craws records

16 published records for vendor craws.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

16 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2025-51536No exploit	Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a hardcoded Administrator password.craws · openatlas · CWE-798 Pre-auth Hard-coded credentials	Critical9.8	—	0.5%	Aug 4, 2025
36Monitor	CVE-2025-51535No exploit	Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a SQL injection vulnerability.craws · openatlas · CWE-1392 SQL injection Hard-coded credentials	Critical9.1	—	0.4%	Aug 4, 2025
32Monitor	CVE-2025-60915No exploit	An issue in the size query parameter (/views/file.py) of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to execcraws · openatlas · CWE-22 Path traversal	High8.1	—	0.4%	Nov 24, 2025
32Monitor	CVE-2025-51534No exploit	A cross-site scripting (XSS) vulnerability in Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 allows attackers to execute arbitrarycraws · openatlas · CWE-79 RCE XSS	High8.1	—	0.4%	Aug 4, 2025
21Monitor	CVE-2025-56423No exploit	An issue in Austrian Academy of Sciences (AW) Austrian Archaeological Institute OpenAtlas v.8.12.0 allows a remote attacker to obtain sensitcraws · openatlas · CWE-203 Pre-auth	Medium5.3	—	0.3%	Nov 24, 2025
21Monitor	CVE-2025-60916No exploit	A reflected cross-site scripting (XSS) vulnerability in the /overview/network/ endpoint of Austrian Archaeological Institute Openatlas beforcraws · openatlas · CWE-79 RCE XSS	Medium5.4	—	0.2%	Nov 24, 2025
20Monitor	CVE-2025-40708No exploit	Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CHcraws · openatlas · CWE-79 XSS	Medium5.1	—	0.2%	Aug 29, 2025
20Monitor	CVE-2025-40709No exploit	Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CHcraws · openatlas · CWE-79 XSS	Medium5.1	—	0.2%	Aug 29, 2025
20Monitor	CVE-2025-40702No exploit	Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CHcraws · openatlas · CWE-79 XSS	Medium5.1	—	0.2%	Aug 29, 2025
20Monitor	CVE-2025-40703No exploit	Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CHcraws · openatlas · CWE-79 XSS	Medium5.1	—	0.2%	Aug 29, 2025
20Monitor	CVE-2025-40704No exploit	Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CHcraws · openatlas · CWE-79 XSS	Medium5.1	—	0.2%	Aug 29, 2025
20Monitor	CVE-2025-40705No exploit	Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CHcraws · openatlas · CWE-79 XSS	Medium5.1	—	0.2%	Aug 29, 2025
20Monitor	CVE-2025-40706No exploit	Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CHcraws · openatlas · CWE-79 XSS	Medium5.1	—	0.2%	Aug 29, 2025
20Monitor	CVE-2025-40707No exploit	Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CHcraws · openatlas · CWE-79 XSS	Medium5.1	—	0.2%	Aug 29, 2025
18Monitor	CVE-2025-60917No exploit	A reflected cross-site scripting (XSS) vulnerability in the /overview/network/ endpoint of Austrian Archaeological Institute Openatlas beforcraws · openatlas · CWE-79 RCE XSS	Medium4.6	—	0.2%	Nov 24, 2025
18Monitor	CVE-2025-60914No exploit	Incorrect access control in Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to access sensitive information via craws · openatlas · CWE-79 XSS	Medium4.6	—	0.2%	Nov 24, 2025

CVE-2025-51536
39Monitor
Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a hardcoded Administrator password.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Hard-coded credentials
craws · openatlasAug 4, 2025
CVE-2025-51535
36Monitor
Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a SQL injection vulnerability.
CriticalCVSS 9.1No exploitEPSS 0%
- SQL injection
- Hard-coded credentials
craws · openatlasAug 4, 2025
CVE-2025-60915
32Monitor
An issue in the size query parameter (/views/file.py) of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to exec
HighCVSS 8.1No exploitEPSS 0%
- Path traversal
craws · openatlasNov 24, 2025
CVE-2025-51534
32Monitor
A cross-site scripting (XSS) vulnerability in Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 allows attackers to execute arbitrary
HighCVSS 8.1No exploitEPSS 0%
- RCE
- XSS
craws · openatlasAug 4, 2025
CVE-2025-56423
21Monitor
An issue in Austrian Academy of Sciences (AW) Austrian Archaeological Institute OpenAtlas v.8.12.0 allows a remote attacker to obtain sensit
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
craws · openatlasNov 24, 2025
CVE-2025-60916
21Monitor
A reflected cross-site scripting (XSS) vulnerability in the /overview/network/ endpoint of Austrian Archaeological Institute Openatlas befor
MediumCVSS 5.4No exploitEPSS 0%
- RCE
- XSS
craws · openatlasNov 24, 2025
CVE-2025-40708
20Monitor
Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CH
MediumCVSS 5.1No exploitEPSS 0%
- XSS
craws · openatlasAug 29, 2025
CVE-2025-40709
20Monitor
Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CH
MediumCVSS 5.1No exploitEPSS 0%
- XSS
craws · openatlasAug 29, 2025
CVE-2025-40702
20Monitor
Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CH
MediumCVSS 5.1No exploitEPSS 0%
- XSS
craws · openatlasAug 29, 2025
CVE-2025-40703
20Monitor
Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CH
MediumCVSS 5.1No exploitEPSS 0%
- XSS
craws · openatlasAug 29, 2025
CVE-2025-40704
20Monitor
Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CH
MediumCVSS 5.1No exploitEPSS 0%
- XSS
craws · openatlasAug 29, 2025
CVE-2025-40705
20Monitor
Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CH
MediumCVSS 5.1No exploitEPSS 0%
- XSS
craws · openatlasAug 29, 2025
CVE-2025-40706
20Monitor
Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CH
MediumCVSS 5.1No exploitEPSS 0%
- XSS
craws · openatlasAug 29, 2025
CVE-2025-40707
20Monitor
Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CH
MediumCVSS 5.1No exploitEPSS 0%
- XSS
craws · openatlasAug 29, 2025
CVE-2025-60917
18Monitor
A reflected cross-site scripting (XSS) vulnerability in the /overview/network/ endpoint of Austrian Archaeological Institute Openatlas befor
MediumCVSS 4.6No exploitEPSS 0%
- RCE
- XSS
craws · openatlasNov 24, 2025
CVE-2025-60914
18Monitor
Incorrect access control in Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to access sensitive information via
MediumCVSS 4.6No exploitEPSS 0%
- XSS
craws · openatlasNov 24, 2025