DU
Vendor
Duraspace
10
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2022-31195 | DS Dspace Duraspace | 7.2 | Aug 1 | Path traversal vulnerability in Simple Archive Format package import in DSpace |
| CVE-2022-31192 | DS Dspace Duraspace | 6.1 | Aug 1 | Cross Site Scripting possible in DSpace JSPUI "Request a Copy" feature |
| CVE-2022-31191 | DS Dspace Duraspace | 6.1 | Aug 1 | Cross Site Scripting possible in DSpace JSPUI spellcheck and autocomplete tools |
| CVE-2022-31194 | DS Dspace Duraspace | 7.2 | Aug 1 | Path traversal vulnerabilities in DSpace JSPUI submission upload |
| CVE-2022-31193 | DS Dspace Duraspace | 6.1 | Aug 1 | URL Redirection to Untrusted Site in Dspace JSPUI |
| CVE-2022-31189 | DS Dspace Duraspace | 5.3 | Aug 1 | "Internal System Error" page in DSpace JSPUI prints exceptions and stack traces without sanitization |
| CVE-2022-31190 | DS Dspace Duraspace | 5.3 | Aug 1 | Metadata of withdrawn Items is exposed to anonymous users in DSpace XMLUI |
| CVE-2021-41189 | DS Dspace Duraspace | 7.2 | Oct 29 | DSpace is an open source turnkey repository application |
| CVE-2019-6986 | VI Vitro Duraspace | 7.5 | Jan 28 | SPARQL Injection in VIVO Vitro v1.10.0 allows a remote attacker to execute arbitrary SPARQL via the uri parameter, leading to a regular expression denial of service (ReDoS), as… |
| CVE-2016-10726 | DS Dspace Duraspace | 7.5 | Jul 10 | The XMLUI feature in DSpace before 3.6, 4.x before 4.5, and 5.x before 5.5 allows directory traversal via the themes/ path in an attack with two or more arbitrary characters and a… |