Lucene search
+L

1004 matches found

RedhatCVE
RedhatCVE
added 2025/12/31 5:11 a.m.9 views

CVE-2025-15220

A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. This affects the function init of the file src/main/java/com/sohu/cache/web/controller/LoginController.java. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be...

6.1CVSS5.8AI score0.00282EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/12/30 9:9 p.m.14 views

CVE-2025-15203

A vulnerability was found in SohuTV CacheCloud up to 3.2.0. This impacts the function index of the file src/main/java/com/sohu/cache/web/controller/ResourceController.java. Performing manipulation results in cross site scripting. It is possible to initiate the attack remotely. The exploit has bee...

4.8CVSS5.7AI score0.00211EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/12/30 12:30 p.m.6 views

EUVD-2025-205717

Missing Authorization vulnerability in tychesoftwares Product Delivery Date for WooCommerce – Lite product-delivery-date-for-woocommerce-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Delivery Date for WooCommerce – Lite: from n/a through =...

6.5AI score0.00183EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/30 10:47 a.m.33 views

CVE-2025-69027 WordPress Product Delivery Date for WooCommerce – Lite plugin <= 3.2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in tychesoftwares Product Delivery Date for WooCommerce – Lite product-delivery-date-for-woocommerce-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Delivery Date for WooCommerce – Lite: from n/a through =...

5.3CVSS0.00183EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/30 10:47 a.m.4 views

CVE-2025-69027 WordPress Product Delivery Date for WooCommerce – Lite plugin <= 3.2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in tychesoftwares Product Delivery Date for WooCommerce – Lite product-delivery-date-for-woocommerce-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Delivery Date for WooCommerce – Lite: from n/a through =...

5.3CVSS6.6AI score0.00183EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/30 6:3 a.m.19 views

CVE-2025-15175

A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. Affected by this issue is the function doAppList/appCommandAnalysis of the file src/main/java/com/sohu/cache/web/controller/AppController.java. Performing manipulation results in cross site scripting. It is possible to initiate the...

5.4CVSS5.8AI score0.00249EPSS
SaveExploits1References1
NVD
NVD
added 2025/12/30 5:16 a.m.6 views

CVE-2025-15221

A flaw has been found in SohuTV CacheCloud up to 3.2.0. This vulnerability affects the function index of the file src/main/java/com/sohu/cache/web/controller/AppDataMigrateController.java. This manipulation causes cross site scripting. Remote exploitation of the attack is possible. The exploit ha...

5.4CVSS0.00203EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/12/30 5:2 a.m.3 views

EUVD-2025-205690

A flaw has been found in SohuTV CacheCloud up to 3.2.0. This vulnerability affects the function index of the file src/main/java/com/sohu/cache/web/controller/AppDataMigrateController.java. This manipulation causes cross site scripting. Remote exploitation of the attack is possible. The exploit ha...

5.1CVSS3.6AI score0.00203EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/12/30 4:32 a.m.8 views

EUVD-2025-205685

A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. This affects the function init of the file src/main/java/com/sohu/cache/web/controller/LoginController.java. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be...

5.3CVSS5.4AI score0.00282EPSS
SaveExploits1References5
CVE
CVE
added 2025/12/30 4:32 a.m.16 views

CVE-2025-15220

SohuTV CacheCloud

6.1CVSS5.6AI score0.00282EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2025/12/30 4:32 a.m.5 views

CVE-2025-15220 SohuTV CacheCloud LoginController.java init cross site scripting

A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. This affects the function init of the file src/main/java/com/sohu/cache/web/controller/LoginController.java. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be...

5.3CVSS4.5AI score0.00282EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.7 views

CacheCloud 代码注入漏洞

CacheCloud is a Redis cloud management platform open-sourced by SohuTV. A code injection vulnerability exists in CacheCloud 3.2.0 and earlier versions, which stems from an incorrect operation of the init function in the file src/main/java/com/sohu/cache/web/controller/LoginController.java, which...

6.1CVSS4.9AI score0.00282EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/12/29 9:30 p.m.4 views

EUVD-2025-205648

A flaw has been found in SohuTV CacheCloud up to 3.2.0. The impacted element is the function redirectNoPower of the file src/main/java/com/sohu/cache/web/controller/WebResourceController.java. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The...

5.1CVSS3.6AI score0.00203EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/12/29 8:2 p.m.4 views

CVE-2025-15203 SohuTV CacheCloud ResourceController.java index cross site scripting

A vulnerability was found in SohuTV CacheCloud up to 3.2.0. This impacts the function index of the file src/main/java/com/sohu/cache/web/controller/ResourceController.java. Performing manipulation results in cross site scripting. It is possible to initiate the attack remotely. The exploit has bee...

4.8CVSS5.5AI score0.00211EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/12/29 7:32 p.m.36 views

CVE-2025-15202 SohuTV CacheCloud TaskController.java taskQueueList cross site scripting

A vulnerability has been found in SohuTV CacheCloud up to 3.2.0. This affects the function taskQueueList of the file src/main/java/com/sohu/cache/web/controller/TaskController.java. Such manipulation leads to cross site scripting. The attack may be performed from remote. The exploit has been...

4.8CVSS0.00211EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/12/29 7:2 p.m.3 views

CVE-2025-15201 SohuTV CacheCloud WebResourceController.java redirectNoPower cross site scripting

A flaw has been found in SohuTV CacheCloud up to 3.2.0. The impacted element is the function redirectNoPower of the file src/main/java/com/sohu/cache/web/controller/WebResourceController.java. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The...

5.1CVSS5.3AI score0.00203EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/12/29 6:32 p.m.39 views

CVE-2025-15200 SohuTV CacheCloud AppClientDataShowController.java doIndex cross site scripting

A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. The affected element is the function getExceptionStatisticsByClient/getCommandStatisticsByClient/doIndex of the file src/main/java/com/sohu/cache/web/controller/AppClientDataShowController.java. The manipulation results in cross site...

4.8CVSS0.00258EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
added 2025/12/29 6:3 p.m.15 views

CVE-2025-15145

A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. This affects the function doTotalList of the file src/main/java/com/sohu/cache/web/controller/TotalManageController.java. Such manipulation leads to cross site scripting. The attack can be launched remotely. The exploit...

6.1CVSS3AI score0.00207EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/12/29 6:2 a.m.6 views

EUVD-2025-205557

A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. Affected by this issue is the function doAppList/appCommandAnalysis of the file src/main/java/com/sohu/cache/web/controller/AppController.java. Performing manipulation results in cross site scripting. It is possible to initiate the...

5.1CVSS3.9AI score0.00249EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/12/29 5:32 a.m.8 views

EUVD-2025-205553

A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. Affected by this vulnerability is the function doAppAuditList of the file src/main/java/com/sohu/cache/web/controller/AppManageController.java. Such manipulation leads to cross site scripting. The attack may be performed...

5.1CVSS3.6AI score0.00203EPSS
SaveExploits1References6
Rows per page
Query Builder