Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/10/29 2:16 a.m.5 views

CVE-2025-12344

A vulnerability has been found in Yonyou U8 Cloud up to 5.1sp. The impacted element is an unknown function of the file /service/NCloudGatewayServlet of the component Request Header Handler. Such manipulation of the argument ts/sign leads to unrestricted upload. The attack may be performed from...

6.5CVSS6.4AI score0.00043EPSS
Exploits0References1
CVE
CVE
added 2025/10/28 1:32 a.m.8 views

CVE-2025-12344

Summary : CVE-2025-12344 affects Yonyou U8 Cloud up to 5.1sp. The vulnerability lies in an unknown function within /service/NCloudGatewayServlet (Request Header Handler) where manipulation of the ts/sign argument enables an unrestricted file upload. Exploitation can be performed remotely, and pub...

6.5CVSS6.2AI score0.00043EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/10/28 1:32 a.m.7 views

CVE-2025-12344 Yonyou U8 Cloud Request Header NCloudGatewayServlet unrestricted upload

A vulnerability has been found in Yonyou U8 Cloud up to 5.1sp. The impacted element is an unknown function of the file /service/NCloudGatewayServlet of the component Request Header Handler. Such manipulation of the argument ts/sign leads to unrestricted upload. The attack may be performed from...

6.5CVSS0.00043EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/10/28 1:32 a.m.2 views

CVE-2025-12344 Yonyou U8 Cloud Request Header NCloudGatewayServlet unrestricted upload

A vulnerability has been found in Yonyou U8 Cloud up to 5.1sp. The impacted element is an unknown function of the file /service/NCloudGatewayServlet of the component Request Header Handler. Such manipulation of the argument ts/sign leads to unrestricted upload. The attack may be performed from...

6.5CVSS6.2AI score0.00043EPSS
Exploits0References4
CNVD
CNVD
added 2025/05/14 12:0 a.m.1 views

D-Link DIR-880L /htdocs/ssdpcgi File Command Injection Vulnerability

The D-Link DIR-880L is a dual-band Gigabit wireless router from China's AUO D-Link. The D-Link DIR-880L suffers from a command injection vulnerability, which arises from the failure of the file /htdocs/ssdpcgi in the component Request Header Handler to correctly filter the constructed command...

9.8CVSS6.5AI score0.01345EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/05/06 8:31 a.m.8 views

CVE-2025-4341 D-Link DIR-880L Request Header ssdpcgi sub_16570 command injection

A vulnerability classified as critical was found in D-Link DIR-880L up to 104WWb01. Affected by this vulnerability is the function sub16570 of the file /htdocs/ssdpcgi of the component Request Header Handler. The manipulation of the argument HTTPST/REMOTEADDR/REMOTEPORT/SERVERID leads to command...

6.5CVSS7.5AI score0.01345EPSS
Exploits0References5
Rows per page
Query Builder