Lucene search
K

10 matches found

RedhatCVE
RedhatCVE
added 2025/10/09 12:14 a.m.5 views

CVE-2025-60830

redragon-erp v1.0 was discovered to contain a Shiro deserialization vulnerability caused by the default Shiro key...

6.5CVSS7.3AI score0.00166EPSS
Exploits1References1
OSV
OSV
added 2025/10/08 2:15 p.m.0 views

CVE-2025-60830

redragon-erp v1.0 was discovered to contain a Shiro deserialization vulnerability caused by the default Shiro key...

6.5CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2025/10/08 2:15 p.m.7 views

CVE-2025-60830

redragon-erp v1.0 was discovered to contain a Shiro deserialization vulnerability caused by the default Shiro key...

6.5CVSS0.00166EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/10/08 12:0 a.m.2 views

CVE-2025-60830

redragon-erp v1.0 was discovered to contain a Shiro deserialization vulnerability caused by the default Shiro key...

7AI score0.00166EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/10/08 12:0 a.m.5 views

CVE-2025-60830

redragon-erp v1.0 was discovered to contain a Shiro deserialization vulnerability caused by the default Shiro key...

0.00166EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/10/08 12:0 a.m.4 views

PT-2025-41265

Name of the Vulnerable Software and Affected Versions redragon-erp version 1.0 Description The software contains a Shiro deserialization issue stemming from the use of a default Shiro key. This could allow for unauthorized access or control of the system. Recommendations Replace the default Shiro...

6.5CVSS6.7AI score0.00166EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/08 12:0 a.m.1 views

EUVD-2025-33166

redragon-erp v1.0 was discovered to contain a Shiro deserialization vulnerability caused by the default Shiro key...

6.5CVSS6.8AI score0.00166EPSS
Exploits1References3
CVE
CVE
added 2025/10/08 12:0 a.m.7 views

CVE-2025-60830

The CVE-2025-60830 entry affects redragon-erp v1.0, where a Shiro deserialization vulnerability arises from the default Shiro key. The issue enables deserialization-based impact on the application as described in multiple sources (Red Hat, NVD, CNNVD), with impact: partial integrity and low avail...

6.5CVSS7AI score0.00166EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2022/12/16 12:0 a.m.1 views

Ruoyi 代码问题漏洞

RuoYi is a backend management system by the individual developer of RuoYi in China. A security vulnerability exists in versions of Ruoyi prior to 4.6.1, which stems from incorrect deserialization of its Shiro framework allowing an attacker to run arbitrary code via weak passwords...

9.8CVSS8.7AI score0.00889EPSS
Exploits0References2
CNVD
CNVD
added 2019/06/06 12:0 a.m.1 views

Shiro Deserialization Vulnerability in ECGAP 2.0, Wave's Government Service Cloud Platform

i.e. Wave Group, which owns four listed companies, namely Wave Information, Wave Software, Wave International and Huaguang Optoelectronics, with business covering four industry clusters, namely cloud data center, cloud service big data, smart city and smart enterprise, provides IT products and...

7.2AI score
Exploits0
Rows per page
Query Builder