Documentcloud

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Documentcloud records in CISA KEV

No Documentcloud vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Karteek-docsplit 1 record MEDIUM Navis Documentcloud 1 record LOW

Records

2 records

TI-2013-01709 CVE-2013-1933 · GHSA-4fvg-pwv7-v54g

The extract_from_ocr function in lib/docsplit/text_extractor.rb in the Karteek Docsplit…

MEDIUM 44

The extract_from_ocr function in lib/docsplit/text_extractor.rb in the Karteek Docsplit (karteek-docsplit) gem 0.5.4 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.01793 Published 2013-04-25 No fix listed CWE-78

TI-2015-02478 CVE-2015-2807 · GHSA-4cg7-vxw6-h39q

Cross-site scripting (XSS) vulnerability in js/window.php in the Navis DocumentCloud…

LOW 30

Cross-site scripting (XSS) vulnerability in js/window.php in the Navis DocumentCloud plugin before 0.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the wpbase parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.07328 Published 2015-09-01 No fix listed CWE-79

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0