CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

8 matches found

Positive Technologies•added 2026/01/08 12:0 a.m.•2 views

PT-2026-1867

Name of the Vulnerable Software and Affected Versions RuoYi-Vue-Plus versions 5.5.1 and earlier Description The snailjob component in RuoYi-Vue-Plus does not filter user input when executing QLExpress expressions through the /snail-job/workflow/check-node-expression API endpoint. This allows...

9.4CVSS6.7AI score0.00109EPSS

Exploits1References8

RedhatCVE•added 2025/12/17 8:7 a.m.•2 views

CVE-2025-14674

A vulnerability was found in aizuda snail-job up to 1.6.0. Affected by this vulnerability is the function QLExpressEngine.doEval of the file snail-job-common/snail-job-common-core/src/main/java/com/aizuda/snailjob/common/core/expression/strategy/QLExpressEngine.java. The manipulation results in...

6.5CVSS6.9AI score0.00015EPSS

Exploits0References1

NVD•added 2025/12/14 6:15 p.m.•4 views

CVE-2025-14674

6.5CVSS0.00015EPSS

Exploits0References7

Veracode•added 2025/11/11 10:21 a.m.•3 views

Remote Code Execution (RCE)

cn.hutool, hutool-extra is vulnerable to remote code execution RCE. The vulnerability is due to improper expression handling in the QLExpressEngine class, which allows an attacker to execute arbitrary expressions leading to arbitrary method invocation and potential remote code execution...

6.5CVSS8.4AI score0.00212EPSS

Exploits1References4Affected Software1

EUVD•added 2025/10/03 8:7 p.m.•2 views

EUVD-2025-31174

Malicious code in bioql PyPI...

6.5CVSS6.4AI score0.00212EPSS

Exploits1References3

OSV•added 2025/09/25 11:15 p.m.•0 views

CVE-2025-56769

An issue was discovered in chinabugotech hutool before 5.8.4 allowing attackers to execute arbitrary expressions that lead to arbitrary method invocation and potentially remote code execution RCE via the QLExpressEngine class...

6.5CVSS8.7AI score

Exploits0References1