dbcve.org
Vulnerability index

Browse CVEs

15 matching
Cards Compact
Filters 1 Clear all
Severity

Filters apply as you choose them.

Top technology Linux 13140 Google 12525 Microsoft 12378 Apple 6692 Oracle 6673 Adobe 6383 Ibm 6286 Cisco 5751 Debian 3919 Mozilla 2886 Apache 2864 Redhat 2586
Open Journal Systems MEDIUM 6.1
CVE-2024-25436

A cross-site scripting (XSS) vulnerability in the Production module of Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a c…

No fix yet
Fix from $1,600 2024-03-01
Pkp Web Application Library MEDIUM 5.4
CVE-2023-5903

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

Fix: after 3.3.0-15
Fix from $1,600 2023-11-07
Pkp Web Application Library MEDIUM 5.4
CVE-2023-5904

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

Fix: after 3.3.0-15
Fix from $1,600 2023-11-07
Pkp Web Application Library MEDIUM 5.3
CVE-2023-47271

PKP-WAL (aka PKP Web Application Library or pkp-lib) before 3.3.0-16, as used in Open Journal Systems (OJS) and other products, does not verify that …

Fix: 3.3.0-16+
Fix from $1,600 2023-11-06
Pkp Web Application Library HIGH 8.8
CVE-2023-5893

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

Fix: 3.3.0-16+
Fix from $1,950 2023-11-01
Customlocale HIGH 8.8
CVE-2023-5897

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/customLocale prior to 1.2.0-1.

Fix: 1.2.0-1+
Fix from $1,950 2023-11-01
Pkp Web Application Library MEDIUM 5.4
CVE-2023-5890

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

Fix: 3.3.0-16+
Fix from $1,600 2023-11-01
Pkp Web Application Library MEDIUM 5.4
CVE-2023-5891

Cross-site Scripting (XSS) - Reflected in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

Fix: 3.3.0-16+
Fix from $1,600 2023-11-01
Pkp Web Application Library MEDIUM 5.4
CVE-2023-5892

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

Fix: 3.3.0-16+
Fix from $1,600 2023-11-01
Open Journal Systems MEDIUM 5.4
CVE-2023-5894

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/ojs prior to 3.3.0-16.

Fix: 3.3.0-16+
Fix from $1,600 2023-11-01
Pkp Web Application Library MEDIUM 5.4
CVE-2023-5895

Cross-site Scripting (XSS) - DOM in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

Fix: 3.3.0-16+
Fix from $1,600 2023-11-01
Pkp Web Application Library MEDIUM 5.4
CVE-2023-5896

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.4.0-4.

Fix: 3.4.0-4+
Fix from $1,600 2023-11-01
Open Journal System HIGH 8.8
CVE-2023-5626

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/ojs prior to 3.3.0-16.

Fix: 3.3.0-16+
Fix from $1,950 2023-10-18
Open Journal System HIGH 8.8
CVE-2019-19909

An issue was discovered in Public Knowledge Project (PKP) pkp-lib before 3.1.2-2, as used in Open Journal Systems (OJS) before 3.1.2-2. Code injectio…

Fix: 3.1.2-2+
Fix from $1,950 2019-12-19
Open Journal System MEDIUM 6.1
CVE-2018-12229

Cross-site scripting (XSS) vulnerability in Public Knowledge Project (PKP) Open Journal System (OJS) 3.0.0 to 3.1.1-1 allows remote attackers to inje…

Fix: after 3.1.1-1
Fix from $1,600 2018-06-12