Lucene search
+L

20177 matches found

OSV
OSV
added 2026/01/05 1:15 a.m.9 views

CVE-2025-15449

A vulnerability was determined in cld378632668 JavaMall up to 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0. Affected is the function delete of the file src/main/java/com/macro/mall/controller/MinioController.java. This manipulation of the argument objectName causes path traversal. The attack can be...

9.1CVSS5.6AI score0.00653EPSS
SaveExploits1References4
NVD
NVD
added 2026/01/05 1:15 a.m.8 views

CVE-2025-15449

A vulnerability was determined in cld378632668 JavaMall up to 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0. Affected is the function delete of the file src/main/java/com/macro/mall/controller/MinioController.java. This manipulation of the argument objectName causes path traversal. The attack can be...

9.1CVSS0.00653EPSS
SaveExploits1References4
EUVD
EUVD
added 2026/01/05 12:32 a.m.7 views

EUVD-2026-0921

A vulnerability was determined in cld378632668 JavaMall up to 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0. Affected is the function delete of the file src/main/java/com/macro/mall/controller/MinioController.java. This manipulation of the argument objectName causes path traversal. The attack can be...

5.5CVSS5.4AI score0.00653EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2026/01/05 12:32 a.m.38 views

CVE-2025-15449 cld378632668 JavaMall MinioController.java delete path traversal

A vulnerability was determined in cld378632668 JavaMall up to 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0. Affected is the function delete of the file src/main/java/com/macro/mall/controller/MinioController.java. This manipulation of the argument objectName causes path traversal. The attack can be...

5.5CVSS0.00653EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2026/01/05 12:0 a.m.9 views

PT-2026-1200

Name of the Vulnerable Software and Affected Versions JavaMall versions prior to 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0 Description A flaw exists in JavaMall that allows for unrestricted file uploads. This issue impacts the Upload function within the file...

9.8CVSS6.2AI score0.0033EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2026/01/05 12:0 a.m.7 views

mall 路径遍历漏洞

mall is a macro individual developer of a set of e-commerce system, including the front mall system and backend management system. mall 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0 and previous versions of the path traversal vulnerability exists, the vulnerability stems from the file...

9.1CVSS5.5AI score0.00653EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2026/01/05 12:0 a.m.8 views

mall 代码问题漏洞

mall is a macro individual developer of a set of e-commerce system, including the front mall system and backend management system. A code issue vulnerability exists in mall 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0 and prior versions, which stems from an incorrect operation of the function in the...

9.8CVSS6.5AI score0.0033EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/01/05 12:0 a.m.18 views

PT-2026-1300

Name of the Vulnerable Software and Affected Versions Silicon Labs Z-Wave Protocol Controller affected versions not specified Description An integer underflow condition exists in the Silicon Labs Z-Wave Protocol Controller, potentially leading to out-of-bounds memory reads. This occurs due to an...

5.3CVSS6.5AI score0.00234EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/01/05 12:0 a.m.9 views

WordPress plugin Geo Controller 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.9AI score0.00138EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/05 12:0 a.m.8 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from an unset error code in the mchpeicdomainalloc function in the mchp-eic interrupt controller driver, whi...

6.3AI score0.00168EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/01/05 12:0 a.m.11 views

PT-2026-1281

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in INTINITUM FORM Geo Controller allows DOM-Based XSS.This issue affects Geo Controller: from n/a through 8.5.2...

6.5CVSS6.4AI score0.00138EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/05 12:0 a.m.12 views

Silicon Labs Z-Wave Protocol Controller 安全漏洞

Silicon Labs Z-Wave Protocol Controller is an IoT gateway middleware from Silicon Labs, USA. A security vulnerability exists in Silicon Labs Z-Wave Protocol Controller that originates from an integer underflow that could result in an out-of-bounds memory read...

5.3CVSS6.8AI score0.00234EPSS
SaveExploits0References2
OSV
OSV
added 2026/01/04 2:15 a.m.10 views

CVE-2026-0574

A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function saveUserRole of the file warehouse\src\main\java\com\yeqifu\sys\controller\UserController.java of the component Request Handler. This manipulation causes improper...

8.8CVSS5.4AI score0.00305EPSS
SaveExploits1References5
EUVD
EUVD
added 2026/01/04 2:2 a.m.10 views

EUVD-2026-0783

A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function saveUserRole of the file warehouse\src\main\java\com\yeqifu\sys\controller\UserController.java of the component Request Handler. This manipulation causes improper...

6.5CVSS6.2AI score0.00305EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2026/01/04 1:4 a.m.50 views

CVE-2025-64124

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Nuvation Energy Multi-Stack Controller MSC allows OS Command Injection.This issue affects Multi-Stack Controller MSC: before 2.5.1...

8.7CVSS7.1AI score0.00916EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/04 12:0 a.m.8 views

warehouse 授权问题漏洞

warehouse is a spring boot based logistics management system for small and medium-sized warehouses by yeqifu individual developers. There is an authorization issue vulnerability in warehouse, which originates from improper authorization of the function saveUserRole in the file...

8.8CVSS6.4AI score0.00305EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2026/01/03 10:4 p.m.21 views

CVE-2025-64122

Insufficiently Protected Credentials vulnerability in Nuvation Energy Multi-Stack Controller MSC allows Signature Spoofing by Key Theft.This issue affects Multi-Stack Controller MSC: through 2.5.1...

7.2CVSS7AI score0.00082EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/03 10:4 p.m.23 views

CVE-2025-64120

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Nuvation Energy Multi-Stack Controller MSC allows OS Command Injection.This issue affects Multi-Stack Controller MSC: from 2.3.8 before 2.5.1...

9.4CVSS7AI score0.00916EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/03 10:4 p.m.23 views

CVE-2025-64121

Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controller MSC allows Authentication Bypass.This issue affects Multi-Stack Controller MSC: from 2.3.8 before 2.5.1...

10CVSS7AI score0.00359EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/03 10:4 p.m.32 views

CVE-2025-64123

Unintended Proxy or Intermediary vulnerability in Nuvation Energy Multi-Stack Controller MSC allows Network Boundary Bridging.This issue affects Multi-Stack Controller MSC: through and including release 2.5.1...

7.9CVSS7AI score0.00279EPSS
SaveExploits0References1
Rows per page
Query Builder