Lucene search
K

12 matches found

RedhatCVE
RedhatCVE
added 2026/01/23 3:21 p.m.2 views

CVE-2026-1324

A vulnerability was identified in Sangfor Operation and Maintenance Management System up to 3.0.12. Affected by this issue is the function SessionController of the file /isomp-protocol/protocol/session of the component SSH Protocol Handler. The manipulation of the argument keypassword leads to os...

9.8CVSS7.6AI score0.0028EPSS
Exploits1References1
Cvelist
Cvelist
added 2026/01/22 1:2 p.m.15 views

CVE-2026-1324 Sangfor Operation and Maintenance Management System SSH Protocol session SessionController os command injection

A vulnerability was identified in Sangfor Operation and Maintenance Management System up to 3.0.12. Affected by this issue is the function SessionController of the file /isomp-protocol/protocol/session of the component SSH Protocol Handler. The manipulation of the argument keypassword leads to os...

9CVSS0.0028EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2026/01/22 1:2 p.m.2 views

CVE-2026-1324 Sangfor Operation and Maintenance Management System SSH Protocol session SessionController os command injection

A vulnerability was identified in Sangfor Operation and Maintenance Management System up to 3.0.12. Affected by this issue is the function SessionController of the file /isomp-protocol/protocol/session of the component SSH Protocol Handler. The manipulation of the argument keypassword leads to os...

9CVSS5.3AI score0.0028EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2026/01/22 12:0 a.m.3 views

PT-2026-3932

Name of the Vulnerable Software and Affected Versions Sangfor Operation and Maintenance Management System versions up to 3.0.12 Description A flaw exists in Sangfor Operation and Maintenance Management System. This issue is related to the SessionController function within the SSH Protocol Handler...

9.8CVSS7.2AI score0.0028EPSS
Exploits1References10
RedhatCVE
RedhatCVE
added 2026/01/13 10:53 p.m.1 views

CVE-2025-15502

A vulnerability was identified in Sangfor Operation and Maintenance Management System up to 3.0.8. The affected element is the function SessionController of the file /isomp-protocol/protocol/session. Such manipulation of the argument Hostname leads to os command injection. The attack can be...

9.8CVSS6.8AI score0.0013EPSS
Exploits1References1
OSV
OSV
added 2026/01/10 8:15 a.m.0 views

CVE-2025-15502

A vulnerability was identified in Sangfor Operation and Maintenance Management System up to 3.0.8. The affected element is the function SessionController of the file /isomp-protocol/protocol/session. Such manipulation of the argument Hostname leads to os command injection. The attack can be...

9.8CVSS5.6AI score
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/01/10 8:2 a.m.1 views

CVE-2025-15502 Sangfor Operation and Maintenance Management System session SessionController os command injection

A vulnerability was identified in Sangfor Operation and Maintenance Management System up to 3.0.8. The affected element is the function SessionController of the file /isomp-protocol/protocol/session. Such manipulation of the argument Hostname leads to os command injection. The attack can be...

7.5CVSS6.6AI score0.0013EPSS
Exploits1References5
EUVD
EUVD
added 2026/01/10 8:2 a.m.2 views

EUVD-2026-1855

A vulnerability was identified in Sangfor Operation and Maintenance Management System up to 3.0.8. The affected element is the function SessionController of the file /isomp-protocol/protocol/session. Such manipulation of the argument Hostname leads to os command injection. The attack can be...

7.5CVSS7.3AI score0.0013EPSS
Exploits1References6
OSV
OSV
added 2025/04/28 10:15 a.m.2 views

CVE-2025-4015

A vulnerability was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. It has been rated as critical. Affected by this issue is the function list of the file novel-system/src/main/java/com/java2nb/system/controller/SessionController.java. The manipulation leads to missin...

7.5CVSS6.9AI score
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/04/28 10:0 a.m.8 views

CVE-2025-4015 20120630 Novel-Plus SessionController.java list missing authentication

A vulnerability was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. It has been rated as critical. Affected by this issue is the function list of the file novel-system/src/main/java/com/java2nb/system/controller/SessionController.java. The manipulation leads to missin...

6.9CVSS6.7AI score0.00219EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/04/28 10:0 a.m.19 views

CVE-2025-4015 20120630 Novel-Plus SessionController.java list missing authentication

A vulnerability was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. It has been rated as critical. Affected by this issue is the function list of the file novel-system/src/main/java/com/java2nb/system/controller/SessionController.java. The manipulation leads to missin...

6.9CVSS0.00219EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/04/28 12:0 a.m.2 views

PT-2025-18060 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: Novel-Plus versions 20120630 through 0e156c04b4b7ce0563bef6c97af4476fcda8f160 Description: A critical issue has been found that affects the function list of the file...

6.9CVSS5.2AI score0.00219EPSS
Exploits0References9
Rows per page
Query Builder