TI-2013-03797 CVE-2013-4334 · GHSA-3vpp-f76r-qq84
opWebAPIPlugin 0.5.1, 0.4.0, and 0.1.0: XXE Vulnerabilities
Priority MEDIUM 45
opWebAPIPlugin 0.5.1, 0.4.0, and 0.1.0: XXE Vulnerabilities
Tejimaya
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Tejimaya records in CISA KEVNo Tejimaya vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2013-03796 CVE-2013-4333 · GHSA-9xp4-mq53-c534
OpenPNE 3 versions 3.8.7, 3.6.11, 3.4.21.1, 3.2.7.6, 3.0.8.5 has an External Entity Injection Vulnerability
Priority MEDIUM 44
OpenPNE 3 versions 3.8.7, 3.6.11, 3.4.21.1, 3.2.7.6, 3.0.8.5 has an External Entity Injection Vulnerability
TI-2013-04574 CVE-2013-5350 · GHSA-c26j-j6q7-r2mc
The "Remember me" feature in the opSecurityUser::getRememberLoginCookie function in…
Priority LOW 36
The "Remember me" feature in the opSecurityUser::getRememberLoginCookie function in lib/user/opSecurityUser.class.php in OpenPNE 3.6.13 before 3.6.13.1 and 3.8.9 before 3.8.9.1 does not properly validate login data in HT…
TI-2010-00999 CVE-2010-1040 · GHSA-c92f-mqw6-5w27
The "IP address range limitation" function in OpenPNE 1.6 through 1.8, 2.0 through 2.8…
Priority LOW 28
The "IP address range limitation" function in OpenPNE 1.6 through 1.8, 2.0 through 2.8, 2.10 through 2.14, and 3.0 through 3.4, when mobile device support is enabled, allows remote attackers to bypass the "simple login"…
TI-2013-02058 CVE-2013-2309 · GHSA-c573-5x9v-42h7
Cross-site scripting (XSS) vulnerability in the management screen in OpenPNE 3.4.x before…
Priority LOW 22
Cross-site scripting (XSS) vulnerability in the management screen in OpenPNE 3.4.x before 3.4.21.1, 3.6.x before 3.6.9.1, and 3.8.x before 3.8.5.1 allows remote attackers to inject arbitrary web script or HTML via vector…