RSEC-2023-9 Arbitrary Code Execution (ACE) Vulnerability

Bundled Perl script Spreadsheet::ParseExcel version 0.65 is vulnerable to an arbitrary code execution ACE vulnerability due to passing unvalidated input from a file into a string-type "eval". Specifically, the issue stems from the evaluation of Number format strings not to be confused with...

DEBIAN-CVE-2024-47878

OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the /extension/gdata/authorized endpoint includes the state GET parameter verbatim in a tag in the output, so without escaping. An attacker could lead or redirect a user to a crafted URL containing...

CVE-2024-47878 Reflected cross-site scripting vulnerability (XSS) in GData extension (authorized.vt)

OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the /extension/gdata/authorized endpoint includes the state GET parameter verbatim in a tag in the output, so without escaping. An attacker could lead or redirect a user to a crafted URL containing...

CVE-2024-47878

OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the /extension/gdata/authorized endpoint includes the state GET parameter verbatim in a tag in the output, so without escaping. An attacker could lead or redirect a user to a crafted URL containing...

CVE-2024-47878 Reflected cross-site scripting vulnerability (XSS) in GData extension (authorized.vt)

OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the /extension/gdata/authorized endpoint includes the state GET parameter verbatim in a tag in the output, so without escaping. An attacker could lead or redirect a user to a crafted URL containing...

GHSA-PW3X-C5VP-MFC3 OpenRefine has a reflected cross-site scripting vulnerability (XSS) in GData extension (authorized.vt)

Summary The /extension/gdata/authorized endpoint includes the state GET parameter verbatim in a tag in the output, so without escaping. An attacker could lead or redirect a user to a crafted URL containing JavaScript code, which would then cause that code to be executed in the victim's browser as...

OpenRefine has a reflected cross-site scripting vulnerability (XSS) in GData extension (authorized.vt)

Summary The /extension/gdata/authorized endpoint includes the state GET parameter verbatim in a tag in the output, so without escaping. An attacker could lead or redirect a user to a crafted URL containing JavaScript code, which would then cause that code to be executed in the victim's browser as...

OpenRefine cross-site scripting vulnerability

OpenRefine is a Java-based open source tool from OpenRefine Open Source. The product is mainly used for loading data, analyzing data and cleaning data, etc. A cross-site scripting vulnerability exists in OpenRefine prior to version 3.8.3, which stems from a cross-site scripting attack that can be...

CVE-2024-47878: Improper Neutralization of Input During Web Page Generation

OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the /extension/gdata/authorized endpoint includes the state GET parameter verbatim in a...

PT-2024-32868 · Unknown +3 · Openrefine +3

Name of the Vulnerable Software and Affected Versions: OpenRefine versions prior to 3.8.3 Description: The issue concerns the /extension/gdata/authorized endpoint, which includes the state GET parameter verbatim in a tag in the output without escaping. This allows an attacker to lead or redirect ...

Backdoor.Win32.Jeemp.c MVID-2024-0672 Hardcoded Credential

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2024 Original source: https://malvuln.com/advisory/d6b192a4027c7d635499133ca6ce067f.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Jeemp.c Vulnerability: Cleartext Hardcoded Credentials Description: The...

org.openrefine:benchmark (>=3.6-beta1, <=3.6-rc1), org.openrefine:database (>=3.6-beta1, <=3.6-rc1) +5 more potentially affected by CVE-2022-41401 via org.openrefine:main (>=3.6-beta1, <=3.6-rc1)

org.openrefine:main MAVEN version =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.6-rc1 Source cves: CVE-2022-41401 Source advisory: OSV:GHSA-Q7MC-FC87-V7W7...

org.openrefine:benchmark (>=3.6-beta1, <=3.6-rc1), org.openrefine:database (>=3.6-beta1, <=3.6-rc1) +5 more potentially affected by CVE-2022-41401 via org.openrefine:main (>=3.6-beta1, <=3.6-rc1)

org.openrefine:main MAVEN version =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.6-rc1 Source cves: CVE-2022-41401 Source advisory: GHSA-Q7MC-FC87-V7W7...

org.openrefine:benchmark (>=3.6-beta1, <=3.7.2), org.openrefine:database (>=3.6-beta1, <=3.7.2) +6 more potentially affected by CVE-2023-37476 via org.openrefine:main (>=3.6-beta1, <=3.7.2)

org.openrefine:main MAVEN version =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.7-beta1, =3.6-beta1, =3.6.2 Source cves: CVE-2023-37476 Source advisory: GHSA-M88M-CRR9-JVQQ...

SUSE CVE-2007-3257

Camel camel-imap-folder.c in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an array index...

gdata-s.cleverbridge.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-617452 Description| Value ---|--- Affected Website:| gdata-s.cleverbridge.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

gdata-cgn.cleverbridge.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-485366 Description| Value ---|--- Affected Website:| gdata-cgn.cleverbridge.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

gdata-s.cleverbridge.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-485317 Description| Value ---|--- Affected Website:| gdata-s.cleverbridge.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Disclosure Standard:| Coordinated Disclosure base...

Mandriva Linux Security Advisory : libgdata (MDVSA-2012:111)

A vulnerability has been discovered and corrected in libgdata : It was found that previously libgdata, a GLib-based library for accessing online service APIs using the GData protocol, did not perform SSL certificates validation even for secured connections. An application, linked against the...

Ubuntu: Security Advisory (USN-1547-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...