Lucene search
+L

140 matches found

CNNVD
CNNVD
added 2025/08/22 12:00 a.m.15 views

JeeWMS 安全漏洞

JeeWMS is a JAVA-based warehouse management system from China Huayi JeeWMS. A security vulnerability exists in JeeWMS version 3.7, which originates from SQL injection in the CgReportController API...

9.8CVSS7.8AI score0.0051EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/08/20 12:00 a.m.12 views

JeeWMS 安全漏洞

JeeWMS is a JAVA-based warehouse management system from China Huayi JeeWMS. A security vulnerability exists in JeeWMS, which stems from an authentication bypass that could lead to arbitrary file reading...

9.8CVSS7AI score0.00441EPSS
SaveExploits1References3
OSV
OSV
added 2025/08/14 6:52 p.m.12 views

MAL-2025-39386 Malicious code in wms-web-ui (npm)

The package wms-web-ui was found to contain malicious code...

7.2AI score
SaveExploits0
CNNVD
CNNVD
added 2025/07/25 12:00 a.m.12 views

deer-wms-2 注入漏洞

deer-wms-2 is a warehouse management system in China deerwms open source . Deer-wms-2 3.3 and earlier versions exist injection vulnerability, the vulnerability stems from the file /system/role/list on the parameter params dataScope wrong operation leads to SQL injection...

8.8CVSS6.9AI score0.00426EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/07/25 12:00 a.m.13 views

deer-wms-2 SQL注入漏洞

deer-wms-2 is a warehouse management system in China deerwms open source. A security vulnerability exists in deer-wms-2 3.3 and earlier versions, which originates from SQL injection due to incorrect manipulation of paramsdataScope in the file /system/role/authUser/allocatedList...

9.8CVSS6.8AI score0.00445EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/05/31 12:00 a.m.11 views

JeeWMS 注入漏洞

JeeWMS is a JAVA-based warehouse management system from China Huayi JeeWMS. JeeWMS 20250504 and previous versions of injection vulnerability exists, the vulnerability stems from the file /cgAutoListController.do?datagrid function CgAutoListController SQL injection...

9.8CVSS7.1AI score0.00324EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/05/31 12:00 a.m.15 views

JeeWMS 路径遍历漏洞

JeeWMS is a JAVA-based warehouse management system from China Huayi JeeWMS. JeeWMS 20250504 and previous versions of path traversal vulnerability, the vulnerability stems from the file /cgformTemplateController.do?doAdd function doAdd there is a path traversal...

9.8CVSS6.5AI score0.00472EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/05/31 12:00 a.m.15 views

JeeWMS 安全漏洞

JeeWMS is a JAVA-based warehouse management system from China Huayi JeeWMS. A security vulnerability exists in JeeWMS 20250504 and earlier versions, which originates from improper access control in the function dogenerateOne2Many in the file /generateController.do?dogenerateOne2Many...

9.8CVSS6.4AI score0.00341EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/05/23 10:12 a.m.11 views

CVE-2024-3612

A vulnerability was found in SourceCodester Warehouse Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file barang.php. The manipulation of the argument namabarang/merek leads to cross site scripting. The attack can be...

5.4CVSS6.2AI score0.0055EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/23 10:12 a.m.14 views

CVE-2024-3614

A vulnerability classified as problematic has been found in SourceCodester Warehouse Management System 1.0. This affects an unknown part of the file customer.php. The manipulation of the argument namacustomer/alamatcustomer/notelpcustomer leads to cross site scripting. It is possible to initiate...

5.4CVSS6.2AI score0.00589EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/23 10:12 a.m.12 views

CVE-2024-3613

A vulnerability was found in SourceCodester Warehouse Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file supplier.php. The manipulation of the argument namasupplier/alamatsupplier/notelpsupplier leads to cross site scripting...

5.4CVSS6.2AI score0.0055EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/23 7:02 a.m.14 views

CVE-2024-32213

The LoMag WareHouse Management application version 1.0.20.120 and older were found to allow weak passwords. By default, hard-coded passwords of 10 characters with little or no complexity are allowed...

5.3CVSS7.1AI score0.0087EPSS
SaveExploits4References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:02 a.m.10 views

CVE-2024-32210

The LoMag WareHouse Management application version 1.0.20.120 and older were to utilize hard-coded passwords by default for forms and SQL connections...

5.3CVSS7.7AI score0.00437EPSS
SaveExploits4References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:47 a.m.11 views

CVE-2024-52732

Incorrect access control in wms-Warehouse management system-zeqp v2.20.9.1 due to the token value of the zeqp system being reused...

9.1CVSS7AI score0.00418EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:03 p.m.15 views

CVE-2022-34067

Warehouse Management System v1.0 was discovered to contain a SQL injection vulnerability via the cari parameter...

7.5CVSS8.3AI score0.00948EPSS
SaveExploits1References1
NVD
NVD
added 2025/03/12 12:15 a.m.35 views

CVE-2025-2217

A vulnerability, which was classified as critical, was found in zzskzy Warehouse Refinement Management System 1.3. This affects the function ProcessRequest of the file /getAdyData.ashx. The manipulation of the argument showid leads to sql injection. It is possible to initiate the attack remotely...

9.8CVSS0.00757EPSS
SaveExploits1References4
CVE
CVE
added 2025/03/12 12:00 a.m.79 views

CVE-2025-2217

The CVE-2025-2217 entry affects zzskzy Warehouse Refinement Management System version 1.3. The vulnerability is in the ProcessRequest function (file /getAdyData.ashx) where manipulating the showid parameter leads to SQL injection. This allows remote exploitation and has been publicly disclosed. M...

9.8CVSS6.7AI score0.00757EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/03/12 12:00 a.m.12 views

CVE-2025-2216 zzskzy Warehouse Refinement Management System SaveCrash.ashx UploadCrash unrestricted upload

A vulnerability, which was classified as critical, has been found in zzskzy Warehouse Refinement Management System 1.3. Affected by this issue is the function UploadCrash of the file /crash/log/SaveCrash.ashx. The manipulation of the argument file leads to unrestricted upload. The attack may be...

6.5CVSS6.4AI score0.00758EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/03/11 12:00 a.m.11 views

zzskzy Warehouse Refinement Management System 安全漏洞

zzskzy Warehouse Refinement Management System is a Warehouse Refinement Management System from Zhengzhou Time zzskzy Company in China. A security vulnerability exists in zzskzy Warehouse Refinement Management System version 1.3, which stems from an incorrect operation of the parameter showid that...

9.8CVSS7AI score0.00757EPSS
SaveExploits1References1
OSV
OSV
added 2025/03/09 6:15 a.m.15 views

CVE-2025-2115

A vulnerability, which was classified as critical, was found in zzskzy Warehouse Refinement Management System 3.1. Affected is the function ProcessRequest of the file /AcceptZip.ashx. The manipulation of the argument file leads to unrestricted upload. It is possible to launch the attack remotely...

9.8CVSS5.4AI score0.00617EPSS
SaveExploits1References4
Rows per page
Query Builder