Lucene search
+L

160 matches found

CNNVD
CNNVD
•added 2025/12/29 12:00 a.m.•33 views

CacheCloud code injection vulnerability

CacheCloud is a Redis cloud management platform open-sourced by SohuTV. A code injection vulnerability exists in CacheCloud 3.2.0 and earlier versions, which originates from an incorrect operation of the function doQuartzList in the file...

4.8CVSS5AI score0.00247EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/12/28 6:30 p.m.•20 views

EUVD-2025-205518

A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. This affects the function doTotalList of the file src/main/java/com/sohu/cache/web/controller/TotalManageController.java. Such manipulation leads to cross site scripting. The attack can be launched remotely. The exploit...

4.8CVSS5.2AI score0.00243EPSS
SaveExploits1References6
NVD
NVD
•added 2025/12/28 6:15 p.m.•22 views

CVE-2025-15146

A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. This impacts the function doUserList of the file src/main/java/com/sohu/cache/web/controller/UserManageController.java. Performing manipulation results in cross site scripting. The attack may be initiated remotely. The exploit is now...

4.8CVSS0.00239EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/28 5:32 p.m.•43 views

CVE-2025-15146

CVE-2025-15146 affects SohuTV CacheCloud up to version 3.2.0. The vulnerability resides in doUserList (src/main/java/com/sohu/cache/web/controller/UserManageController.java); manipulated input can trigger cross-site scripting. The attack is remote and the exploit is publicly available. Mitigation...

4.8CVSS3.6AI score0.00239EPSS
SaveExploits1References5Affected Software1
osv_cve
osv_cve
•added 2025/12/28 5:32 p.m.•25 views

CVE-2025-15146 SohuTV CacheCloud UserManageController.java doUserList cross site scripting

A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. This impacts the function doUserList of the file src/main/java/com/sohu/cache/web/controller/UserManageController.java. Performing manipulation results in cross site scripting. The attack may be initiated remotely. The exploit is now...

4.8CVSS4.5AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2025/12/28 5:32 p.m.•11 views

CVE-2025-15146 SohuTV CacheCloud UserManageController.java doUserList cross site scripting

A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. This impacts the function doUserList of the file src/main/java/com/sohu/cache/web/controller/UserManageController.java. Performing manipulation results in cross site scripting. The attack may be initiated remotely. The exploit is now...

4.8CVSS3.6AI score0.00239EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/12/28 5:32 p.m.•57 views

CVE-2025-15146 SohuTV CacheCloud UserManageController.java doUserList cross site scripting

A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. This impacts the function doUserList of the file src/main/java/com/sohu/cache/web/controller/UserManageController.java. Performing manipulation results in cross site scripting. The attack may be initiated remotely. The exploit is now...

4.8CVSS0.00239EPSS
SaveExploits1References5
Mend
Mend
•added 2025/12/28 5:32 p.m.•7 views

CVE-2025-15146

A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. This impacts the function doUserList of the file src/main/java/com/sohu/cache/web/controller/UserManageController.java. Performing manipulation results in cross site scripting. The attack may be initiated remotely. The exploit is now...

4.8CVSS3.6AI score0.00239EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/12/28 5:32 p.m.•23 views

EUVD-2025-205517

A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. This impacts the function doUserList of the file src/main/java/com/sohu/cache/web/controller/UserManageController.java. Performing manipulation results in cross site scripting. The attack may be initiated remotely. The exploit is now...

4.8CVSS3.6AI score0.00239EPSS
SaveExploits1References6
NVD
NVD
•added 2025/12/28 5:16 p.m.•21 views

CVE-2025-15145

A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. This affects the function doTotalList of the file src/main/java/com/sohu/cache/web/controller/TotalManageController.java. Such manipulation leads to cross site scripting. The attack can be launched remotely. The exploit...

6.1CVSS0.00243EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/12/28 5:02 p.m.•16 views

CVE-2025-15145 SohuTV CacheCloud TotalManageController.java doTotalList cross site scripting

A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. This affects the function doTotalList of the file src/main/java/com/sohu/cache/web/controller/TotalManageController.java. Such manipulation leads to cross site scripting. The attack can be launched remotely. The exploit...

4.8CVSS4.1AI score
SaveExploits0References7
Cvelist
Cvelist
•added 2025/12/28 5:02 p.m.•56 views

CVE-2025-15145 SohuTV CacheCloud TotalManageController.java doTotalList cross site scripting

A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. This affects the function doTotalList of the file src/main/java/com/sohu/cache/web/controller/TotalManageController.java. Such manipulation leads to cross site scripting. The attack can be launched remotely. The exploit...

4.8CVSS0.00243EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/12/28 5:02 p.m.•10 views

CVE-2025-15145 SohuTV CacheCloud TotalManageController.java doTotalList cross site scripting

A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. This affects the function doTotalList of the file src/main/java/com/sohu/cache/web/controller/TotalManageController.java. Such manipulation leads to cross site scripting. The attack can be launched remotely. The exploit...

4.8CVSS3.5AI score0.00243EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/28 5:02 p.m.•41 views

CVE-2025-15145

SohuTV CacheCloud is affected up to version 3.2.0. The vulnerability resides in doTotalList within TotalManageController.java, allowing cross-site scripting due to improper input handling. The flaw can be triggered remotely, and the exploit has been publicly disclosed. Multiple sources confirm th...

6.1CVSS3.5AI score0.00243EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
•added 2025/12/28 12:00 a.m.•19 views

CacheCloud code injection vulnerability

CacheCloud is a Redis cloud management platform open-sourced by SohuTV. A code injection vulnerability exists in SohuTV CacheCloud 3.2.0 and earlier versions, which originates from a misbehavior of the function doUserList in the file...

4.8CVSS4.9AI score0.00239EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/28 12:00 a.m.•8 views

CVE-2025-15146: Improper Neutralization of Input During Web Page Generation

A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. This impacts the function doUserList of the file src/main/java/com/sohu/cache/web/controller/UserManageController.java. Performing manipulation results in cross site scripting. The attack may be initiated remotely. The exploit is now...

4.8CVSS3.6AI score0.00239EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/28 12:00 a.m.•7 views

CVE-2025-15145: Improper Neutralization of Input During Web Page Generation

A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. This affects the function doTotalList of the file src/main/java/com/sohu/cache/web/controller/TotalManageController.java. Such manipulation leads to cross site scripting. The attack can be launched remotely. The exploit...

6.1CVSS3.5AI score0.00243EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/12/28 12:00 a.m.•23 views

PT-2025-53661

Name of the Vulnerable Software and Affected Versions SohuTV CacheCloud versions up to 3.2.0 Description A security issue has been identified in SohuTV CacheCloud. This issue allows for cross-site scripting through manipulation of the doTotalList function located in the file...

6.1CVSS4.8AI score0.00243EPSS
SaveExploits1References15
CNNVD
CNNVD
•added 2025/12/28 12:00 a.m.•16 views

CacheCloud code injection vulnerability

CacheCloud is a Redis cloud management platform open-sourced by SohuTV. A code injection vulnerability exists in CacheCloud 3.2.0 and earlier versions, which originates from a misbehavior of the function doTotalList in the file src/main/java/com/sohu/cache/web/controller/TotalManageController.jav...

6.1CVSS4.9AI score0.00243EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/12/28 12:00 a.m.•25 views

PT-2025-53662

Name of the Vulnerable Software and Affected Versions SohuTV CacheCloud versions up to 3.2.0 Description A security issue exists in SohuTV CacheCloud. Manipulation of the doUserList function within the file src/main/java/com/sohu/cache/web/controller/UserManageController.java can lead to cross si...

4.8CVSS3.9AI score0.00239EPSS
SaveExploits1References14
Rows per page
Query Builder