Lucene search
K

24 matches found

RedhatCVE
RedhatCVE
added 2026/01/06 9:6 a.m.5 views

CVE-2025-15240

QOCA aim AI Medical Cloud Platform developed by Quanta Computer has an Arbitrary File Upload vulnerability, allowing authenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

8.8CVSS8.2AI score0.00437EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/06 8:5 a.m.4 views

CVE-2025-15238

QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.1CVSS8.1AI score0.00278EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/06 8:5 a.m.5 views

CVE-2025-15236

QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Path Traversal vulnerability, allowing authenticated remote attackers to read folder names under the specified path by exploiting an Absolute Path Traversal vulnerability...

5.3CVSS6.8AI score0.00304EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/06 8:5 a.m.4 views

CVE-2025-15237

QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Path Traversal vulnerability, allowing authenticated remote attackers to read folder names under the specified path by exploiting an Absolute Path Traversal vulnerability...

5.3CVSS6.8AI score0.00304EPSS
Exploits0References1
NVD
NVD
added 2026/01/05 9:15 a.m.6 views

CVE-2025-15240

QOCA aim AI Medical Cloud Platform developed by Quanta Computer has an Arbitrary File Upload vulnerability, allowing authenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

8.8CVSS0.00437EPSS
Exploits0References2
CVE
CVE
added 2026/01/05 8:18 a.m.13 views

CVE-2025-15240

CVE-2025-15240 concerns Quanta Computer’s QOCA aim AI Medical Cloud Platform. Multiple trusted sources confirm an Arbitrary File Upload vulnerability that enables an authenticated remote attacker to upload and execute a WebShell backdoor, resulting in arbitrary code execution on the affected serv...

8.8CVSS7.9AI score0.00437EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2026/01/05 8:15 a.m.2 views

CVE-2025-15235

QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Missing Authorization vulnerability, allowing authenticated remote attackers to modify specific network packet parameters, enabling certain system functions to access other users' files...

6.5CVSS5.9AI score0.00259EPSS
Exploits0References2
OSV
OSV
added 2026/01/05 8:15 a.m.2 views

CVE-2025-15237

QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Path Traversal vulnerability, allowing authenticated remote attackers to read folder names under the specified path by exploiting an Absolute Path Traversal vulnerability...

4.3CVSS5.8AI score0.00304EPSS
Exploits0References2
NVD
NVD
added 2026/01/05 8:15 a.m.3 views

CVE-2025-15237

QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Path Traversal vulnerability, allowing authenticated remote attackers to read folder names under the specified path by exploiting an Absolute Path Traversal vulnerability...

5.3CVSS0.00304EPSS
Exploits0References2
NVD
NVD
added 2026/01/05 8:15 a.m.4 views

CVE-2025-15238

QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.1CVSS0.00278EPSS
Exploits0References2
EUVD
EUVD
added 2026/01/05 8:10 a.m.4 views

EUVD-2026-0901

QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.1CVSS7.5AI score0.00272EPSS
Exploits0References3
CVE
CVE
added 2026/01/05 8:0 a.m.10 views

CVE-2025-15238

CVE-2025-15238 affects QOCA aim AI Medical Cloud Platform by Quanta Computer. It describes an SQL Injection vulnerability that allows authenticated remote attackers to inject arbitrary SQL commands to read database contents. The connected documents provide no concrete details on affected versions...

7.1CVSS7.7AI score0.00278EPSS
Exploits0References2Affected Software1
EUVD
EUVD
added 2026/01/05 7:42 a.m.3 views

EUVD-2026-0908

QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Path Traversal vulnerability, allowing authenticated remote attackers to read folder names under the specified path by exploiting an Absolute Path Traversal vulnerability...

5.3CVSS6.3AI score0.00304EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/01/05 7:42 a.m.3 views

CVE-2025-15237 Quanta Computer|QOCA aim AI Medical Cloud Platform - Path Traversal

QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Path Traversal vulnerability, allowing authenticated remote attackers to read folder names under the specified path by exploiting an Absolute Path Traversal vulnerability...

5.3CVSS6.4AI score0.00304EPSS
Exploits0References2
CVE
CVE
added 2026/01/05 7:38 a.m.7 views

CVE-2025-15236

QOCA aim AI Medical Cloud Platform (Quanta Computer) is affected by an Absolute Path Traversal vulnerability that allows authenticated remote attackers to read folder names under a specified path. Public sources across multiple feeds (NVD, Red Hat, CVE listing, CNNVD, CIRCL, EUVD, PT Security) de...

5.3CVSS6.4AI score0.00304EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2026/01/05 7:38 a.m.21 views

CVE-2025-15236 Quanta Computer|QOCA aim AI Medical Cloud Platform - Path Traversal

QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Path Traversal vulnerability, allowing authenticated remote attackers to read folder names under the specified path by exploiting an Absolute Path Traversal vulnerability...

5.3CVSS0.00304EPSS
Exploits0References2
CVE
CVE
added 2026/01/05 7:25 a.m.8 views

CVE-2025-15235

The CVE-2025-15235 entry concerns Quanta Computer’s QOCA aim AI Medical Cloud Platform, where a Missing Authorization flaw allows authenticated remote attackers to modify network packet parameters and access other users’ files. Affected component is the QOCA platform (no detailed version info pro...

7.1CVSS6.5AI score0.00259EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2026/01/05 12:0 a.m.2 views

Quanta QOCA aim AI Medical Cloud Platform SQL注入漏洞

Quanta QOCA aim AI Medical Cloud Platform is an artificial intelligence AI medical cloud computing integration platform from Quanta Taiwan, China that provides comprehensive AI model development tools, covering the entire process from AI development to clinical applications. The Quanta QOCA aim A...

7.1CVSS7.9AI score0.00272EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/01/05 12:0 a.m.3 views

PT-2026-1222

Name of the Vulnerable Software and Affected Versions QOCA aim AI Medical Cloud Platform affected versions not specified Description The QOCA aim AI Medical Cloud Platform developed by Quanta Computer contains a Path Traversal issue. Authenticated remote attackers can exploit an Absolute Path...

5.3CVSS6.5AI score0.00304EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/01/05 12:0 a.m.8 views

PT-2026-1226

Name of the Vulnerable Software and Affected Versions QOCA aim AI Medical Cloud Platform affected versions not specified Description The QOCA aim AI Medical Cloud Platform allows authenticated remote attackers to inject arbitrary SQL commands, potentially enabling them to read database contents...

7.1CVSS7.3AI score0.00278EPSS
Exploits0References6
Rows per page
Query Builder