Lucene search
K

122 matches found

NVD
NVD
added 2025/12/30 10:15 p.m.3 views

CVE-2025-15360

A vulnerability was determined in newbee-mall-plus 2.0.0. This impacts the function Upload of the file src/main/java/ltd/newbee/mall/controller/common/UploadController.java of the component Product Information Edit Page. This manipulation of the argument File causes unrestricted upload. The attac...

7.2CVSS0.00035EPSS
Exploits1References4
CVE
CVE
added 2025/12/30 9:32 p.m.10 views

CVE-2025-15360

The CVE-2025-15360 vulnerability affects newbee-mall-plus 2.0.0, specifically the UploadController.java used for Product Information Edit Page. The issue arises from manipulation of the File argument in src/main/java/ltd/newbee/mall/controller/common/UploadController.java, enabling unrestricted f...

7.2CVSS6.5AI score0.00035EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/30 9:32 p.m.1 views

CVE-2025-15360 newbee-mall-plus Product Information Edit UploadController.java upload unrestricted upload

A vulnerability was determined in newbee-mall-plus 2.0.0. This impacts the function Upload of the file src/main/java/ltd/newbee/mall/controller/common/UploadController.java of the component Product Information Edit Page. This manipulation of the argument File causes unrestricted upload. The attac...

5.8CVSS6.5AI score0.00035EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/12/30 9:32 p.m.22 views

CVE-2025-15360 newbee-mall-plus Product Information Edit UploadController.java upload unrestricted upload

A vulnerability was determined in newbee-mall-plus 2.0.0. This impacts the function Upload of the file src/main/java/ltd/newbee/mall/controller/common/UploadController.java of the component Product Information Edit Page. This manipulation of the argument File causes unrestricted upload. The attac...

5.8CVSS0.00035EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/12/30 12:0 a.m.2 views

PT-2025-54229

A vulnerability was determined in newbee-mall-plus 2.0.0. This impacts the function Upload of the file src/main/java/ltd/newbee/mall/controller/common/UploadController.java of the component Product Information Edit Page. This manipulation of the argument File causes unrestricted upload. The attac...

5.8CVSS6.8AI score0.00035EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-13130

Malware in sbrugna...

5.3CVSS5.5AI score0.0023EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2014-8725

Malware in sbrugna...

3.5CVSS6.1AI score0.00166EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2007-2349

Malware in sbrugna...

7.8CVSS6.4AI score0.02937EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2005-1566

Malware in sbrugna...

5CVSS6.4AI score0.00807EPSS
Exploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-6687

Malware in sbrugna...

5.3CVSS5.9AI score0.00362EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2016-8873

Malware in sbrugna...

6.2CVSS7AI score0.0185EPSS
Exploits4References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-4224

Malicious code in bioql PyPI...

7.1CVSS8.7AI score0.00096EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-23140

Malicious code in bioql PyPI...

6CVSS6.8AI score0.00092EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-4564

Malicious code in bioql PyPI...

4.8CVSS5.4AI score0.00092EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-25457

Malicious code in bioql PyPI...

8CVSS6.3AI score0.00072EPSS
Exploits1References7
RedhatCVE
RedhatCVE
added 2025/08/23 4:16 p.m.3 views

CVE-2025-55743

UnoPim is an open-source Product Information Management PIM system built on the Laravel framework. Before 0.2.1, the image upload at the user creation feature performs only client side file type validation. A user can capture the request by uploading an image, capture the request through a Proxy...

8.8CVSS6.2AI score0.0014EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/08/23 4:16 p.m.4 views

CVE-2025-55744

UnoPim is an open-source Product Information Management PIM system built on the Laravel framework. Before 0.2.1, some of the endpoints of the application is vulnerable to Cross site Request forgery CSRF. This vulnerability is fixed in 0.2.1...

8.2CVSS6.1AI score0.00048EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/08/23 4:16 p.m.5 views

CVE-2025-55742

UnoPim is an open-source Product Information Management PIM system built on the Laravel framework. Before 0.2.1, UnoPim contains a stored cross-site scripting vulnerability via SVG MIME/sanitizer bypass in the /admin/settings/users/create endpoint. This vulnerability is fixed in 0.2.1...

8CVSS5.5AI score0.00072EPSS
Exploits1References1
NVD
NVD
added 2025/08/22 4:15 p.m.3 views

CVE-2025-55741

UnoPim is an open-source Product Information Management PIM system built on the Laravel framework. In versions 0.3.0 and earlier, users without the Delete privilege for products are unable to delete individual products via the standard endpoint, as expected. However, these users can bypass intend...

8.1CVSS0.00102EPSS
Exploits1References3
CVE
CVE
added 2025/08/22 4:4 p.m.19 views

CVE-2025-55741

UnoPim is a Laravel-based open-source PIM. In versions

8.1CVSS6.4AI score0.00102EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder