Lucene search
+L

9 matches found

CNNVD
CNNVD
•added 2025/11/24 12:00 a.m.•15 views

Austrian Academy of Sciences OpenAtlas 安全漏洞

Austrian Academy of Sciences OpenAtlas is a database application dealing with archaeology and history organized by the Austrian Academy of Sciences in Austria. A security vulnerability exists in Austrian Academy of Sciences OpenAtlas versions prior to 8.12.0, which stems from a reflected cross-si...

4.6CVSS5.6AI score0.00217EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/11/24 12:00 a.m.•23 views

PT-2025-47933

A reflected cross-site scripting XSS vulnerability in the /overview/network/ endpoint of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the color parameter...

6.3AI score0.00217EPSS
SaveExploits0References3
CVE
CVE
•added 2025/11/24 12:00 a.m.•40 views

CVE-2025-60917

A reflected cross-site scripting (XSS) vulnerability exists in the Austrian Archaeological Institute Openatlas database application (versions prior to v8.12.0 ). The flaw is located in the /overview/network/ endpoint, where the application fails to properly neutralize input in the color parameter...

4.6CVSS6.3AI score0.00217EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2025/11/24 12:00 a.m.•35 views

CVE-2025-60916

The Austrian Archaeological Institute Openatlas database application is vulnerable to a reflected cross-site scripting (XSS) vulnerability in versions prior to v8.12.0 . The flaw exists in the /overview/network/ endpoint, where a lack of proper input neutralization allows an attacker to inject a ...

5.4CVSS6.3AI score0.00235EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2025/11/24 12:00 a.m.•10 views

CVE-2025-60916

A reflected cross-site scripting XSS vulnerability in the /overview/network/ endpoint of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the charge parameter...

5.4CVSS6.2AI score
SaveExploits0References4
NVD
NVD
•added 2025/08/04 5:15 p.m.•21 views

CVE-2025-51534

A cross-site scripting XSS vulnerability in Austrian Archaeological Institute AI OpenAtlas v8.11.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name field...

8.1CVSS0.00386EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/08/04 12:00 a.m.•6 views

CVE-2025-51536

Austrian Archaeological Institute AI OpenAtlas v8.11.0 as discovered to contain a hardcoded Administrator password...

7.5AI score0.00526EPSS
SaveExploits1References2
CVE
CVE
•added 2025/08/04 12:00 a.m.•52 views

CVE-2025-51536

The Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 platform contains a hardcoded Administrator password . This security vulnerability allows for unauthorized access due to the use of hard-coded credentials (CWE-798 ) and default credentials (CWE-1392 ). The impact is classified as CRITI...

9.8CVSS7AI score0.00526EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2025/08/04 12:00 a.m.•17 views

Austrian Archaeological Institute OpenAtlas 安全漏洞

Austrian Archaeological Institute OpenAtlas is a software platform for humanities research from Austrian Archaeological Institute, Austria. A security vulnerability exists in Austrian Archaeological Institute OpenAtlas version v8.11.0 that stems from the presence of SQL injection...

9.1CVSS7.4AI score0.00435EPSS
SaveExploits1References3
Rows per page
Query Builder