Lucene search
+L

11438 matches found

osv_cve
osv_cve
•added 2025/10/06 5:16 p.m.•18 views

CVE-2025-11341

A security flaw has been discovered in Jinher OA up to 2.0. This affects an unknown function of the file /c6/Jhsoft.Web.module/eformaspx/WebDesign.aspx/?type=SystemUserInfo&style=1. Performing manipulation results in xml external entity reference. Remote exploitation of the attack is possible. Th...

9.8CVSS5.5AI score0.0053EPSS
SaveExploits1References4
NVD
NVD
•added 2025/10/06 5:16 p.m.•19 views

CVE-2025-11341

A security flaw has been discovered in Jinher OA up to 2.0. This affects an unknown function of the file /c6/Jhsoft.Web.module/eformaspx/WebDesign.aspx/?type=SystemUserInfo&style=1. Performing manipulation results in xml external entity reference. Remote exploitation of the attack is possible. Th...

9.8CVSS0.0053EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/06 5:02 p.m.•19 views

EUVD-2025-32568

A security flaw has been discovered in Jinher OA up to 2.0. This affects an unknown function of the file /c6/Jhsoft.Web.module/eformaspx/WebDesign.aspx/?type=SystemUserInfo&style=1. Performing manipulation results in xml external entity reference. Remote exploitation of the attack is possible. Th...

7.5CVSS6AI score0.0053EPSS
SaveExploits1References5
CVE
CVE
•added 2025/10/06 5:02 p.m.•61 views

CVE-2025-11341

CVE-2025-11341 affects Jinher OA (versions up to 2.0) via an XML External Entity (XXE) vulnerability in the function handling a request to /c6/Jhsoft.Web.module/eformaspx/WebDesign.aspx/?type=SystemUserInfo&style=1. The issue arises from manipulating an unknown function in that file, enabling rem...

9.8CVSS6.7AI score0.0053EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2025/10/06 5:02 p.m.•9 views

CVE-2025-11341 Jinher OA type xml external entity reference

A security flaw has been discovered in Jinher OA up to 2.0. This affects an unknown function of the file /c6/Jhsoft.Web.module/eformaspx/WebDesign.aspx/?type=SystemUserInfo&style=1. Performing manipulation results in xml external entity reference. Remote exploitation of the attack is possible. Th...

7.5CVSS6.7AI score0.0053EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/10/06 5:02 p.m.•32 views

CVE-2025-11341 Jinher OA type xml external entity reference

A security flaw has been discovered in Jinher OA up to 2.0. This affects an unknown function of the file /c6/Jhsoft.Web.module/eformaspx/WebDesign.aspx/?type=SystemUserInfo&style=1. Performing manipulation results in xml external entity reference. Remote exploitation of the attack is possible. Th...

7.5CVSS0.0053EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/06 12:00 a.m.•6 views

CVE-2025-11341: Improper Restriction of XML External Entity Reference

A security flaw has been discovered in Jinher OA up to 2.0. This affects an unknown function of the file /c6/Jhsoft.Web.module/eformaspx/WebDesign.aspx/?type=SystemUserInfo&style=1. Performing manipulation results in xml external entity reference. Remote exploitation of the attack is possible. Th...

9.8CVSS6.7AI score0.0053EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/10/06 12:00 a.m.•17 views

PT-2025-40917

Name of the Vulnerable Software and Affected Versions Jinher OA versions prior to 2.0 Description A security flaw exists in Jinher OA. The issue involves xml external entity reference within an unknown function of the file /c6/Jhsoft.Web.module/eformaspx/WebDesign.aspx/?type=SystemUserInfo=1...

7.5CVSS7.1AI score0.0053EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2025/10/06 12:00 a.m.•17 views

Jinher OA 代码问题漏洞

Jinher OA is a collaborative management software from Jinher, China. A code issue vulnerability exists in Jinher OA 2.0 and prior versions, which stems from manipulation of an unknown function in the file /c6/Jhsoft.Web.module/eformaspx/WebDesign.aspx, which could lead to an XML external entity...

7.5CVSS7.4AI score0.0053EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/10/06 12:00 a.m.•28 views

langchain-text-splitters 代码问题漏洞

langchain-text-splitters is a Python package open-sourced by LangChain. A code issue vulnerability exists in langchain-text-splitters version 0.3.8, which stems from the HTMLSectionSplitter class allowing the use of arbitrary XSLT stylesheets, which could lead to an XML External Entity Attack,...

7.5CVSS7.3AI score0.00508EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2024-52236

Malicious code in bioql PyPI...

5.9CVSS5.5AI score0.00157EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2023-53237

Malicious code in bioql PyPI...

6.3CVSS5.4AI score0.00227EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2022-2850

Malicious code in bioql PyPI...

7.5CVSS5.4AI score0.02636EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•32 views

EUVD-2023-1022

Malicious code in bioql PyPI...

9.8CVSS6.8AI score0.00782EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2025-4494

Malicious code in bioql PyPI...

5.5CVSS6.5AI score0.00228EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•24 views

EUVD-2024-22479

Malicious code in bioql PyPI...

5.5CVSS5.1AI score0.00773EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•10 views

EUVD-2024-41294

Malicious code in bioql PyPI...

5.5CVSS6.1AI score0.00437EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2022-46566

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00713EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2023-24209

Malicious code in bioql PyPI...

6CVSS6.1AI score0.0075EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2023-51295

Malicious code in bioql PyPI...

8.2CVSS6.4AI score0.00517EPSS
SaveExploits0References2
Rows per page
Query Builder