Lucene search
+L

6 matches found

CVE
CVE
•added 2026/09/25 4:30 p.m.•23 views

CVE-2026-97878

A vulnerability exists in zhistaredu StarTraining up to version 3.8.1 within the Druid Console component. Specifically, the anonymous function of the file /druid/index.html is affected. This flaw allows for missing authentication , enabling an attacker to perform the attack remotely . An exploit ...

7.5CVSS6.8AI score0.00627EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/25 4:30 p.m.•17 views

CVE-2026-97878 zhistaredu StarTraining Druid Console index.html anonymous missing authentication

A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. Impacted is the function anonymous of the file /druid/index.html of the component Druid Console. Such manipulation leads to missing authentication. The attack may be performed from remote. The exploit is publicly available and...

7.5CVSS6.8AI score0.00627EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/25 4:30 p.m.•17 views

EUVD-2026-87235

A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. Impacted is the function anonymous of the file /druid/index.html of the component Druid Console. Such manipulation leads to missing authentication. The attack may be performed from remote. The exploit is publicly available and...

6.9CVSS6.8AI score0.00627EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/25 12:00 a.m.•9 views

PT-2026-98935

Name of the Vulnerable Software and Affected Versions zhistaredu StarTraining versions prior to 3.8.2 Description A remote issue exists in the Druid Console component within the /druid/index.html file. The anonymous function is susceptible to manipulation, which allows an attacker to bypass...

7.5CVSS5.9AI score0.00627EPSS
SaveExploits0References7
Mend
Mend
•added 2025/04/18 1:00 p.m.•8 views

CVE-2025-3790

A vulnerability classified as critical has been found in baseweb JSite 1.0. This affects an unknown part of the file /druid/index.html of the component Apache Druid Monitoring Console. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit...

6.9CVSS0.00751EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•11 views

CVE-2024-12347: Improper Authorization

A vulnerability was found in Guangzhou Huayi Intelligent Technology Jeewms up to 1.0.0 and classified as critical. This issue affects some unknown processing of the file /jeewmswar/webpage/system/druid/index.html of the component Druid Monitoring Interface. The manipulation leads to improper...

6.9CVSS5.1AI score0.00616EPSS
SaveExploits0References1
Rows per page
Query Builder