dbcve.org
Vulnerability index

Browse CVEs

6 matching
Cards Compact
Filters 1 Clear all
Severity

Filters apply as you choose them.

Top technology Linux 13140 Google 12525 Microsoft 12378 Apple 6692 Oracle 6673 Adobe 6383 Ibm 6286 Cisco 5751 Debian 3919 Mozilla 2886 Apache 2864 Redhat 2586
Eprints CRITICAL 9.8
CVE-2021-26476

EPrints 3.4.2 allows remote attackers to execute OS commands via crafted LaTeX input to a cgi/cal?year= URI.

Patch available
Fix from $2,300 2021-03-01
Eprints CRITICAL 9.8
CVE-2021-26703

EPrints 3.4.2 allows remote attackers to read arbitrary files and possibly execute commands via crafted JSON/XML input to a cgi/ajax/phrase URI.

Patch available
Fix from $2,300 2021-03-01
Eprints CRITICAL 9.8
CVE-2021-3342

EPrints 3.4.2 allows remote attackers to read arbitrary files and possibly execute commands via crafted LaTeX input to a cgi/latex2png?latex= URI.

Patch available
Fix from $2,300 2021-03-01
Eprints HIGH 8.8
CVE-2021-26704

EPrints 3.4.2 allows remote attackers to execute arbitrary commands via crafted input to the verb parameter in a cgi/toolbox/toolbox URI.

Patch available
Fix from $1,950 2021-03-01
Eprints MEDIUM 6.1
CVE-2021-26702

EPrints 3.4.2 exposes a reflected XSS opportunity in the dataset parameter to the cgi/dataset_dictionary URI.

Patch available
Fix from $1,600 2021-03-01
Eprints MEDIUM 6.1
CVE-2021-26475EPSS 7%

EPrints 3.4.2 exposes a reflected XSS opportunity in the via a cgi/cal URI.

Patch available
Fix from $1,600 2021-03-01