Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
aleph vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2006-6663
The server component in Marathon Aleph One prior to 0.17.1 and 2006-12-17 allows remote malicious users to cause a denial of service (application crash) via unspecified vectors related to "gathering net games."
Marathon Aleph One Marathon Aleph One
NA
CVE-2006-6664
Format string vulnerability in Marathon Aleph One prior to 0.17.1 and 2006-12-17 might allow remote malicious users to cause a denial of service (application crash) or execute arbitrary code via format string specifiers in the TopLevelLogger::logMessageV function in Misc/Logging....
Marathon Aleph One Marathon Aleph One
6.1
CVSSv3
CVE-2022-24177
A cross-site scripting (XSS) vulnerability in the component cgi-bin/ej.cgi of Ex libris ALEPH 500 v18.1 and v20 allows malicious users to execute arbitrary web scripts or HTML.
Exlibrisgroup Aleph 500 18.1
Exlibrisgroup Aleph 500 20.0
6.1
CVSSv3
CVE-2014-3718
Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/tag_m.cgi in Ex Libris ALEPH 500 (Integrated library management system) 18.1 and 20 allow remote malicious users to inject arbitrary web script or HTML via the (1) find, (2) lib, or (3) sid parameter.
Exlibrisgroup Aleph 500 18.1
Exlibrisgroup Aleph 500 20.0
9.8
CVSSv3
CVE-2014-3719
Multiple SQL injection vulnerabilities in cgi-bin/review_m.cgi in Ex Libris ALEPH 500 (Integrated library management system) 18.1 and 20 allow remote malicious users to execute arbitrary SQL commands via the (1) find, (2) lib, or (3) sid parameter.
Exlibrisgroup Aleph 500 18.1
Exlibrisgroup Aleph 500 20.0
NA
CVE-2007-3834
Multiple cross-site scripting (XSS) vulnerabilities in Ex Libris ALEPH allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors related to a URL that can be discovered through a keyword search. NOTE: this may be related to the MetaLib XSS issue,...
Exlibris Group Aleph 3.12
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7028
memory leak
log injection
CVE-2024-3400
CVE-2022-48695
CVE-2022-48675
CVE-2024-34487
CVE-2024-33792
spoof
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started