Lucene search
K

1566 matches found

RedhatCVE
RedhatCVE
added 2026/02/04 3:15 a.m.15 views

CVE-2025-70311

JEEWMS 1.0 is vulnerable to SQL Injection. Attackers can inject malicious SQL statements through the id1 and id2 parameters in the /systemControl.do interface for attack...

6.5CVSS5.6AI score0.00215EPSS
Exploits0References1
NVD
NVD
added 2026/02/03 6:16 p.m.5 views

CVE-2025-70311

JEEWMS 1.0 is vulnerable to SQL Injection. Attackers can inject malicious SQL statements through the id1 and id2 parameters in the /systemControl.do interface for attack...

6.5CVSS0.00215EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/03 12:0 a.m.5 views

JeeWMS 安全漏洞

JeeWMS is a JAVA-based warehouse management system developed by JeeWMS Corporation in China. Version 1.0 of JEEWMS has a security vulnerability, which stems from the id1 and id2 parameters in the /systemControl.do interface, making them vulnerable to SQL injection attacks...

6.5CVSS5.9AI score0.00215EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/03 12:0 a.m.5 views

CVE-2025-70311

JEEWMS 1.0 is vulnerable to SQL Injection. Attackers can inject malicious SQL statements through the id1 and id2 parameters in the /systemControl.do interface for attack...

5.6AI score0.00215EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/02/03 12:0 a.m.3 views

CVE-2025-70311

JEEWMS 1.0 is vulnerable to SQL Injection. Attackers can inject malicious SQL statements through the id1 and id2 parameters in the /systemControl.do interface for attack...

5.7AI score0.00215EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/03 12:0 a.m.4 views

PT-2026-5982

Name of the Vulnerable Software and Affected Versions JEEWMS version 1.0 Description JEEWMS 1.0 is susceptible to SQL Injection. An attacker can inject malicious SQL statements through the id1 and id2 parameters in the /systemControl.do API endpoint. Recommendations Apply appropriate input...

6.5CVSS5.7AI score0.00215EPSS
Exploits0References4
CVE
CVE
added 2026/02/03 12:0 a.m.8 views

CVE-2025-70311

CVE-2025-70311 affects JEEWMS 1.0. The vulnerability is a SQL injection in the /systemControl.do interface, exploitable via the id1 and id2 parameters. Multiple connected sources (Red Hat advisory, NVD entry, CVE listings) confirm the impact as SQL injection with potential data exposure and modif...

6.5CVSS5.6AI score0.00215EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/09 9:56 a.m.9 views

CVE-2020-12594

A privilege escalation flaw allows a malicious, authenticated, privileged CLI user to escalate their privileges on the system and gain full control over the SMG appliance. This affects SMG prior to 10.7.4...

9CVSS7.4AI score0.01492EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/01/06 12:0 a.m.3 views

ASUS System Control Interface 安全漏洞

ASUS System Control Interface is a computer system control interface from Asus China. A security vulnerability exists in ASUS System Control Interface, which originates from an uncontrolled DLL load path that could lead to the execution of arbitrary code...

8.5CVSS6.9AI score0.00115EPSS
Exploits0References1
OSV
OSV
added 2025/12/30 11:15 p.m.3 views

CVE-2023-53983

Anevia Flamingo XL/XS 3.6.20 contains a critical vulnerability with weak default administrative credentials that can be easily guessed. Attackers can leverage these hard-coded credentials to gain full remote system control without complex authentication mechanisms...

9.8CVSS5.9AI score0.00577EPSS
Exploits2References6
SUSE CVE
SUSE CVE
added 2025/12/25 12:24 a.m.3 views

SUSE CVE-2025-68367

In the Linux kernel, the following vulnerability has been resolved: macintosh/machid: fix race condition in machidtoggleemumouse The following warning appears when running syzkaller, and this issue also exists in the mainline code. ------------ cut here ------------ listadd double add:...

5.5CVSS6.3AI score0.00165EPSS
Exploits0References21
OSV
OSV
added 2025/12/24 11:16 a.m.1 views

UBUNTU-CVE-2025-68367

In the Linux kernel, the following vulnerability has been resolved: macintosh/machid: fix race condition in machidtoggleemumouse The following warning appears when running syzkaller, and this issue also exists in the mainline code. ------------ cut here ------------ listadd double add:...

5.9AI score0.00165EPSS
Exploits0References36
EUVD
EUVD
added 2025/12/23 12:30 a.m.2 views

EUVD-2023-60249

SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated vulnerability in the /usr/cgi-bin/restorefactory.cgi endpoint that allows remote attackers to reset device configuration. Attackers can send a POST request to the endpoint with specific data to trigger a factory reset and bypass...

8.8CVSS6.5AI score0.00872EPSS
Exploits2References5
EUVD
EUVD
added 2025/12/12 3:30 p.m.3 views

EUVD-2025-203080

Execution with Unnecessary Privileges vulnerability in Nebim Neyir Computer Industry and Services Inc. Nebim V3 ERP allows Expanding Control over the Operating System from the Database.This issue affects Nebim V3 ERP: from 2.0.59 before 3.0.1...

8.8CVSS6.5AI score0.0035EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/12 12:19 p.m.4 views

CVE-2025-13506 Improper Authorization in Nebim Neyir's Nebim V3 ERP

Execution with Unnecessary Privileges vulnerability in Nebim Neyir Computer Industry and Services Inc. Nebim V3 ERP allows Expanding Control over the Operating System from the Database. This issue affects Nebim V3 ERP: from 2.0.59 before 3.0.1...

8.8CVSS5.8AI score0.0035EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/12/12 12:19 p.m.27 views

CVE-2025-13506 Improper Authorization in Nebim Neyir's Nebim V3 ERP

Execution with Unnecessary Privileges vulnerability in Nebim Neyir Computer Industry and Services Inc. Nebim V3 ERP allows Expanding Control over the Operating System from the Database. This issue affects Nebim V3 ERP: from 2.0.59 before 3.0.1...

8.8CVSS0.0035EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/12 12:0 a.m.2 views

Nebim V3 ERP 安全漏洞

Nebim V3 ERP is an enterprise resource planning system from Nebim Turkey. A security vulnerability exists in Nebim V3 ERP version 2.0.59 up to and including version 3.0.1, which originates from performing an unnecessarily privileged operation that could result in an extension of operating system...

8.8CVSS6.6AI score0.0035EPSS
Exploits0References1
NVD
NVD
added 2025/12/09 9:15 p.m.6 views

CVE-2023-53774

MiniDVBLinux 5.4 contains a remote code execution vulnerability in the SVDRP protocol that allows remote attackers to send commands to manipulate TV systems. Attackers can send crafted SVDRP commands through the svdrpsend.sh script to execute messages and potentially control the video disk record...

9.8CVSS0.00794EPSS
Exploits1References5
EUVD
EUVD
added 2025/12/09 6:30 p.m.3 views

EUVD-2025-201853

SAP NetWeaver remote service for Xcelsius allows an attacker with network access and high privileges to execute arbitrary code on the affected system due to insufficient input validation and improper handling of remote method calls. Exploitation does not require user interaction and could lead to...

7.9CVSS7.3AI score0.00394EPSS
Exploits0References3
NVD
NVD
added 2025/12/09 4:17 p.m.3 views

CVE-2025-42880

Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module. This could provide the attacker with full control of the system hence leading to high impact on confidentiality, integrity and availabilit...

9.9CVSS0.03895EPSS
Exploits0References2
Rows per page
Query Builder