omeka records
11 published records for vendor omeka.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 9.1%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-612 Improper Authorization of Index Containing Sensitive Information1
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
- CWE-918 Server-Side Request Forgery (SSRF)1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
11 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2023-4159No exploit | Unrestricted Upload of File with Dangerous Type in omeka/omeka-someka · omeka s · CWE-434 | High8.8 | — | 0.9% | Aug 4, 2023 |
28Monitor | CVE-2014-5100Proof of concept | Multiple cross-site request forgery (CSRF) vulnerabilities in Omeka before 2.2.1 allow remote attackers to hijack the authentication of admiomeka · omeka · CWE-352 | Medium6.8 | — | 2.4% | Jul 25, 2014 |
26Monitor | CVE-2023-4560No exploit | Improper Authorization of Index Containing Sensitive Information in omeka/omeka-someka · omeka s · CWE-612 | Medium6.5 | — | 0.7% | Aug 27, 2023 |
24Monitor | CVE-2021-26799No exploit | Cross Site Scripting (XSS) vulnerability in admin/files/edit in Omeka Classic <=2.7 allows remote attackers to inject arbitrary web script oomeka · omeka · CWE-79 | Medium6.1 | — | 1.0% | Jul 23, 2021 |
24Monitor | CVE-2018-13423No exploit | admin/themes/default/items/tag-form.php in Omeka before 2.6.1 allows XSS by adding or editing a tag.omeka · omeka · CWE-79 | Medium6.1 | — | 0.8% | Jul 7, 2018 |
21Monitor | CVE-2023-4158No exploit | Cross-site Scripting (XSS) - Stored in omeka/omeka-someka · omeka s · CWE-79 | Medium5.4 | — | 0.4% | Aug 4, 2023 |
19Monitor | CVE-2023-3981No exploit | Server-Side Request Forgery (SSRF) in omeka/omeka-someka · omeka · CWE-918 | Medium4.9 | — | 0.6% | Jul 27, 2023 |
19Monitor | CVE-2023-4561No exploit | Cross-site Scripting (XSS) - Stored in omeka/omeka-someka · omeka s · CWE-79 | Medium4.8 | — | 0.5% | Aug 27, 2023 |
19Monitor | CVE-2023-4157No exploit | Improper Neutralization of Special Elements in Output Used by a Downstream Component in omeka/omeka-someka · omeka s · CWE-74 | Medium4.8 | — | 0.5% | Aug 4, 2023 |
19Monitor | CVE-2023-3982No exploit | Cross-site Scripting (XSS) - Stored in omeka/omeka-someka · omeka · CWE-79 | Medium4.8 | — | 0.4% | Jul 27, 2023 |
19Monitor | CVE-2023-3980No exploit | Cross-site Scripting (XSS) - Stored in omeka/omeka-someka · omeka · CWE-79 | Medium4.8 | — | 0.4% | Jul 27, 2023 |
- CVE-2023-415935Monitor
Unrestricted Upload of File with Dangerous Type in omeka/omeka-s
HighCVSS 8.8No exploitEPSS 0%omeka · omeka sAug 4, 2023
- CVE-2014-510028Monitor
Multiple cross-site request forgery (CSRF) vulnerabilities in Omeka before 2.2.1 allow remote attackers to hijack the authentication of admi
MediumCVSS 6.8Proof of conceptEPSS 2%omeka · omekaJul 25, 2014
- CVE-2023-456026Monitor
Improper Authorization of Index Containing Sensitive Information in omeka/omeka-s
MediumCVSS 6.5No exploitEPSS 0%omeka · omeka sAug 27, 2023
- CVE-2021-2679924Monitor
Cross Site Scripting (XSS) vulnerability in admin/files/edit in Omeka Classic <=2.7 allows remote attackers to inject arbitrary web script o
MediumCVSS 6.1No exploitEPSS 1%omeka · omekaJul 23, 2021
- CVE-2018-1342324Monitor
admin/themes/default/items/tag-form.php in Omeka before 2.6.1 allows XSS by adding or editing a tag.
MediumCVSS 6.1No exploitEPSS 0%omeka · omekaJul 7, 2018
- CVE-2023-415821Monitor
Cross-site Scripting (XSS) - Stored in omeka/omeka-s
MediumCVSS 5.4No exploitEPSS 0%omeka · omeka sAug 4, 2023
- CVE-2023-398119Monitor
Server-Side Request Forgery (SSRF) in omeka/omeka-s
MediumCVSS 4.9No exploitEPSS 0%omeka · omekaJul 27, 2023
- CVE-2023-456119Monitor
Cross-site Scripting (XSS) - Stored in omeka/omeka-s
MediumCVSS 4.8No exploitEPSS 0%omeka · omeka sAug 27, 2023
- CVE-2023-415719Monitor
Improper Neutralization of Special Elements in Output Used by a Downstream Component in omeka/omeka-s
MediumCVSS 4.8No exploitEPSS 0%omeka · omeka sAug 4, 2023
- CVE-2023-398219Monitor
Cross-site Scripting (XSS) - Stored in omeka/omeka-s
MediumCVSS 4.8No exploitEPSS 0%omeka · omekaJul 27, 2023
- CVE-2023-398019Monitor
Cross-site Scripting (XSS) - Stored in omeka/omeka-s
MediumCVSS 4.8No exploitEPSS 0%omeka · omekaJul 27, 2023