Lucene search
+L

131 matches found

Positive Technologies
Positive Technologies
added 2025/12/29 12:00 a.m.8 views

PT-2025-53695

Name of the Vulnerable Software and Affected Versions SohuTV CacheCloud versions up to 3.2.0 Description A security issue exists in SohuTV CacheCloud. This issue allows for cross site scripting, potentially exploitable from a remote location. The vulnerable component is the doAppAuditList functio...

5.4CVSS5.9AI score0.00233EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2025/12/29 12:00 a.m.14 views

PT-2025-53694

Name of the Vulnerable Software and Affected Versions SohuTV CacheCloud versions through 3.2.0 Description A weakness exists in SohuTV CacheCloud that allows for cross site scripting. The issue is located in the advancedAnalysis function within the...

5.4CVSS5.1AI score0.00233EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2025/12/29 12:00 a.m.19 views

PT-2025-53690

Name of the Vulnerable Software and Affected Versions SohuTV CacheCloud versions up to 3.2.0 Description A security flaw exists in SohuTV CacheCloud that allows for cross site scripting. This issue impacts the preview function within the file...

5.4CVSS5.1AI score0.00233EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2025/12/29 12:00 a.m.10 views

CacheCloud 代码注入漏洞

CacheCloud is a Redis cloud management platform open-sourced by SohuTV. A code injection vulnerability exists in CacheCloud 3.2.0 and earlier versions, which stems from an incorrect manipulation of the function index in the file src/main/java/com/sohu/cache/web/controller/ServerController.java,...

5.4CVSS4.6AI score0.00233EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/12/29 12:00 a.m.10 views

PT-2025-53787

Name of the Vulnerable Software and Affected Versions SohuTV CacheCloud versions up to 3.2.0 Description A flaw exists in SohuTV CacheCloud that allows for cross site scripting. This issue is related to the taskQueueList function within the file...

4.8CVSS5.5AI score0.00242EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2025/12/29 12:00 a.m.17 views

PT-2025-53792

Name of the Vulnerable Software and Affected Versions SohuTV CacheCloud versions up to 3.2.0 Description A cross site scripting issue exists in SohuTV CacheCloud. The doQuartzList function within the src/main/java/com/sohu/cache/web/controller/QuartzManageController.java file is affected. Remote...

4.8CVSS5.8AI score0.00242EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2025/12/29 12:00 a.m.23 views

CacheCloud 代码注入漏洞

CacheCloud is a Redis cloud management platform open-sourced by SohuTV. A code injection vulnerability exists in CacheCloud 3.2.0 and earlier versions, which originates from an incorrect operation of the function doQuartzList in the file...

4.8CVSS4AI score0.00242EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/12/29 12:00 a.m.10 views

CacheCloud 代码注入漏洞

CacheCloud is a Redis cloud management platform open-sourced by SohuTV. A code injection vulnerability exists in CacheCloud 3.2.0 and earlier versions, which stems from an incorrect operation of the function preview in file...

5.4CVSS4.8AI score0.00233EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/12/29 12:00 a.m.10 views

CacheCloud 代码注入漏洞

CacheCloud is a Redis cloud management platform open-sourced by SohuTV. A code injection vulnerability exists in CacheCloud 3.2.0 and earlier versions, which stems from a misuse of the function advancedAnalysis in the file src/main/java/com/sohu/cache/web/controller/InstanceController.java. This...

5.4CVSS4.8AI score0.00233EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/12/29 12:00 a.m.12 views

PT-2025-53689

Name of the Vulnerable Software and Affected Versions SohuTV CacheCloud versions up to 3.2.0 Description A security issue exists in SohuTV CacheCloud that allows for cross site scripting. The issue affects the index function within the file...

5.4CVSS5.2AI score0.00233EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2025/12/29 12:00 a.m.11 views

PT-2025-53781

Name of the Vulnerable Software and Affected Versions SohuTV CacheCloud versions up to 3.2.0 Description A cross site scripting issue exists in SohuTV CacheCloud. The issue is related to the redirectNoPower function within the file...

5.4CVSS5.6AI score0.00233EPSS
SaveExploits1References11
CNNVD
CNNVD
added 2025/12/29 12:00 a.m.7 views

CacheCloud 代码注入漏洞

CacheCloud is a Redis cloud management platform open-sourced by SohuTV. A code injection vulnerability exists in CacheCloud 3.2.0 and earlier versions, which originates from a misuse of the function redirectNoPower in the file src/main/java/com/sohu/cache/web/controller/WebResourceController.java...

5.4CVSS4.7AI score0.00233EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/12/29 12:00 a.m.9 views

CacheCloud 代码注入漏洞

CacheCloud is a Redis cloud management platform open-sourced by SohuTV. A code injection vulnerability exists in CacheCloud 3.2.0 and earlier versions, which stems from an incorrect operation of the function doAppAuditList in the file...

5.4CVSS4.8AI score0.00233EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/12/29 12:00 a.m.20 views

PT-2025-53698

Name of the Vulnerable Software and Affected Versions SohuTV CacheCloud versions prior to 3.2.1 Description A cross site scripting issue exists in SohuTV CacheCloud. The doAppList/appCommandAnalysis function within the AppController.java file is affected by this issue. Manipulation of input can...

5.4CVSS6.1AI score0.00277EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2025/12/29 12:00 a.m.12 views

CacheCloud 代码注入漏洞

CacheCloud is a Redis cloud management platform open-sourced by SohuTV. A code injection vulnerability exists in CacheCloud 3.2.0 and earlier versions, which stems from an incorrect operation of the function taskQueueList in the file src/main/java/com/sohu/cache/web/controller/TaskController.java...

4.8CVSS4.1AI score0.00242EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/12/28 6:30 p.m.8 views

EUVD-2025-205518

A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. This affects the function doTotalList of the file src/main/java/com/sohu/cache/web/controller/TotalManageController.java. Such manipulation leads to cross site scripting. The attack can be launched remotely. The exploit...

4.8CVSS5.2AI score0.00238EPSS
SaveExploits1References6
NVD
NVD
added 2025/12/28 6:15 p.m.13 views

CVE-2025-15146

A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. This impacts the function doUserList of the file src/main/java/com/sohu/cache/web/controller/UserManageController.java. Performing manipulation results in cross site scripting. The attack may be initiated remotely. The exploit is now...

4.8CVSS0.00234EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/12/28 5:32 p.m.41 views

CVE-2025-15146 SohuTV CacheCloud UserManageController.java doUserList cross site scripting

A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. This impacts the function doUserList of the file src/main/java/com/sohu/cache/web/controller/UserManageController.java. Performing manipulation results in cross site scripting. The attack may be initiated remotely. The exploit is now...

4.8CVSS0.00234EPSS
SaveExploits1References5
CVE
CVE
added 2025/12/28 5:32 p.m.28 views

CVE-2025-15146

CVE-2025-15146 affects SohuTV CacheCloud up to version 3.2.0. The vulnerability resides in doUserList (src/main/java/com/sohu/cache/web/controller/UserManageController.java); manipulated input can trigger cross-site scripting. The attack is remote and the exploit is publicly available. Mitigation...

4.8CVSS5.6AI score0.00234EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/28 5:32 p.m.4 views

CVE-2025-15146 SohuTV CacheCloud UserManageController.java doUserList cross site scripting

A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. This impacts the function doUserList of the file src/main/java/com/sohu/cache/web/controller/UserManageController.java. Performing manipulation results in cross site scripting. The attack may be initiated remotely. The exploit is now...

4.8CVSS3AI score0.00234EPSS
SaveExploits1References5
Rows per page
Query Builder