Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2015-2807

Cross-site scripting (XSS) vulnerability in js/window.php in the Navis DocumentCloud plugin before 0.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the wpbase parameter.

CVSS 2.0 · 4.3 Medium EPSS 7.3% KEV · Not listed
Vendors
Documentcloud
Products
Navis Documentcloud
CVE-2013-1933

The extract_from_ocr function in lib/docsplit/text_extractor.rb in the Karteek Docsplit (karteek-docsplit) gem 0.5.4 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a PDF filename.

CVSS 2.0 · 9.3 Critical EPSS 1.8% KEV · Not listed
Vendors
Documentcloud Ruby-lang
Products
Karteek-docsplit Ruby