pkp kayıtları
pkp üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-1241 Use of Predictable Algorithm in Random Number Generator1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
- CWE-613 Insufficient Session Expiration1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2023-5899İstismar yok | Cross-Site Request Forgery (CSRF) in pkp/pkp-libpkp · pkp web application library · CWE-352 | Yüksek8,8 | — | %0,3 | 31 Eki 2023 |
35İzleyin | CVE-2023-5898İstismar yok | Cross-Site Request Forgery (CSRF) in pkp/pkp-libpkp · pkp web application library · CWE-352 | Yüksek8,8 | — | %0,3 | 31 Eki 2023 |
32İzleyin | CVE-2023-4695İstismar yok | Use of Predictable Algorithm in Random Number Generator in pkp/pkp-libpkp · pkb-lib · CWE-1241 | Yüksek8,1 | — | %0,7 | 31 Ağu 2023 |
32İzleyin | CVE-2023-5889İstismar yok | Insufficient Session Expiration in pkp/pkp-libpkp · pkp web application library · CWE-613 | Yüksek8,2 | — | %0,4 | 31 Eki 2023 |
27İzleyin | CVE-2012-1467Kavram kanıtı | Multiple directory traversal vulnerabilities in the iBrowser plugin library, as used in Open Journal Systems before 2.3.7, allow remote authpkp · open journal systems · CWE-22 | Orta6,5 | — | %3,0 | 6 Eyl 2012 |
25İzleyin | CVE-2012-1468Kavram kanıtı | Incomplete blacklist vulnerability in Open Journal Systems before 2.3.7 allows remote authenticated users with the Author Role permission topkp · open journal systems | Orta6,0 | — | %3,5 | 6 Eyl 2012 |
24İzleyin | CVE-2024-46326İstismar yok | Public Knowledge Project pkp-lib 3.4.0-7 and earlier is vulnerable to Open redirect due to a lack of input sanitization in the logout functiCWE-601 | Orta6,1 | — | %0,5 | 21 Eki 2024 |
18İzleyin | CVE-2012-1469Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in Open Journal Systems before 2.3.7 allow remote attackers and remote authenticated usepkp · open journal systems · CWE-79 | Orta4,3 | — | %3,1 | 6 Eyl 2012 |
- CVE-2023-589935İzleyin
Cross-Site Request Forgery (CSRF) in pkp/pkp-lib
YüksekCVSS 8,8İstismar yokEPSS %0pkp · pkp web application library31 Eki 2023
- CVE-2023-589835İzleyin
Cross-Site Request Forgery (CSRF) in pkp/pkp-lib
YüksekCVSS 8,8İstismar yokEPSS %0pkp · pkp web application library31 Eki 2023
- CVE-2023-469532İzleyin
Use of Predictable Algorithm in Random Number Generator in pkp/pkp-lib
YüksekCVSS 8,1İstismar yokEPSS %1pkp · pkb-lib31 Ağu 2023
- CVE-2023-588932İzleyin
Insufficient Session Expiration in pkp/pkp-lib
YüksekCVSS 8,2İstismar yokEPSS %0pkp · pkp web application library31 Eki 2023
- CVE-2012-146727İzleyin
Multiple directory traversal vulnerabilities in the iBrowser plugin library, as used in Open Journal Systems before 2.3.7, allow remote auth
OrtaCVSS 6,5Kavram kanıtıEPSS %3pkp · open journal systems6 Eyl 2012
- CVE-2012-146825İzleyin
Incomplete blacklist vulnerability in Open Journal Systems before 2.3.7 allows remote authenticated users with the Author Role permission to
OrtaCVSS 6,0Kavram kanıtıEPSS %3pkp · open journal systems6 Eyl 2012
- CVE-2024-4632624İzleyin
Public Knowledge Project pkp-lib 3.4.0-7 and earlier is vulnerable to Open redirect due to a lack of input sanitization in the logout functi
OrtaCVSS 6,1İstismar yokEPSS %021 Eki 2024
- CVE-2012-146918İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Open Journal Systems before 2.3.7 allow remote attackers and remote authenticated use
OrtaCVSS 4,3Kavram kanıtıEPSS %3pkp · open journal systems6 Eyl 2012