Lucene search
+L

697 matches found

CVE
CVE
added 2025/08/22 11:43 a.m.23 views

CVE-2025-9258

CVE-2025-9258 concerns WebITR (Uniong). The vulnerability is an Arbitrary File Reading via an Absolute Path Traversal flaw in WebITR, allowing remote attackers with regular privileges to download arbitrary system files. Connected sources provide details on affected product (WebITR by Uniong) and ...

7.1CVSS7.4AI score0.00538EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2025/08/22 11:43 a.m.13 views

CVE-2025-9258 Uniong|WebITR - Arbitrary File Reading through Path Traversal

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...

7.1CVSS0.00538EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/08/22 11:41 a.m.14 views

CVE-2025-9257 Uniong|WebITR - Arbitrary File Reading through Path Traversal

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...

7.1CVSS0.00538EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/08/22 11:41 a.m.6 views

CVE-2025-9257 Uniong|WebITR - Arbitrary File Reading through Path Traversal

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...

7.1CVSS6.8AI score0.00538EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/08/22 11:34 a.m.19 views

CVE-2025-9256 Uniong|WebITR - Arbitrary File Reading through Path Traversal

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...

7.1CVSS0.00538EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/08/22 11:34 a.m.4 views

CVE-2025-9256 Uniong|WebITR - Arbitrary File Reading through Path Traversal

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...

7.1CVSS7.4AI score0.00538EPSS
SaveExploits0References2
CVE
CVE
added 2025/08/22 11:34 a.m.27 views

CVE-2025-9256

CVE-2025-9256 affects WebITR (Uniong). An Arbitrary File Reading via Absolute Path Traversal allows remote attackers with regular privileges to download arbitrary system files. Exploitation vectors are network-based with low complexity per CVSS data; impact is high confidentiality. The provided d...

7.1CVSS7.4AI score0.00538EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2025/08/22 12:22 a.m.22 views

CVE-2025-50901

JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 2025-05-19 contains incorrect authentication bypass vulnerability, which can lead to arbitrary file reading...

9.8CVSS7.6AI score0.00441EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/08/22 12:0 a.m.14 views

PT-2025-34346 · Uniong · Webitr

Name of the Vulnerable Software and Affected Versions: WebITR affected versions not specified Description: WebITR developed by Uniong has an Arbitrary File Reading vulnerability. This allows remote attackers with regular privileges to exploit Absolute Path Traversal and download arbitrary system...

7.1CVSS7.1AI score0.00538EPSS
SaveExploits0References6
NVD
NVD
added 2025/08/20 5:15 p.m.12 views

CVE-2025-50901

JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 2025-05-19 contains incorrect authentication bypass vulnerability, which can lead to arbitrary file reading...

9.8CVSS0.00441EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/08/20 12:0 a.m.12 views

PT-2025-34121 · Jeewms · Jeewms

Name of the Vulnerable Software and Affected Versions: JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 Description: JeeWMS contains an incorrect authentication bypass vulnerability, which can lead to arbitrary file reading. Recommendations: At the moment, there is no information about a newer...

9.8CVSS6.6AI score0.00441EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/08/20 12:0 a.m.23 views

CVE-2025-50901

JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 2025-05-19 contains incorrect authentication bypass vulnerability, which can lead to arbitrary file reading...

7.6AI score0.00441EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/08/20 12:0 a.m.9 views

JeeWMS 安全漏洞

JeeWMS is a JAVA-based warehouse management system from China Huayi JeeWMS. A security vulnerability exists in JeeWMS, which stems from an authentication bypass that could lead to arbitrary file reading...

9.8CVSS7AI score0.00441EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2025/08/20 12:0 a.m.18 views

CVE-2025-50901

JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 2025-05-19 contains incorrect authentication bypass vulnerability, which can lead to arbitrary file reading...

0.00441EPSS
SaveExploits1References1
CVE
CVE
added 2025/08/20 12:0 a.m.38 views

CVE-2025-50901

CVE-2025-50901 affects JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644. Root cause: incorrect authentication bypass allowing arbitrary file reading. Impact: potential disclosure of sensitive files. CVSS v3.1 base score 9.8 (CRITICAL), vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H; attack vector: NET...

9.8CVSS7.6AI score0.00441EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2025/08/19 12:0 a.m.4 views

EzGED 安全漏洞

EzGED is an enterprise-level electronic document management system from the French company EzGED. A security vulnerability exists in EzGED version 3.5.0, which stems from insufficient access control and input validation, and could lead to arbitrary file reading...

5.3CVSS6.8AI score0.00709EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/08/15 9:28 a.m.13 views

CVE-2025-8909

Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...

7.1CVSS7.4AI score0.00632EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/15 9:28 a.m.16 views

CVE-2025-8912

Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files...

8.7CVSS7.6AI score0.00575EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/13 10:15 a.m.18 views

CVE-2025-8912

Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files...

8.7CVSS0.00575EPSS
SaveExploits0References2
OSV
OSV
added 2025/08/13 9:15 a.m.7 views

CVE-2025-8909

Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...

7.1CVSS5.9AI score0.00632EPSS
SaveExploits0References2
Rows per page
Query Builder