Lucene search
+L

791 matches found

VulnCheck KEV
VulnCheck KEV
added 2026/01/15 12:0 a.m.7 views

VulnCheck KEV: CVE-2023-7334

Changjetong T+ versions up to and including 16.x contain a .NET deserialization vulnerability in an AjaxPro endpoint that can lead to remote code execution. A remote attacker can send a crafted request to /tplus/ajaxpro/Ufida.T.CodeBehind.PriorityLevel,AppCode.ashx?method=GetStoreWarehouseByStore...

9.8CVSS6.4AI score0.00988EPSS
SaveIn wildExploits1References81
Positive Technologies
Positive Technologies
added 2026/01/15 12:0 a.m.9 views

PT-2026-3134

Changjetong T+ versions up to and including 16.x contain a .NET deserialization vulnerability in an AjaxPro endpoint that can lead to remote code execution. A remote attacker can send a crafted request to /tplus/ajaxpro/Ufida.T.CodeBehind. PriorityLevel,App Code.ashx?method=GetStoreWarehouseBySto...

9.3CVSS8.2AI score0.00988EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
added 2026/01/09 10:56 a.m.6 views

CVE-2022-38733

OnCommand Insight versions 7.3.1 through 7.3.14 are susceptible to an authentication bypass vulnerability in the Data Warehouse component...

8.6CVSS8.6AI score0.00529EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:4 a.m.9 views

CVE-2011-0799

Unspecified vulnerability in the Oracle Warehouse Builder component in Oracle Database Server 10.2.0.5 OWB, 11.1.0.7, and 11.2.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Oracle Warehouse Builder User Account...

6.5CVSS5.6AI score0.01735EPSS
SaveExploits4References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:3 a.m.10 views

CVE-2024-39594

SAP Business Warehouse - Business Planning and Simulation application does not sufficiently encode user controlled inputs, resulting in Reflected Cross-Site Scripting XSS vulnerability. After successful exploitation, an attacker can cause low impact on the confidentiality and integrity of the...

6.1CVSS6AI score0.00256EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/05 2:57 a.m.15 views

CVE-2026-0574

A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function saveUserRole of the file warehouse\src\main\java\com\yeqifu\sys\controller\UserController.java of the component Request Handler. This manipulation causes improper...

6.5CVSS6.3AI score0.00299EPSS
SaveExploits1References1
OSV
OSV
added 2026/01/04 2:15 a.m.7 views

CVE-2026-0574

A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function saveUserRole of the file warehouse\src\main\java\com\yeqifu\sys\controller\UserController.java of the component Request Handler. This manipulation causes improper...

8.8CVSS5.4AI score0.00299EPSS
SaveExploits1References5
NVD
NVD
added 2026/01/04 2:15 a.m.8 views

CVE-2026-0574

A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function saveUserRole of the file warehouse\src\main\java\com\yeqifu\sys\controller\UserController.java of the component Request Handler. This manipulation causes improper...

8.8CVSS0.00299EPSS
SaveExploits1References5
CVE
CVE
added 2026/01/04 2:2 a.m.22 views

CVE-2026-0574

CVE-2026-0574 affects yeqifu warehouse. The vulnerability lies in the function saveUserRole in warehousesrcmainjavacomyeqifusyscontrollerUserController.java (Request Handler). This manipulation causes improper authorization and enables a remote attack; an exploit is publicly available. Public sou...

8.8CVSS6.3AI score0.00299EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2026/01/04 2:2 a.m.43 views

CVE-2026-0574 yeqifu warehouse Request UserController.java saveUserRole improper authorization

A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function saveUserRole of the file warehouse\src\main\java\com\yeqifu\sys\controller\UserController.java of the component Request Handler. This manipulation causes improper...

6.5CVSS0.00299EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/01/04 2:2 a.m.4 views

CVE-2026-0574 yeqifu warehouse Request UserController.java saveUserRole improper authorization

A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function saveUserRole of the file warehouse\src\main\java\com\yeqifu\sys\controller\UserController.java of the component Request Handler. This manipulation causes improper...

6.5CVSS6.4AI score0.00299EPSS
SaveExploits1References5
EUVD
EUVD
added 2026/01/04 2:2 a.m.7 views

EUVD-2026-0783

A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function saveUserRole of the file warehouse\src\main\java\com\yeqifu\sys\controller\UserController.java of the component Request Handler. This manipulation causes improper...

6.5CVSS6.2AI score0.00299EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/01/04 12:0 a.m.9 views

PT-2026-1184

Name of the Vulnerable Software and Affected Versions yeqifu warehouse affected versions not specified Description A weakness exists that leads to improper authorization. The issue affects the saveUserRole function within the file warehousesrcmainjavacomyeqifusyscontrollerUserController.java of t...

6.5CVSS6.4AI score0.00299EPSS
SaveExploits1References10
OSV
OSV
added 2026/01/02 8:16 p.m.6 views

CVE-2026-0571

A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issue is the function createResponseEntity of the file warehouse\src\main\java\com\yeqifu\sys\common\AppFileUtils.java. The manipulation of the argument path results in path...

6.5CVSS5.5AI score0.00443EPSS
SaveExploits1References5
NVD
NVD
added 2026/01/02 8:16 p.m.7 views

CVE-2026-0571

A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issue is the function createResponseEntity of the file warehouse\src\main\java\com\yeqifu\sys\common\AppFileUtils.java. The manipulation of the argument path results in path...

6.5CVSS0.00443EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2026/01/02 8:2 p.m.40 views

CVE-2026-0571 yeqifu warehouse AppFileUtils.java createResponseEntity path traversal

A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issue is the function createResponseEntity of the file warehouse\src\main\java\com\yeqifu\sys\common\AppFileUtils.java. The manipulation of the argument path results in path...

5.3CVSS0.00443EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/01/02 8:2 p.m.4 views

CVE-2026-0571 yeqifu warehouse AppFileUtils.java createResponseEntity path traversal

A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issue is the function createResponseEntity of the file warehouse\src\main\java\com\yeqifu\sys\common\AppFileUtils.java. The manipulation of the argument path results in path...

5.3CVSS6.5AI score0.00443EPSS
SaveExploits1References5
CVE
CVE
added 2026/01/02 8:2 p.m.21 views

CVE-2026-0571

CVE-2026-0571 affects yeqifu warehouse. The vulnerability is in AppFileUtils.java: createResponseEntity, where improper handling of the path argument enables path traversal. The issue can be exploited remotely, and public PoC/ exploits have been published. No version details are provided for affe...

6.5CVSS6.5AI score0.00443EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2026/01/02 12:0 a.m.7 views

warehouse 路径遍历漏洞

warehouse is a spring boot based logistics management system for small and medium sized warehouses by yeqifu individual developers. warehouse has a path traversal vulnerability, the vulnerability stems from the wrong operation of the parameter path in the file...

6.5CVSS4.9AI score0.00443EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/01/02 12:0 a.m.10 views

PT-2026-1126

Name of the Vulnerable Software and Affected Versions yeqifu warehouse affected versions not specified Description A security flaw exists in yeqifu warehouse due to path traversal. The issue is related to the manipulation of the path argument within the createResponseEntity function located in th...

6.5CVSS6.3AI score0.00443EPSS
SaveExploits1References9
Rows per page
Query Builder