CVE-2023-3981 Server-Side Request Forgery (SSRF) in omeka/omeka-s

Server-Side Request Forgery SSRF in GitHub repository omeka/omeka-s prior to 4.0.2...

CVE-2023-3981 Server-Side Request Forgery (SSRF) in omeka/omeka-s

Server-Side Request Forgery SSRF in GitHub repository omeka/omeka-s prior to 4.0.2...

CVE-2023-3981

CVE-2023-3981 affects omeka/omeka-s prior to 4.0.2. The issue is a Server-Side Request Forgery (SSRF) vulnerability in the Omeka S codebase, enabling an attacker to cause the server to issue requests to arbitrary domains. The common descriptions across sources (Red Hat, NVD, CVE lists, OSV, Huntr...

CVE-2023-3980 Cross-site Scripting (XSS) - Stored in omeka/omeka-s

Cross-site Scripting XSS - Stored in GitHub repository omeka/omeka-s prior to 4.0.2...

CVE-2023-3980

CVE-2023-3980 affects Omeka S prior to 4.0.2 with a stored XSS vulnerability. The issue arises in how user-supplied content is stored and later rendered, allowing injected scripts to execute in a victim’s context. Public sources in the connected set consistently describe this as a stored XSS in o...

CVE-2023-3980 Cross-site Scripting (XSS) - Stored in omeka/omeka-s

Cross-site Scripting XSS - Stored in GitHub repository omeka/omeka-s prior to 4.0.2...

Omeka S 跨站脚本漏洞

Omeka S is an open source web content management system CMS from Omeka, Inc. that specializes in creating and managing digital exhibitions and online digital archives. It is a new version of the Omeka project, and unlike the traditional Omeka Classic, Omeka S emphasizes multi-user collaboration a...

PT-2023-27117 · Omeka · Omeka-S

Name of the Vulnerable Software and Affected Versions: omeka/omeka-s versions prior to 4.0.2 Description: The issue is related to Server-Side Request Forgery SSRF in the omeka/omeka-s GitHub repository. This allows an attacker to trick the server into making requests to arbitrary domains,...

Omeka S 跨站脚本漏洞

Omeka S is an open source web content management system CMS from Omeka, Inc. that specializes in creating and managing digital exhibitions and online digital archives. It is a new version of the Omeka project, and unlike the traditional Omeka Classic, Omeka S emphasizes multi-user collaboration a...

PT-2023-27123 · Omeka · Omeka-S

Name of the Vulnerable Software and Affected Versions: omeka/omeka-s versions prior to 4.0.2 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input without proper validation, allowing attackers to inject malicious scripts. This c...

Omeka S 代码问题漏洞

Omeka S is an open source web content management system CMS from Omeka, Inc. that specializes in creating and managing digital exhibitions and online digital archives. It is a new version of the Omeka project, and unlike the traditional Omeka Classic, Omeka S emphasizes multi-user collaboration a...

PT-2023-27109 · Omeka · Omeka-S

Name of the Vulnerable Software and Affected Versions: omeka/omeka-s versions prior to 4.0.2 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input and later displays it without proper validation or escaping, allowing an attacker...

PT-2023-27454 · Apple · Macos Monterey +1

Name of the Vulnerable Software and Affected Versions: macOS Monterey versions prior to 12.6.8 Description: This issue was addressed with improved state management of S/MIME encrypted emails. A S/MIME encrypted email may be inadvertently sent unencrypted. Recommendations: For versions prior to...

PT-2023-26160 · Unknown · Paulprinting Cms

Name of the Vulnerable Software and Affected Versions: PaulPrinting CMS version 2018 Description: A problematic issue was found in the Search component of the affected software, specifically in an unknown function of the file /account/delivery. The manipulation of the s argument leads to cross-si...

EulerOS 2.0 SP10 : curl (EulerOS-SA-2023-2376)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An improper certificate validation vulnerability exists in curl v8.1.0 in the way it supports matching of wildcard patterns when listed as 'Subjec...

CVE-2023-3690

A vulnerability, which was classified as critical, has been found in Bylancer QuickOrder 6.3.7. Affected by this issue is some unknown functionality of the file /blog of the component GET Parameter Handler. The manipulation of the argument s leads to sql injection. The attack may be launched...

CVE-2023-3686

A vulnerability was found in Bylancer QuickAI OpenAI 3.8.1. It has been declared as critical. This vulnerability affects unknown code of the file /blog of the component GET Parameter Handler. The manipulation of the argument s leads to sql injection. The attack can be initiated remotely. The...

PT-2023-25728 · Unknown · Bylancer Quickai Openai

Name of the Vulnerable Software and Affected Versions: Bylancer QuickAI OpenAI version 3.8.1 Description: A critical issue affects the GET Parameter Handler component, specifically the file /blog, where manipulation of the s argument leads to sql injection. This issue can be initiated remotely. T...

CVE-2023-37564

OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent authenticated attacker to execute an arbitrary OS command with a root privilege by sending a specially crafted request. Affected products and versions are as follows: WRC-1167GHBK-S v1.03 and earlier,...

CVE-2023-37564

OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent authenticated attacker to execute an arbitrary OS command with a root privilege by sending a specially crafted request. Affected products and versions are as follows: WRC-1167GHBK-S v1.03 and earlier,...