CVE-2022-41401

OpenRefine = v3.5.2 SSRF OpenRefine v=3.5.2 contiene una vulnerabilidad de Server-Side Request Forgery SSRF, que permite a usuarios no autorizados explotar el sistema, lo que potencialmente puede llevar a acceso no autorizado a recursos internos y divulgación de archivos sensibles. La causa raíz ...

CVE-2018-19859

CVE-2018-19859 - Prueba de Concepto de RCE Este repositorio contiene una prueba de concepto para la Ejecución Remota de Código RCE contra OpenRefine 3.1-beta. Al explotar una vulnerabilidad de traversal de directorios dentro de la funcionalidad Crear Proyecto, CVE-2018-19859, un usuario malicioso...

EUVD-2018-12726

Malware in sbrugna...

EUVD-2019-13215

Malware in sbrugna...

EUVD-2023-2096

Malicious code in bioql PyPI...

EUVD-2024-0538

Malicious code in bioql PyPI...

EUVD-2024-2917

Malicious code in bioql PyPI...

EUVD-2024-2990

Malicious code in bioql PyPI...

EUVD-2024-3067

Malicious code in bioql PyPI...

EUVD-2024-3105

Malicious code in bioql PyPI...

EUVD-2024-3113

Malicious code in bioql PyPI...

EUVD-2024-2977

Malicious code in bioql PyPI...

EUVD-2023-2337

Malicious code in bioql PyPI...

EUVD-2024-2918

Malicious code in bioql PyPI...

EUVD-2023-2577

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-41401

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenRefine = v3.5.2 contains a Server-Side Request Forgery SSRF vulnerability, which permits unauthorized users to exploit the system, potentially leading to...

Linux Distros Unpatched Vulnerability : CVE-2023-41886

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenRefine is a powerful free, open source tool for working with messy data. Prior to version 3.7.5, an arbitrary file read vulnerability allows any...

Linux Distros Unpatched Vulnerability : CVE-2023-37476

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenRefine is a free, open source tool for data processing. A carefully crafted malicious OpenRefine project tar file can be used to trigger arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2023-41887

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenRefine is a powerful free, open source tool for working with messy data. Prior to version 3.7.5, a remote code execution vulnerability allows any...

CVE-2023-37476

OpenRefine is a free, open source tool for data processing. A carefully crafted malicious OpenRefine project tar file can be used to trigger arbitrary code execution in the context of the OpenRefine process if a user can be convinced to import it. The vulnerability exists in all versions of...