5840 matches found
CVE-2023-4157 Improper Neutralization of Special Elements in Output Used by a Downstream Component in omeka/omeka-s
CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' in GitHub repository omeka/omeka-s prior to version 4.0.3...
CVE-2023-4157 Improper Neutralization of Special Elements in Output Used by a Downstream Component in omeka/omeka-s
CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' in GitHub repository omeka/omeka-s prior to version 4.0.3...
Omeka S Code Issue Vulnerability
Omeka S is an open source web content management system CMS from Omeka, Inc. that specializes in creating and managing digital exhibitions and online digital archives. It is a new version of the Omeka project, and unlike the traditional Omeka Classic, Omeka S emphasizes multi-user collaboration a...
PT-2023-27982 · Omeka-S · Omeka-S
Name of the Vulnerable Software and Affected Versions: omeka/omeka-s versions prior to 4.0.3 Description: The issue concerns improper input validation in the omeka/omeka-s GitHub repository. This can lead to injection attacks, where special elements are not properly neutralized in output used by...
Omeka S Cross-Site Scripting Vulnerability
Omeka S is an open source web content management system CMS from Omeka, Inc. that specializes in creating and managing digital exhibitions and online digital archives. It is a new version of the Omeka project, and unlike the traditional Omeka Classic, Omeka S emphasizes multi-user collaboration a...
Omeka S Injection Vulnerability
Omeka S is an open source web content management system CMS from Omeka, Inc. that specializes in creating and managing digital exhibitions and online digital archives. It is a new version of the Omeka project, and unlike the traditional Omeka Classic, Omeka S emphasizes multi-user collaboration a...
SUSE: Security Advisory (SUSE-SU-2023:3131-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-2537)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
AlmaLinux 9 : curl (ALSA-2023:4354)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:4354 advisory. - An improper certificate validation vulnerability exists in curl v8.1.0 in the way it supports matching of wildcard patterns when listed as Subject...
Oracle Linux 9 : curl (ELSA-2023-4354)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-4354 advisory. - unify the upload/method handling CVE-2023-28322 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...
CVE-2023-3980
Cross-site Scripting XSS - Stored in GitHub repository omeka/omeka-s prior to 4.0.2...
CVE-2023-3982
Cross-site Scripting XSS - Stored in GitHub repository omeka/omeka-s prior to 4.0.2...
CVE-2023-3981
Server-Side Request Forgery SSRF in GitHub repository omeka/omeka-s prior to 4.0.2...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository omeka/omeka-s prior to 4.0.2...
Server side request forgery (ssrf)
Server-Side Request Forgery SSRF in GitHub repository omeka/omeka-s prior to 4.0.2...
CVE-2023-3982 Cross-site Scripting (XSS) - Stored in omeka/omeka-s
Cross-site Scripting XSS - Stored in GitHub repository omeka/omeka-s prior to 4.0.2...
CVE-2023-3982
Omeka-S versions prior to 4.0.2 are affected by a stored XSS vulnerability in the web application (stored user input). Root cause: unsanitized input stored by the application, enabling script execution in a victim’s browser. A fix is available in 4.0.2 or later. A PoC exists on Huntr: https://www...
CVE-2023-3982 Cross-site Scripting (XSS) - Stored in omeka/omeka-s
Cross-site Scripting XSS - Stored in GitHub repository omeka/omeka-s prior to 4.0.2...