Approved changes feed: RSS · Atom

cpe:2.3:a:osclass:osclass:3.4.0:*:*:*:*:*:*:*

part: a version: 3.4.0 update: *

VendorOsclass (1aca265f-644f-599c-b4a7-da058a60f3a4)
ProductOsclass (76376e23-eb1c-541e-8d4c-8406679de9dd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/ricktaylord/osclass purl2cpe 2026-06-01 10:11:40.075595
pkg:docker/bitnami/osclass purl2cpe 2026-06-01 10:11:40.075596
pkg:github/mindstellar/osclass purl2cpe 2026-06-01 10:11:40.075597
pkg:github/osclass/osclass purl2cpe 2026-06-01 10:11:40.075599
pkg:npm/%40helm-charts/bitnami-osclass purl2cpe 2026-06-01 10:11:40.075600
pkg:sourceforge/osclass purl2cpe 2026-06-01 10:11:40.075601

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-6308 vulnerable 2026-06-08 05:05:57.387428 Details available
Directory traversal vulnerability in OSClass before 3.4.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter in a render action to oc-admin/index.php.
Published: 2014-10-20T14:00:00.000Z
Updated: 2024-08-06T12:10:13.294Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-6280 vulnerable 2026-06-08 05:05:57.315337 Details available
Multiple cross-site scripting (XSS) vulnerabilities in OSClass before 3.4.2 allow remote attackers to inject arbitrary web script or HTML via the (1) action or (2) nsextt parameter to oc-admin/index.php or the (3) nsextt parameter in an items_reported action to oc-admin/index.php.
Published: 2014-10-20T14:00:00.000Z
Updated: 2024-08-06T12:10:13.219Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.