Lucene search
+L

3622 matches found

Cvelist
Cvelist
•added 2025/08/22 11:34 a.m.•28 views

CVE-2025-9256 Uniong|WebITR - Arbitrary File Reading through Path Traversal

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...

7.1CVSS0.00551EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/08/22 11:34 a.m.•11 views

CVE-2025-9256 Uniong|WebITR - Arbitrary File Reading through Path Traversal

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...

7.1CVSS7.4AI score0.00551EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/08/22 12:22 a.m.•25 views

CVE-2025-50901

JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 2025-05-19 contains incorrect authentication bypass vulnerability, which can lead to arbitrary file reading...

9.8CVSS7.6AI score0.00441EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/08/22 12:00 a.m.•21 views

PT-2025-34346 · Uniong · Webitr

Name of the Vulnerable Software and Affected Versions: WebITR affected versions not specified Description: WebITR developed by Uniong has an Arbitrary File Reading vulnerability. This allows remote attackers with regular privileges to exploit Absolute Path Traversal and download arbitrary system...

7.1CVSS7.1AI score0.00551EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/22 12:00 a.m.•2 views

CVE-2025-9257: Absolute Path Traversal

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...

7.1CVSS6AI score0.00551EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/22 12:00 a.m.•2 views

CVE-2025-9259: Absolute Path Traversal

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...

7.1CVSS6AI score0.00551EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/22 12:00 a.m.•4 views

CVE-2025-9258: Absolute Path Traversal

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...

7.1CVSS6AI score0.00551EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/22 12:00 a.m.•5 views

CVE-2025-9256: Absolute Path Traversal

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...

7.1CVSS6AI score0.00551EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/20 5:15 p.m.•19 views

CVE-2025-50901

JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 2025-05-19 contains incorrect authentication bypass vulnerability, which can lead to arbitrary file reading...

9.8CVSS0.00441EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/08/20 12:00 a.m.•26 views

CVE-2025-50901

JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 2025-05-19 contains incorrect authentication bypass vulnerability, which can lead to arbitrary file reading...

0.00441EPSS
SaveExploits1References1
CVE
CVE
•added 2025/08/20 12:00 a.m.•61 views

CVE-2025-50901

The JeeWMS warehouse management system (version 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 dated 2025-05-19) is vulnerable to an incorrect authentication bypass . This security flaw allows an attacker to bypass intended authentication mechanisms, potentially leading to arbitrary file reading . Whil...

9.8CVSS7.6AI score0.00441EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/08/20 12:00 a.m.•20 views

PT-2025-34121 · Jeewms · Jeewms

Name of the Vulnerable Software and Affected Versions: JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 Description: JeeWMS contains an incorrect authentication bypass vulnerability, which can lead to arbitrary file reading. Recommendations: At the moment, there is no information about a newer...

9.8CVSS6.6AI score0.00441EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/08/20 12:00 a.m.•26 views

CVE-2025-50901

JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 2025-05-19 contains incorrect authentication bypass vulnerability, which can lead to arbitrary file reading...

7.6AI score0.00441EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/08/20 12:00 a.m.•18 views

JeeWMS 安全漏洞

JeeWMS is a JAVA-based warehouse management system from China Huayi JeeWMS. A security vulnerability exists in JeeWMS, which stems from an authentication bypass that could lead to arbitrary file reading...

9.8CVSS7AI score0.00441EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/20 12:00 a.m.•2 views

CVE-2025-50901: Improper Authentication

JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 2025-05-19 contains incorrect authentication bypass vulnerability, which can lead to arbitrary file reading...

9.8CVSS5.9AI score0.00441EPSS
SaveExploits1References1
Mend
Mend
•added 2025/08/20 12:00 a.m.•2 views

CVE-2025-50901

JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 2025-05-19 contains incorrect authentication bypass vulnerability, which can lead to arbitrary file reading...

9.8CVSS0.00441EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/08/19 12:00 a.m.•10 views

EzGED 安全漏洞

EzGED is an enterprise-level electronic document management system from the French company EzGED. A security vulnerability exists in EzGED version 3.5.0, which stems from insufficient access control and input validation, and could lead to arbitrary file reading...

5.3CVSS6.8AI score0.00709EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2025/08/18 12:00 a.m.•20 views

The vulnerability of the REST Interface component of the Apache Flink streaming and batch data processing platform allows a hacker to read arbitrary files.

The vulnerability of the REST interface component of the Apache Flink streaming and batch data processing platform relates to the use of files and directories accessible to external parties. Exploiting this vulnerability could allow a malicious actor to read arbitrary files remotely...

9.4CVSS7.8AI score0.97809EPSS
SaveExploits15References4Affected Software1
RedhatCVE
RedhatCVE
•added 2025/08/15 9:28 a.m.•27 views

CVE-2025-8909

Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...

7.1CVSS7.4AI score0.00647EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/15 9:28 a.m.•26 views

CVE-2025-8912

Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files...

8.7CVSS7.6AI score0.00579EPSS
SaveExploits0References1
Rows per page
Query Builder