar yok | PKP-WAL (aka PKP Web Application Library or pkp-lib) before 3.3.0-16, as used in Open Journal Systems (OJS) and other products, does not versfu · pkp web application library | Orta5,3 | — | %0,6 | 5 Kas 2023 |
21İzleyin | CVE-2023-5904İstismar yok | Cross-site Scripting (XSS) - Stored in pkp/pkp-libsfu · pkp web application library · CWE-79 | Orta5,4 | — | %0,4 | 7 Kas 2023 |
21İzleyin | CVE-2023-5903İstismar yok | Cross-site Scripting (XSS) - Stored in pkp/pkp-libsfu · pkp web application library · CWE-79 | Orta5,4 | — | %0,4 | 7 Kas 2023 |
21İzleyin | CVE-2023-5895İstismar yok | Cross-site Scripting (XSS) - DOM in pkp/pkp-libsfu · pkp web application library · CWE-79 | Orta5,4 | — | %0,4 | 31 Eki 2023 |
21İzleyin | CVE-2023-5892İstismar yok | Cross-site Scripting (XSS) - Stored in pkp/pkp-libsfu · pkp web application library · CWE-79 | Orta5,4 | — | %0,4 | 31 Eki 2023 |
21İzleyin | CVE-2023-5891İstismar yok | Cross-site Scripting (XSS) - Reflected in pkp/pkp-libsfu · pkp web application library · CWE-79 | Orta5,4 | — | %0,4 | 31 Eki 2023 |
21İzleyin | CVE-2023-5890İstismar yok | Cross-site Scripting (XSS) - Stored in pkp/pkp-libsfu · pkp web application library · CWE-79 | Orta5,4 | — | %0,4 | 31 Eki 2023 |
21İzleyin | CVE-2023-5894İstismar yok | Cross-site Scripting (XSS) - Stored in pkp/ojssfu · open journal systems · CWE-79 | Orta5,4 | — | %0,4 | 31 Eki 2023 |
21İzleyin | CVE-2023-5896İstismar yok | Cross-site Scripting (XSS) - Stored in pkp/pkp-libsfu · pkp web application library · CWE-79 | Orta5,4 | — | %0,3 | 31 Eki 2023 |
19İzleyin | CVE-2023-5901İstismar yok | Cross-site Scripting in pkp/pkp-libsfu · pkp web application library · CWE-79 | Orta4,8 | — | %0,5 | 7 Kas 2023 |
17İzleyin | CVE-2023-5902İstismar yok | Cross-Site Request Forgery (CSRF) in pkp/pkp-libsfu · pkp web application library · CWE-352 | Orta4,3 | — | %0,3 | 7 Kas 2023 |
17İzleyin | CVE-2023-5900İstismar yok | Cross-Site Request Forgery in pkp/pkp-libsfu · pkp web application library · CWE-352 | Orta4,3 | — | %0,2 | 7 Kas 2023 |
- CVE-2019-1990935İzleyin
An issue was discovered in Public Knowledge Project (PKP) pkp-lib before 3.1.2-2, as used in Open Journal Systems (OJS) before 3.1.2-2.
YüksekCVSS 8,8İstismar yokEPSS %1sfu · open journal system19 Ara 2019
- CVE-2023-589335İzleyin
Cross-Site Request Forgery (CSRF) in pkp/pkp-lib
YüksekCVSS 8,8İstismar yokEPSS %0sfu · pkp web application library31 Eki 2023
- CVE-2023-562635İzleyin
Cross-Site Request Forgery (CSRF) in pkp/ojs
YüksekCVSS 8,8İstismar yokEPSS %0sfu · open journal system17 Eki 2023
- CVE-2023-589735İzleyin
Cross-Site Request Forgery (CSRF) in pkp/customLocale
YüksekCVSS 8,8İstismar yokEPSS %0sfu · customlocale31 Eki 2023
- CVE-2018-1222925İzleyin
Cross-site scripting (XSS) vulnerability in Public Knowledge Project (PKP) Open Journal System (OJS) 3.0.0 to 3.1.1-1 allows remote attacker
OrtaCVSS 6,1İstismar yokEPSS %2sfu · open journal system12 Haz 2018
- CVE-2024-2543624İzleyin
A cross-site scripting (XSS) vulnerability in the Production module of Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTM
OrtaCVSS 6,1İstismar yokEPSS %0sfu · open journal systems1 Mar 2024
- CVE-2023-4727121İzleyin
PKP-WAL (aka PKP Web Application Library or pkp-lib) before 3.3.0-16, as used in Open Journal Systems (OJS) and other products, does not ver
OrtaCVSS 5,3İstismar yokEPSS %1sfu · pkp web application library5 Kas 2023
- CVE-2023-590421İzleyin
Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
OrtaCVSS 5,4İstismar yokEPSS %0sfu · pkp web application library7 Kas 2023
- CVE-2023-590321İzleyin
Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
OrtaCVSS 5,4İstismar yokEPSS %0sfu · pkp web application library7 Kas 2023
- CVE-2023-589521İzleyin
Cross-site Scripting (XSS) - DOM in pkp/pkp-lib
OrtaCVSS 5,4İstismar yokEPSS %0sfu · pkp web application library31 Eki 2023
- CVE-2023-589221İzleyin
Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
OrtaCVSS 5,4İstismar yokEPSS %0sfu · pkp web application library31 Eki 2023
- CVE-2023-589121İzleyin
Cross-site Scripting (XSS) - Reflected in pkp/pkp-lib
OrtaCVSS 5,4İstismar yokEPSS %0sfu · pkp web application library31 Eki 2023
- CVE-2023-589021İzleyin
Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
OrtaCVSS 5,4İstismar yokEPSS %0sfu · pkp web application library31 Eki 2023
- CVE-2023-589421İzleyin
Cross-site Scripting (XSS) - Stored in pkp/ojs
OrtaCVSS 5,4İstismar yokEPSS %0sfu · open journal systems31 Eki 2023
- CVE-2023-589621İzleyin
Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
OrtaCVSS 5,4İstismar yokEPSS %0sfu · pkp web application library31 Eki 2023
- CVE-2023-590119İzleyin
Cross-site Scripting in pkp/pkp-lib
OrtaCVSS 4,8İstismar yokEPSS %0sfu · pkp web application library7 Kas 2023
- CVE-2023-590217İzleyin
Cross-Site Request Forgery (CSRF) in pkp/pkp-lib
OrtaCVSS 4,3İstismar yokEPSS %0sfu · pkp web application library7 Kas 2023
- CVE-2023-590017İzleyin
Cross-Site Request Forgery in pkp/pkp-lib
OrtaCVSS 4,3İstismar yokEPSS %0sfu · pkp web application library7 Kas 2023