Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2026/01/19 2:19 a.m.2 views

CVE-2026-1050

A flaw has been found in risesoft-y9 Digital-Infrastructure up to 9.6.7. This affects an unknown function of the file source-code/src/main/java/net/risesoft/util/Y9PlatformUtil.java of the component REST Authenticate Endpoint. Executing a manipulation can lead to sql injection. The attack can be...

7.5CVSS6.9AI score0.00019EPSS
Exploits0References1
Snyk
Snyk
added 2026/01/17 6:30 p.m.1 views

Injection

Overview Affected versions of this package are vulnerable to Injection via the REST Authenticate Endpoint in the Y9PlatformUtil.java file. An attacker can access, modify, or disrupt sensitive data by sending specially crafted requests to the affected endpoint. Remediation There is no fixed versio...

7.5CVSS5.6AI score0.00019EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2026/01/17 6:30 p.m.5 views

risesoft-y9 Digital-Infrastructure has a SQL injection vulnerability

A flaw has been found in risesoft-y9 Digital-Infrastructure up to 9.6.7. This affects an unknown function of the file source-code/src/main/java/net/risesoft/util/Y9PlatformUtil.java of the component REST Authenticate Endpoint. Executing a manipulation can lead to sql injection. The attack can be...

7.5CVSS5.3AI score0.00019EPSS
Exploits0References6Affected Software1
NVD
NVD
added 2026/01/17 6:15 p.m.2 views

CVE-2026-1050

A flaw has been found in risesoft-y9 Digital-Infrastructure up to 9.6.7. This affects an unknown function of the file source-code/src/main/java/net/risesoft/util/Y9PlatformUtil.java of the component REST Authenticate Endpoint. Executing a manipulation can lead to sql injection. The attack can be...

7.5CVSS0.00019EPSS
Exploits0References6
EUVD
EUVD
added 2026/01/17 6:2 p.m.2 views

EUVD-2026-3133

A flaw has been found in risesoft-y9 Digital-Infrastructure up to 9.6.7. This affects an unknown function of the file source-code/src/main/java/net/risesoft/util/Y9PlatformUtil.java of the component REST Authenticate Endpoint. Executing a manipulation can lead to sql injection. The attack can be...

7.5CVSS6.3AI score0.00019EPSS
Exploits0References6
CVE
CVE
added 2026/01/17 6:2 p.m.6 views

CVE-2026-1050

CVE-2026-1050 concerns risesoft-y9 Digital-Infrastructure up to 9.6.7. The vulnerability is in the REST Authenticate Endpoint, specifically in Y9PlatformUtil.java, where an attacker can trigger SQL injection via remotely crafted requests. Multiple sources (NVD, Red Hat, circl, OSV, GHSA, Snyk) co...

7.5CVSS6.5AI score0.00019EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/01/17 12:0 a.m.3 views

PT-2026-3366

Name of the Vulnerable Software and Affected Versions risesoft-y9 Digital-Infrastructure versions up to 9.6.7 Description A flaw exists in risesoft-y9 Digital-Infrastructure up to version 9.6.7. The issue affects an unknown function within the file...

7.5CVSS7AI score0.00019EPSS
Exploits0References13
GithubExploit
GithubExploit
added 2025/04/09 8:47 p.m.84 views

Exploit for CVE-2025-492030

CVE-2025-492030 Security Advisory: CVE-2025-492030 Overv...

7.7AI score
Exploits0
Rows per page
Query Builder