SF
Vendor
Sfu
18
CVEs
0
On KEV
0
New 30D
Products
PW8.8
Pkp Web Application Library
Sfu
12 CVEs0 on KEV0 new
OJ8.8
Open Journal System
Sfu
3 CVEs0 on KEV0 new
OJ6.1
Open Journal Systems
Sfu
2 CVEs0 on KEV0 new
CU8.8
Customlocale
Sfu
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-25436 | OJ Open Journal Systems Sfu | 6.1 | Mar 1 | A cross-site scripting (XSS) vulnerability in the Production module of Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into… |
| CVE-2023-47271 | PW Pkp Web Application Library Sfu | 5.3 | Nov 5 | PKP-WAL (aka PKP Web Application Library or pkp-lib) before 3.3.0-16, as used in Open Journal Systems (OJS) and other products, does not verify that the file named in an XML… |
| CVE-2023-5904 | PW Pkp Web Application Library Sfu | 5.4 | Nov 1 | Cross-site Scripting (XSS) - Stored in pkp/pkp-lib |
| CVE-2023-5903 | PW Pkp Web Application Library Sfu | 5.4 | Nov 1 | Cross-site Scripting (XSS) - Stored in pkp/pkp-lib |
| CVE-2023-5900 | PW Pkp Web Application Library Sfu | 4.3 | Nov 1 | Cross-Site Request Forgery in pkp/pkp-lib |
| CVE-2023-5901 | PW Pkp Web Application Library Sfu | 4.8 | Nov 1 | Cross-site Scripting in pkp/pkp-lib |
| CVE-2023-5897 | CU Customlocale Sfu | 8.8 | Nov 1 | Cross-Site Request Forgery (CSRF) in pkp/customLocale |
| CVE-2023-5902 | PW Pkp Web Application Library Sfu | 4.3 | Nov 1 | Cross-Site Request Forgery (CSRF) in pkp/pkp-lib |
| CVE-2023-5896 | PW Pkp Web Application Library Sfu | 5.4 | Nov 1 | Cross-site Scripting (XSS) - Stored in pkp/pkp-lib |
| CVE-2023-5895 | PW Pkp Web Application Library Sfu | 5.4 | Nov 1 | Cross-site Scripting (XSS) - DOM in pkp/pkp-lib |
| CVE-2023-5894 | OJ Open Journal Systems Sfu | 5.4 | Nov 1 | Cross-site Scripting (XSS) - Stored in pkp/ojs |
| CVE-2023-5891 | PW Pkp Web Application Library Sfu | 5.4 | Nov 1 | Cross-site Scripting (XSS) - Reflected in pkp/pkp-lib |
| CVE-2023-5892 | PW Pkp Web Application Library Sfu | 5.4 | Nov 1 | Cross-site Scripting (XSS) - Stored in pkp/pkp-lib |
| CVE-2023-5893 | PW Pkp Web Application Library Sfu | 8.8 | Nov 1 | Cross-Site Request Forgery (CSRF) in pkp/pkp-lib |
| CVE-2023-5890 | PW Pkp Web Application Library Sfu | 5.4 | Nov 1 | Cross-site Scripting (XSS) - Stored in pkp/pkp-lib |
| CVE-2023-5626 | OJ Open Journal System Sfu | 8.8 | Oct 17 | Cross-Site Request Forgery (CSRF) in pkp/ojs |
| CVE-2019-19909 | OJ Open Journal System Sfu | 8.8 | Dec 19 | An issue was discovered in Public Knowledge Project (PKP) pkp-lib before 3.1.2-2, as used in Open Journal Systems (OJS) before 3.1.2-2 |
| CVE-2018-12229 | OJ Open Journal System Sfu | 6.1 | Jun 12 | Cross-site scripting (XSS) vulnerability in Public Knowledge Project (PKP) Open Journal System (OJS) 3.0.0 to 3.1.1-1 allows remote attackers to inject arbitrary web script or… |
