Lucene search
+L

20141 matches found

CVE
CVE
added 2026/02/23 9:32 p.m.24 views

CVE-2026-3028

CVE-2026-3028 affects erzhongxmu JEEWMS up to 3.7. The vulnerability impacts function doAdd in src/main/java/com/jeecg/demo/controller/JeecgListDemoController.java, where an argument named Name can be manipulated to trigger cross-site scripting. The issue can be remotely exploited; public exploit...

6.1CVSS3.8AI score0.00308EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2026/02/23 9:32 p.m.34 views

CVE-2026-3028 erzhongxmu JEEWMS JeecgListDemoController.java doAdd cross site scripting

A vulnerability was determined in erzhongxmu JEEWMS up to 3.7. This vulnerability affects the function doAdd of the file src/main/java/com/jeecg/demo/controller/JeecgListDemoController.java. This manipulation of the argument Name causes cross site scripting. The attack may be initiated remotely...

5.3CVSS0.00308EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2026/02/23 9:32 p.m.12 views

CVE-2026-3028

A vulnerability was determined in erzhongxmu JEEWMS up to 3.7. This vulnerability affects the function doAdd of the file src/main/java/com/jeecg/demo/controller/JeecgListDemoController.java. This manipulation of the argument Name causes cross site scripting. The attack may be initiated remotely...

6.1CVSS3.9AI score0.00308EPSS
SaveExploits1References4Affected Software1
RedHat Linux
RedHat Linux
added 2026/02/23 3:20 p.m.6 views

kernel: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue When the task management thread processes reply queues while the reset thread resets them, the task management thread accesses an invalid queue ID 0xFFFF, s...

7.8CVSS5.7AI score0.00299EPSS
SaveExploits0References5
NVD
NVD
added 2026/02/23 8:16 a.m.21 views

CVE-2026-2978

A vulnerability was detected in FastApiAdmin up to 2.2.0. This vulnerability affects the function uploadfilecontroller of the file /backend/app/api/v1/modulesystem/params/controller.py of the component Scheduled Task API. Performing a manipulation results in unrestricted upload. The attack can be...

8.8CVSS0.00345EPSS
SaveExploits1References4
OSV
OSV
added 2026/02/23 8:16 a.m.5 views

CVE-2026-2978

A vulnerability was detected in FastApiAdmin up to 2.2.0. This vulnerability affects the function uploadfilecontroller of the file /backend/app/api/v1/modulesystem/params/controller.py of the component Scheduled Task API. Performing a manipulation results in unrestricted upload. The attack can be...

8.8CVSS5.5AI score0.00345EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2026/02/23 8:2 a.m.39 views

CVE-2026-2979 FastApiAdmin Scheduled Task API controller.py user_avatar_upload_controller unrestricted upload

A flaw has been found in FastApiAdmin up to 2.2.0. This issue affects the function useravataruploadcontroller of the file /backend/app/api/v1/modulesystem/user/controller.py of the component Scheduled Task API. Executing a manipulation can lead to unrestricted upload. The attack can be launched...

6.5CVSS0.00294EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2026/02/23 8:2 a.m.9 views

CVE-2026-2979 FastApiAdmin Scheduled Task API controller.py user_avatar_upload_controller unrestricted upload

A flaw has been found in FastApiAdmin up to 2.2.0. This issue affects the function useravataruploadcontroller of the file /backend/app/api/v1/modulesystem/user/controller.py of the component Scheduled Task API. Executing a manipulation can lead to unrestricted upload. The attack can be launched...

6.5CVSS5.2AI score0.00294EPSS
SaveExploits1References4
CVE
CVE
added 2026/02/23 7:32 a.m.35 views

CVE-2026-2978

CVE-2026-2978 relates to FastApiAdmin (up to 2.2.0) and affects the file path /backend/app/api/v1/module_system/params/controller.py, specifically the upload_file_controller function of the Scheduled Task API. The vulnerability arises from input manipulation that permits unrestricted file uploads...

8.8CVSS6.3AI score0.00345EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2026/02/23 7:32 a.m.39 views

CVE-2026-2978 FastApiAdmin Scheduled Task API controller.py upload_file_controller unrestricted upload

A vulnerability was detected in FastApiAdmin up to 2.2.0. This vulnerability affects the function uploadfilecontroller of the file /backend/app/api/v1/modulesystem/params/controller.py of the component Scheduled Task API. Performing a manipulation results in unrestricted upload. The attack can be...

6.5CVSS0.00345EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2026/02/23 7:2 a.m.38 views

CVE-2026-2977 FastApiAdmin Scheduled Task API controller.py upload_controller unrestricted upload

A security vulnerability has been detected in FastApiAdmin up to 2.2.0. This affects the function uploadcontroller of the file /backend/app/api/v1/modulecommon/file/controller.py of the component Scheduled Task API. Such manipulation leads to unrestricted upload. It is possible to launch the atta...

6.5CVSS0.00293EPSS
SaveExploits1References4
CVE
CVE
added 2026/02/23 7:2 a.m.35 views

CVE-2026-2977

CVE-2026-2977 affects FastApiAdmin up to 2.2.0. The vulnerability exists in the upload_controller function in /backend/app/api/v1/module_common/file/controller.py of the Scheduled Task API, enabling unrestricted file upload. Exploitation is remote and has been publicly disclosed per multiple sour...

8.8CVSS6.2AI score0.00293EPSS
SaveExploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/02/23 7:2 a.m.9 views

CVE-2026-2977

A security vulnerability has been detected in FastApiAdmin up to 2.2.0. This affects the function uploadcontroller of the file /backend/app/api/v1/modulecommon/file/controller.py of the component Scheduled Task API. Such manipulation leads to unrestricted upload. It is possible to launch the atta...

6.5CVSS6.1AI score0.00293EPSS
SaveExploits1References4
NVD
NVD
added 2026/02/23 6:16 a.m.10 views

CVE-2026-2972

A vulnerability was determined in a466350665 Smart-SSO up to 2.1.1. This affects the function Save of the file smart-sso-server/src/main/java/openjoe/smart/sso/server/controller/admin/UserController.java of the component Role Edit Page. Executing a manipulation can lead to cross site scripting. T...

5.4CVSS0.00259EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2026/02/23 5:2 a.m.5 views

CVE-2026-2972

A vulnerability was determined in a466350665 Smart-SSO up to 2.1.1. This affects the function Save of the file smart-sso-server/src/main/java/openjoe/smart/sso/server/controller/admin/UserController.java of the component Role Edit Page. Executing a manipulation can lead to cross site scripting. T...

4.8CVSS3.1AI score0.00259EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2026/02/23 5:2 a.m.27 views

CVE-2026-2972

A466350665 Smart-SSO up to 2.1.1 contains a cross-site scripting vulnerability in the Save function of smart-sso-server/src/main/java/openjoe/smart/sso/server/controller/admin/UserController.java (Role Edit Page). The flaw, triggered by manipulation, can be exploited remotely and has publicly dis...

5.4CVSS3.2AI score0.00259EPSS
SaveExploits1References4Affected Software1
RedhatCVE
RedhatCVE
added 2026/02/23 1:20 a.m.34 views

CVE-2026-2895

A security flaw has been discovered in funadmin up to 7.1.0-rc4. Affected by this issue is the function repass of the file app/frontend/controller/Member.php. Performing a manipulation of the argument forgetcode/vercode results in weak password recovery. Remote exploitation of the attack is...

8.1CVSS4.3AI score0.00392EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2026/02/23 12:0 a.m.31 views

PT-2026-21506

A flaw has been found in FastApiAdmin up to 2.2.0. This issue affects the function user avatar upload controller of the file /backend/app/api/v1/module system/user/controller.py of the component Scheduled Task API. Executing a manipulation can lead to unrestricted upload. The attack can be launch...

6.5CVSS5.2AI score0.00294EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2026/02/23 12:0 a.m.18 views

FastAPI Admin 代码问题漏洞

FastAPI Admin is an open-source management dashboard based on FastAPI and TortoiseORM. Versions of FastAPI Admin 2.2.0 and earlier have code vulnerabilities. These vulnerabilities stem from improper handling of the uploadfilecontroller function in the...

8.8CVSS6.7AI score0.00345EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2026/02/23 12:0 a.m.11 views

PT-2026-21503

A security vulnerability has been detected in FastApiAdmin up to 2.2.0. This affects the function upload controller of the file /backend/app/api/v1/module common/file/controller.py of the component Scheduled Task API. Such manipulation leads to unrestricted upload. It is possible to launch the...

6.5CVSS6.2AI score0.00293EPSS
SaveExploits1References4
Rows per page
Query Builder