Lucene search
K

45 matches found

EUVD
EUVD
added 7 hours ago8 views

EUVD-2026-34987

A security flaw has been discovered in erzhongxmu JeeWMS up to 141740afb2ba14d441c82a833d0a418d07ca2d69. This vulnerability affects unknown code of the file /base-boot/jmreport/testConnection of the component JimuReport test-connection Endpoint. Performing a manipulation of the argument...

7.5CVSS6.8AI score
Exploits0References5
Cvelist
Cvelist
added 7 hours ago11 views

CVE-2026-11457 erzhongxmu JeeWMS JimuReport test-connection Endpoint testConnection injection

A security flaw has been discovered in erzhongxmu JeeWMS up to 141740afb2ba14d441c82a833d0a418d07ca2d69. This vulnerability affects unknown code of the file /base-boot/jmreport/testConnection of the component JimuReport test-connection Endpoint. Performing a manipulation of the argument...

7.5CVSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-16569

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00173EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-16570

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00173EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-16566

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00173EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/08/22 12:22 a.m.7 views

CVE-2025-50901

JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 2025-05-19 contains incorrect authentication bypass vulnerability, which can lead to arbitrary file reading...

9.8CVSS7.6AI score0.00127EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/06/02 5:37 p.m.6 views

CVE-2025-5386

A vulnerability was found in JeeWMS up to 20250504. It has been rated as critical. This issue affects the function transEditor of the file /cgformTransController.do?transEditor. The manipulation leads to sql injection. The attack may be initiated remotely. This product does not use versioning. Th...

6.5CVSS6.6AI score0.0012EPSS
Exploits0References1
NVD
NVD
added 2025/05/31 7:15 p.m.11 views

CVE-2025-5390

A vulnerability, which was classified as critical, was found in JeeWMS up to 20250504. This affects the function filedeal of the file /systemController/filedeal.do of the component File Handler. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. Th...

9.8CVSS0.00173EPSS
Exploits0References3
CVE
CVE
added 2025/05/31 7:0 p.m.49 views

CVE-2025-5390

CVE-2025-5390 targets JeeWMS up to 20250504, affecting the File Handler’s function filedeal in the file path /systemController/filedeal.do . The vulnerability causes improper access controls and can be exploited remotely. Several connected sources corroborate the affected scope and remote risk, w...

9.8CVSS6.3AI score0.00173EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2025/05/31 7:0 p.m.15 views

CVE-2025-5390 JeeWMS File filedeal.do filedeal access control

A vulnerability, which was classified as critical, was found in JeeWMS up to 20250504. This affects the function filedeal of the file /systemController/filedeal.do of the component File Handler. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. Th...

6.5CVSS0.00173EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/05/31 6:31 p.m.9 views

CVE-2025-5389 JeeWMS File generateController.do dogenerateOne2Many access control

A vulnerability, which was classified as critical, has been found in JeeWMS up to 20250504. Affected by this issue is the function dogenerateOne2Many of the file /generateController.do?dogenerateOne2Many of the component File Handler. The manipulation leads to improper access controls. The attack...

6.5CVSS6.3AI score0.00173EPSS
Exploits0References3
CVE
CVE
added 2025/05/31 6:31 p.m.54 views

CVE-2025-5389

JeeWMS up to 20250504 is affected by a vulnerability in the File Handler component: the function dogenerateOne2Many within /generateController.do?dogenerateOne2Many suffers from improper access controls, enabling remote exploitation. Multiple sources (NVD, Red Hat, CVE lists, PT-2025-23414) confi...

9.8CVSS6.4AI score0.00173EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2025/05/31 6:15 p.m.8 views

CVE-2025-5388

A vulnerability classified as critical was found in JeeWMS up to 20250504. Affected by this vulnerability is the function dogenerate of the file /generateController.do?dogenerate. The manipulation leads to sql injection. The attack can be launched remotely. This product takes the approach of...

9.8CVSS0.0012EPSS
Exploits0References3
CVE
CVE
added 2025/05/31 6:0 p.m.46 views

CVE-2025-5388

CVE-2025-5388 affects JeeWMS up to 20250504, specifically the vulnerable function dogenerate in the endpoint "/generateController.do?dogenerate". Affects remote exploitation via SQL injection resulting from this function. Several connected sources corroborate the same vulnerability details and in...

9.8CVSS7AI score0.0012EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2025/05/31 5:31 p.m.17 views

CVE-2025-5387 JeeWMS File generateController.do dogenerate access control

A vulnerability classified as critical has been found in JeeWMS up to 20250504. Affected is the function dogenerate of the file /generateController.do?dogenerate of the component File Handler. The manipulation leads to improper access controls. It is possible to launch the attack remotely. This...

6.5CVSS0.00173EPSS
Exploits0References3
CVE
CVE
added 2025/05/31 5:31 p.m.49 views

CVE-2025-5387

CVE-2025-5387 affects JeeWMS up to 20250504. The vulnerable component is the File Handler’s function dogenerate in /generateController.do?dogenerate, where improper access controls could allow remote exploitation. The product uses a rolling release, so no specific affected or fixed version detail...

9.8CVSS6.4AI score0.00173EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/31 5:31 p.m.6 views

CVE-2025-5387 JeeWMS File generateController.do dogenerate access control

A vulnerability classified as critical has been found in JeeWMS up to 20250504. Affected is the function dogenerate of the file /generateController.do?dogenerate of the component File Handler. The manipulation leads to improper access controls. It is possible to launch the attack remotely. This...

6.5CVSS6.4AI score0.00173EPSS
Exploits0References3
NVD
NVD
added 2025/05/31 5:15 p.m.7 views

CVE-2025-5386

A vulnerability was found in JeeWMS up to 20250504. It has been rated as critical. This issue affects the function transEditor of the file /cgformTransController.do?transEditor. The manipulation leads to sql injection. The attack may be initiated remotely. This product does not use versioning. Th...

9.8CVSS0.0012EPSS
Exploits0References3
NVD
NVD
added 2025/05/31 5:15 p.m.8 views

CVE-2025-5385

A vulnerability was found in JeeWMS up to 20250504. It has been declared as critical. This vulnerability affects the function doAdd of the file /cgformTemplateController.do?doAdd. The manipulation leads to path traversal. The attack can be initiated remotely. Continious delivery with rolling...

9.8CVSS0.00551EPSS
Exploits0References3
CVE
CVE
added 2025/05/31 5:0 p.m.50 views

CVE-2025-5386

CVE-2025-5386 affects JeeWMS up to 20250504, specifically the vulnerable transEditor function in the file /cgformTransController.do?transEditor. The issue enables SQL injection via that endpoint and can be triggered remotely. Public details acknowledge no versioning in JeeWMS, so affected/unaffec...

9.8CVSS6.7AI score0.0012EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder