93 matches found
CVE-2026-76572: Improper Restriction of XML External Entity Reference
A vulnerability was detected in pkp pkp-lib up to 3.3.0-22/3.4.0-10/3.5.0-4. The affected element is the function transformPHP of the file classes/xslt/XSLTransformer.php. The manipulation results in xml external entity reference. The attack can be executed remotely. Upgrading to version 3.3.0-23...
CVE-2026-19906 pkp pkp-lib API Key Generation APIProfileForm.php setData entropy
A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the function setData of the file classes/user/form/APIProfileForm.php of the component API Key Generation. Executing a manipulation of the argument apiKey can lead to insufficient entropy. The attack may b...
CVE-2026-19906: Insufficient Entropy
A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the function setData of the file classes/user/form/APIProfileForm.php of the component API Key Generation. Executing a manipulation of the argument apiKey can lead to insufficient entropy. The attack may b...
EUVD-2023-58163
Malicious code in bioql PyPI...
EUVD-2023-58171
Malicious code in bioql PyPI...
EUVD-2023-58168
Malicious code in bioql PyPI...
EUVD-2023-58169
Malicious code in bioql PyPI...
EUVD-2023-58174
Malicious code in bioql PyPI...
EUVD-2023-58164
Malicious code in bioql PyPI...
CVE-2023-5896
Cross-site Scripting XSS - Stored in GitHub repository pkp/pkp-lib prior to 3.4.0-4...
CVE-2023-5903
Cross-site Scripting XSS - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16...
CVE-2023-5895
Cross-site Scripting XSS - DOM in GitHub repository pkp/pkp-lib prior to 3.3.0-16...
CVE-2023-5891
Cross-site Scripting XSS - Reflected in GitHub repository pkp/pkp-lib prior to 3.3.0-16...
CVE-2023-5893
Cross-Site Request Forgery CSRF in GitHub repository pkp/pkp-lib prior to 3.3.0-16...
CVE-2023-5901
Cross-site Scripting in GitHub repository pkp/pkp-lib prior to 3.3.0-16...
CVE-2023-5904
Cross-site Scripting XSS - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16...
CVE-2023-5902
Cross-Site Request Forgery CSRF in GitHub repository pkp/pkp-lib prior to 3.3.0-16...
CVE-2023-5901
Cross-site Scripting in GitHub repository pkp/pkp-lib prior to 3.3.0-16...
