Lucene search
+L

104 matches found

osv_cve
osv_cve
•added 2025/01/15 12:15 a.m.•15 views

CVE-2024-57760

JeeWMS before v2025.01.01 was discovered to contain a SQL injection vulnerability via the ReportId parameter at /core/CGReportDao.java...

6.5CVSS5.8AI score0.00366EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/01/14 12:00 a.m.•19 views

JeeWMS 安全漏洞

JeeWMS is a JAVA-based warehouse management system from China Huayi JeeWMS. A security vulnerability exists in JeeWMS versions prior to v2025.01.01. An attacker can exploit this vulnerability to execute arbitrary code by uploading specially crafted files...

8.1CVSS7.5AI score0.00481EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/01/14 12:00 a.m.•18 views

PT-2025-3555 · Jeewms · Jeewms

Name of the Vulnerable Software and Affected Versions: JeeWMS versions prior to 2025.01.01 Description: The issue is related to an arbitrary file upload vulnerability in the parserXML method. This allows attackers to execute arbitrary code via uploading a crafted file. There is no information...

8.1CVSS8AI score0.00481EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/01/11 12:00 a.m.•19 views

JeeWMS 注入漏洞

JeeWMS is a JAVA-based warehouse management system from China Huayi JeeWMS. An injection vulnerability exists in JeeWMS 20241229 and earlier versions, which stems from SQL injection in the saveOrUpdate function...

8.8CVSS7AI score0.00519EPSS
SaveExploits1References3
vulnersOsv
vulnersOsv
•added 2024/11/25 7:40 p.m.•1 views

de.arbeitsagentur.opdt:keycloak-extension-filestore (>=1.0.2-25.0, <=1.0.4-25.0), org.keycloak:keycloak-admin-client (25.0.5) +36 more potentially affected by CVE-2024-10039 via org.keycloak:keycloak-core (25.0.5)

org.keycloak:keycloak-core MAVEN version 25.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.arbeitsagentur.opdt:keycloak-extension-filestore =1.0.2-25.0, =1.0.4-25.0 -...

0.00101EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2024/07/22 2:33 p.m.•1 views

net.sf.jguard:jguard-jee (2.0.0-beta-5), net.sf.jguard:jguard-jee-4 (2.0.0-beta-5) +1 more potentially affected by CVE-2024-25638 via dnsjava:dnsjava (2.0.1)

dnsjava:dnsjava MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on dnsjava:dnsjava and may be impacted: - net.sf.jguard:jguard-jee 2.0.0-beta-5 - net.sf.jguard:jguard-jee-4 2.0.0-beta-5 - net.sf.jguard:jguard-jee-extras 2.0.0-beta-5...

8.9CVSS0.00392EPSS
SaveExploits0
The Hacker News
The Hacker News
•added 2022/10/04 6:21 p.m.•40 views

Russian Hacker Arrested in India for Reportedly Helping Students Cheat in JEE-Main Exam

India's Central Bureau of Investigation CBI on Monday disclosed that it has detained a Russian national for allegedly hacking into a software platform used to conduct engineering entrance assessments in the country in 2021. "The said accused was detained by the Bureau of Immigration at Indira...

0.5AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2021/11/15 12:44 p.m.•12 views

All Vulnerabilities for jeeadv.ac.in Patched via Open Bug Bounty

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| jeeadv.ac.in ---|--- Open Bug Bounty...

6.2AI score
SaveExploits0
NVD
NVD
•added 2020/06/29 6:15 p.m.•38 views

CVE-2018-6446

A vulnerability in Brocade Network Advisor Version Before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and install additional JEE applications...

9.8CVSS0.01351EPSS
SaveExploits0References1
Prion
Prion
•added 2020/06/29 6:15 p.m.•36 views

Design/Logic Flaw

A vulnerability in Brocade Network Advisor Version Before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and install additional JEE applications...

7.5CVSS9.3AI score0.01351EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2020/06/29 5:43 p.m.•92 views

CVE-2018-6446

Brocade Network Advisor prior to 14.3.1 is affected by CVE-2018-6446. The issue allows an unauthenticated, remote attacker to log in to the JBoss Administration interface using undocumented credentials and install additional JEE applications. Affected component is the JBoss Web Console interface ...

9.8CVSS9.4AI score0.01351EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/06/29 5:43 p.m.•42 views

CVE-2018-6446

A vulnerability in Brocade Network Advisor Version Before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and install additional JEE applications...

9.5AI score0.01351EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/06/29 12:00 a.m.•5 views

PT-2020-8937

Name of the Vulnerable Software and Affected Versions Brocade Network Advisor versions prior to 14.3.1 Description A vulnerability could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and insta...

9.8CVSS0.01351EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/29 12:00 a.m.•12 views

CVE-2018-6446: Use of Hard-coded Credentials

A vulnerability in Brocade Network Advisor Version Before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and install additional JEE applications...

9.8CVSS5.9AI score0.01351EPSS
SaveExploits0References2
Prion
Prion
•added 2019/01/22 5:29 p.m.•32 views

Cross site scripting

A vulnerability in Brocade Network Advisor Versions before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and install additional JEE applications. A remote unauthenticated user who...

4.3CVSS8.1AI score0.07395EPSS
SaveExploits4References3Affected Software1
NVD
NVD
•added 2019/01/22 5:29 p.m.•40 views

CVE-2018-6443

A vulnerability in Brocade Network Advisor Versions before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and install additional JEE applications. A remote unauthenticated user who...

8.1CVSS8.2AI score0.07395EPSS
SaveExploits4References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/01/22 12:00 a.m.•8 views

CVE-2018-6443: Undefined Security Weakness

A vulnerability in Brocade Network Advisor Versions before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and install additional JEE applications. A remote unauthenticated user who...

8.1CVSS5.9AI score0.07395EPSS
SaveExploits4References2
Positive Technologies
Positive Technologies
•added 2018/12/19 12:00 a.m.•5 views

PT-2018-3344

Name of the Vulnerable Software and Affected Versions: Brocade Network Advisor versions prior to 14.3.1 Description: A vulnerability in Brocade Network Advisor could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using undocumented...

8.1CVSS0.07395EPSS
SaveExploits4References12
CNVD
CNVD
•added 2017/07/19 12:00 a.m.•7 views

Denial of Service Vulnerability in JeeCMS v8.1 Data Restore Function

JEECMS is Jiangxi Jinlei Technology Development Co., Ltd. developed a support for WeChat small program , WeChat public number / service number , column model , content model cross-customization , as well as with payment and financial settlement of the content of the e-commerce as one of the conte...

6.8AI score
SaveExploits0
seebug.org
seebug.org
•added 2015/12/03 12:00 a.m.•48 views

JEE产品存在后台代码执行漏洞

简要描述: jee产品后台某功能存在任意代码执行漏洞 详细说明: 后台模板编辑功能使用了freemarker模板,存在服务端模板注入漏洞,可以被利用执行任意代码。 漏洞证明: 在模板编辑功能中选择一个模板,以footer.html为例,加入poc,代码会被freemarker引擎解析,造成代码执行,在首页底部就可以看到命令执行结果了。 代码执行结果...

7.1AI score
SaveExploits0
Rows per page
Query Builder