Lucene search
K

6 matches found

Vulnrichment
Vulnrichment
added 2026/05/03 1:30 p.m.4 views

CVE-2026-7698 Tiandy Easy7 Integrated Management Platform updateDbBackupInfo os command injection

A vulnerability was identified in Tiandy Easy7 Integrated Management Platform 7.17.0. Affected by this vulnerability is an unknown functionality of the file /Easy7/rest/systemInfo/updateDbBackupInfo. Such manipulation of the argument week leads to os command injection. The attack can be executed...

7.5CVSS6.9AI score0.02085EPSS
Exploits0References4
OSV
OSV
added 2026/02/19 7:17 a.m.4 views

CVE-2026-2693

A vulnerability was determined in CoCoTeaNet CyreneAdmin up to 1.3.0. This vulnerability affects unknown code of the file /api/system/dashboard/getCount of the component System Info Endpoint. Executing a manipulation can lead to improper authorization. The attack can be launched remotely. The...

6.5CVSS5.3AI score
Exploits0References3
Cvelist
Cvelist
added 2026/02/19 2:32 a.m.28 views

CVE-2026-2693 CoCoTeaNet CyreneAdmin System Info Endpoint getCount improper authorization

A vulnerability was determined in CoCoTeaNet CyreneAdmin up to 1.3.0. This vulnerability affects unknown code of the file /api/system/dashboard/getCount of the component System Info Endpoint. Executing a manipulation can lead to improper authorization. The attack can be launched remotely. The...

5.3CVSS0.00013EPSS
Exploits1References3
CVE
CVE
added 2026/02/19 2:32 a.m.10 views

CVE-2026-2693

CVE-2026-2693 affects CoCoTeaNet CyreneAdmin up to version 1.3.0. The vulnerability resides in the System Info Endpoint component, specifically /api/system/dashboard/getCount, where improper authorization can be exploited. The issue can be triggered remotely over the network, and public disclosur...

6.5CVSS5AI score0.00013EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/19 2:32 a.m.2 views

CVE-2026-2693 CoCoTeaNet CyreneAdmin System Info Endpoint getCount improper authorization

A vulnerability was determined in CoCoTeaNet CyreneAdmin up to 1.3.0. This vulnerability affects unknown code of the file /api/system/dashboard/getCount of the component System Info Endpoint. Executing a manipulation can lead to improper authorization. The attack can be launched remotely. The...

5.3CVSS4.8AI score0.00013EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2022/11/28 12:0 a.m.3 views

PT-2022-27211 · Unknown · Purchase Order Management System

Name of the Vulnerable Software and Affected Versions: Purchase Order Management System version 1.0 Description: The issue concerns a file upload vulnerability. It can be exploited via the /purchase order/admin/?page=system info API endpoint. Recommendations: For Purchase Order Management System...

9.8CVSS9.3AI score0.00841EPSS
Exploits1References3
Rows per page
Query Builder