EUVD-2019-13215

Malware in sbrugna...

EUVD-2024-2917

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2024-47879

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, lack of cross- site request forgery protection on the...

Linux Distros Unpatched Vulnerability : CVE-2024-47878

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the /extension/gdata/authorized endpoint includes the state GET...

Linux Distros Unpatched Vulnerability : CVE-2024-47881

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenRefine is a free, open source tool for working with messy data. Starting in version 3.4-beta and prior to version 3.8.3, in the database extension, the...

Linux Distros Unpatched Vulnerability : CVE-2024-23833

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenRefine is a free, open source power tool for working with messy data and improving it. A jdbc attack vulnerability exists in OpenRefineversion=3.7.7 where a...

CVE-2024-47881

OpenRefine is a free, open source tool for working with messy data. Starting in version 3.4-beta and prior to version 3.8.3, in the database extension, the "enableloadextension" property can be set for the SQLite integration, enabling an attacker to load local or remote extension DLLs and so run...

OpenRefine Directory Traversal Vulnerability

OpenRefine is a standalone open source desktop application for data cleaning and converting data to other formats. A directory traversal vulnerability exists in OpenRefine prior to 3.5. An attacker can exploit this vulnerability to achieve directory traversal via the relative pathname of a ZIP...