omeka kayıtları
omeka üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %9,1
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-612 Improper Authorization of Index Containing Sensitive Information1
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
- CWE-918 Server-Side Request Forgery (SSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2023-4159İstismar yok | Unrestricted Upload of File with Dangerous Type in omeka/omeka-someka · omeka s · CWE-434 | Yüksek8,8 | — | %1,0 | 4 Ağu 2023 |
28İzleyin | CVE-2014-5100Kavram kanıtı | Multiple cross-site request forgery (CSRF) vulnerabilities in Omeka before 2.2.1 allow remote attackers to hijack the authentication of admiomeka · omeka · CWE-352 | Orta6,8 | — | %2,5 | 25 Tem 2014 |
26İzleyin | CVE-2023-4560İstismar yok | Improper Authorization of Index Containing Sensitive Information in omeka/omeka-someka · omeka s · CWE-612 | Orta6,5 | — | %0,7 | 27 Ağu 2023 |
24İzleyin | CVE-2021-26799İstismar yok | Cross Site Scripting (XSS) vulnerability in admin/files/edit in Omeka Classic <=2.7 allows remote attackers to inject arbitrary web script oomeka · omeka · CWE-79 | Orta6,1 | — | %1,0 | 23 Tem 2021 |
24İzleyin | CVE-2018-13423İstismar yok | admin/themes/default/items/tag-form.php in Omeka before 2.6.1 allows XSS by adding or editing a tag.omeka · omeka · CWE-79 | Orta6,1 | — | %0,9 | 7 Tem 2018 |
21İzleyin | CVE-2023-4158İstismar yok | Cross-site Scripting (XSS) - Stored in omeka/omeka-someka · omeka s · CWE-79 | Orta5,4 | — | %0,5 | 4 Ağu 2023 |
19İzleyin | CVE-2023-3981İstismar yok | Server-Side Request Forgery (SSRF) in omeka/omeka-someka · omeka · CWE-918 | Orta4,9 | — | %0,7 | 27 Tem 2023 |
19İzleyin | CVE-2023-4561İstismar yok | Cross-site Scripting (XSS) - Stored in omeka/omeka-someka · omeka s · CWE-79 | Orta4,8 | — | %0,5 | 27 Ağu 2023 |
19İzleyin | CVE-2023-4157İstismar yok | Improper Neutralization of Special Elements in Output Used by a Downstream Component in omeka/omeka-someka · omeka s · CWE-74 | Orta4,8 | — | %0,5 | 4 Ağu 2023 |
19İzleyin | CVE-2023-3982İstismar yok | Cross-site Scripting (XSS) - Stored in omeka/omeka-someka · omeka · CWE-79 | Orta4,8 | — | %0,5 | 27 Tem 2023 |
19İzleyin | CVE-2023-3980İstismar yok | Cross-site Scripting (XSS) - Stored in omeka/omeka-someka · omeka · CWE-79 | Orta4,8 | — | %0,5 | 27 Tem 2023 |
- CVE-2023-415935İzleyin
Unrestricted Upload of File with Dangerous Type in omeka/omeka-s
YüksekCVSS 8,8İstismar yokEPSS %1omeka · omeka s4 Ağu 2023
- CVE-2014-510028İzleyin
Multiple cross-site request forgery (CSRF) vulnerabilities in Omeka before 2.2.1 allow remote attackers to hijack the authentication of admi
OrtaCVSS 6,8Kavram kanıtıEPSS %2omeka · omeka25 Tem 2014
- CVE-2023-456026İzleyin
Improper Authorization of Index Containing Sensitive Information in omeka/omeka-s
OrtaCVSS 6,5İstismar yokEPSS %1omeka · omeka s27 Ağu 2023
- CVE-2021-2679924İzleyin
Cross Site Scripting (XSS) vulnerability in admin/files/edit in Omeka Classic <=2.7 allows remote attackers to inject arbitrary web script o
OrtaCVSS 6,1İstismar yokEPSS %1omeka · omeka23 Tem 2021
- CVE-2018-1342324İzleyin
admin/themes/default/items/tag-form.php in Omeka before 2.6.1 allows XSS by adding or editing a tag.
OrtaCVSS 6,1İstismar yokEPSS %1omeka · omeka7 Tem 2018
- CVE-2023-415821İzleyin
Cross-site Scripting (XSS) - Stored in omeka/omeka-s
OrtaCVSS 5,4İstismar yokEPSS %0omeka · omeka s4 Ağu 2023
- CVE-2023-398119İzleyin
Server-Side Request Forgery (SSRF) in omeka/omeka-s
OrtaCVSS 4,9İstismar yokEPSS %1omeka · omeka27 Tem 2023
- CVE-2023-456119İzleyin
Cross-site Scripting (XSS) - Stored in omeka/omeka-s
OrtaCVSS 4,8İstismar yokEPSS %1omeka · omeka s27 Ağu 2023
- CVE-2023-415719İzleyin
Improper Neutralization of Special Elements in Output Used by a Downstream Component in omeka/omeka-s
OrtaCVSS 4,8İstismar yokEPSS %1omeka · omeka s4 Ağu 2023
- CVE-2023-398219İzleyin
Cross-site Scripting (XSS) - Stored in omeka/omeka-s
OrtaCVSS 4,8İstismar yokEPSS %0omeka · omeka27 Tem 2023
- CVE-2023-398019İzleyin
Cross-site Scripting (XSS) - Stored in omeka/omeka-s
OrtaCVSS 4,8İstismar yokEPSS %0omeka · omeka27 Tem 2023