İçeriğe atla
Noroxi

Koha kayıtları

koha üreticisine ait 24 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
3
Düzeltme kaydı olan
%8,3
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 20
  4. 23
  5. 24
  6. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

24 kayıt
  • CVE-2015-4632
    46Planlayın

    Multiple directory traversal vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before

    YüksekCVSS 7,5Kavram kanıtıEPSS %52

    koha · koha18 Eki 2018

  • CVE-2015-4633
    41Planlayın

    Multiple SQL injection vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1

    KritikCVSS 9,8Kavram kanıtıEPSS %6

    koha · koha18 Eki 2018

  • CVE-2014-1924
    40Planlayın

    The MARC framework import/export function (admin/import_export_framework.pl) in Koha before 3.8.23, 3.10.x before 3.10.13, 3.12.x before 3.1

    KritikCVSS 9,8İstismar yokEPSS %2

    koha · koha24 Oca 2020

  • CVE-2014-1925
    40Planlayın

    SQL injection vulnerability in the MARC framework import/export function (admin/import_export_framework.pl) in Koha before 3.8.23, 3.10.x be

    KritikCVSS 9,8İstismar yokEPSS %2

    koha · koha24 Oca 2020

  • CVE-2024-28740
    38İzleyin

    Cross Site Scripting vulnerability in Koha ILS 23.05 and before allows a remote attacker to execute arbitrary code via the additonal-content

    KritikCVSS 9,6İstismar yokEPSS %1

    koha · koha6 Ağu 2024

  • CVE-2015-4639
    35İzleyin

    Cross-site scripting (XSS) vulnerability in opac-addbybiblionumber.pl in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, and 3.20.x befor

    YüksekCVSS 8,8İstismar yokEPSS %1

    koha · koha21 Tem 2017

  • CVE-2018-1000669
    35İzleyin

    KOHA Library System version 16.11.x (up until 16.11.13) and 17.05.x (up until 17.05.05) contains a Cross Site Request Forgery (CSRF) vulnera

    YüksekCVSS 8,8İstismar yokEPSS %0

    koha · koha6 Eyl 2018

  • CVE-2024-28739
    34İzleyin

    An issue in Koha ILS 23.05 and before allows a remote attacker to execute arbitrary code via a crafted script to the format parameter.

    YüksekCVSS 7,2İstismar yokEPSS %19

    koha · koha6 Ağu 2024

  • CVE-2026-31844
    34İzleyin

    Authenticated SQL Injection in Koha displayby parameter of suggestion.pl

    YüksekCVSS 8,7Kavram kanıtıEPSS %1

    koha · koha11 Mar 2026

  • CVE-2015-4630
    33İzleyin

    Multiple cross-site request forgery (CSRF) vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and

    YüksekCVSS 8,0Kavram kanıtıEPSS %3

    koha · koha18 Eki 2018

  • CVE-2024-24337
    32İzleyin

    CSV Injection vulnerability in '/members/moremember.pl' and '/admin/aqbudgets.pl' endpoints in Koha Library Management System version 23.05.

    YüksekCVSS 8,0İstismar yokEPSS %1

    koha · koha12 Şub 2024

  • CVE-2014-1923
    31İzleyin

    Multiple directory traversal vulnerabilities in the (1) staff interface help editor (edithelp.pl) or (2) member-picupload.pl in Koha before

    YüksekCVSS 7,5İstismar yokEPSS %3

    koha · koha24 Oca 2020

  • CVE-2014-1922
    31İzleyin

    Absolute path traversal vulnerability in tools/pdfViewer.pl in Koha before 3.8.23, 3.10.x before 3.10.13, 3.12.x before 3.12.10, and 3.14.x

    YüksekCVSS 7,5İstismar yokEPSS %2

    koha · koha24 Oca 2020

  • CVE-2026-26379
    26İzleyin

    Koha versions up to 25.11 contain a Server-Side Request Forgery (SSRF) vulnerability via the Z39.50/SRU server configuration.

    OrtaCVSS 6,5İstismar yokEPSS %0

    koha · koha3 Haz 2026

  • CVE-2018-1000670
    24İzleyin

    KOHA Library System version 16.11.x (up until 16.11.13) and 17.05.x (up until 17.05.05) contains a Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,1İstismar yokEPSS %1

    koha · koha6 Eyl 2018

  • CVE-2026-50765
    24İzleyin

    A stored cross-site scripting (XSS) vulnerability in the patron restriction type administration page of Koha Library Management System 0 thr

    OrtaCVSS 6,1İstismar yokEPSS %0

    koha · koha26 Haz 2026

  • CVE-2011-4715
    23İzleyin

    Directory traversal vulnerability in cgi-bin/koha/mainpage.pl in Koha 3.4 before 3.4.7 and 3.6 before 3.6.1, and LibLime Koha 4.2 and earlie

    OrtaCVSS 5,0Kavram kanıtıEPSS %9

    koha · liblime koha8 Ara 2011

  • CVE-2015-4631
    22İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x

    OrtaCVSS 5,4Kavram kanıtıEPSS %4

    koha · koha18 Eki 2018

  • CVE-2023-5025
    21İzleyin

    KOHA MARC search.pl cross site scripting

    OrtaCVSS 5,4İstismar yokEPSS %1

    koha · koha17 Eyl 2023

  • CVE-2026-26378
    21İzleyin

    Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via file upload function in I

    OrtaCVSS 5,4İstismar yokEPSS %0

    koha · koha3 Haz 2026

  • CVE-2026-26377
    21İzleyin

    Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via the News function.

    OrtaCVSS 5,4İstismar yokEPSS %0

    koha · koha5 Mar 2026

  • CVE-2026-50766
    21İzleyin

    A stored cross-site scripting (XSS) vulnerability in the OPAC item detail page of Koha Library Management System 0 through 25.11 versions al

    OrtaCVSS 5,4İstismar yokEPSS %0

    koha · koha26 Haz 2026

  • CVE-2026-50767
    21İzleyin

    A stored cross-site scripting (XSS) vulnerability in the item type administration page of Koha Library Management System 0 through 25.11 ver

    OrtaCVSS 5,4İstismar yokEPSS %0

    koha · koha26 Haz 2026

  • CVE-2014-9446
    17İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in the Staff client in Koha before 3.16.6 and 3.18.x before 3.18.2 allow remote attacker

    OrtaCVSS 4,3İstismar yokEPSS %1

    koha · koha2 Oca 2015