Lucene search
K

6 matches found

CNNVD
CNNVD
added 2025/07/20 12:0 a.m.2 views

Thinkgem JeeSite 代码问题漏洞

Thinkgem JeeSite is an open source Java EE enterprise-class rapid development platform of China Joyuan Thinkgem company . The platform includes system permissions components , data permissions components , data dictionary components , core tools components , view manipulation components , workflo...

6.5CVSS6.2AI score0.00203EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2025/05/22 10:0 a.m.5 views

CVE-2019-8093

An arbitrary file access vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can leverage file upload controller for downloadable products to read/delete an arbitary files...

8.8CVSS6.8AI score0.00201EPSS
Exploits0References1
OSV
OSV
added 2019/11/05 11:15 p.m.10 views

CVE-2019-8093

An arbitrary file access vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can leverage file upload controller for downloadable products to read/delete an arbitary files...

8.8CVSS6.8AI score
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2017/08/18 12:0 a.m.2 views

The vulnerability of the FileUploadController servlet in the web application, which is designed for managing and monitoring printing devices and image processing. SyncThru 6 allows a perpetrator to execute arbitrary code with system privileges.

The vulnerability of the FileUploadController servlet in the web application, which is designed for managing and monitoring printing devices and image processing, exists due to an incorrect path limitation for the restricted directory. Exploiting this vulnerability allows a malicious actor to...

10CVSS8.2AI score0.46933EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2017/08/18 12:0 a.m.2 views

The vulnerability of the FileUploadController servlet in the web application, which is designed for managing and monitoring printing devices and image processing. SyncThru 6 allows a perpetrator to execute arbitrary code with system privileges.

The vulnerability of the FileUploadController servlet in the web application, which is designed for managing and monitoring printing devices and image processing, exists due to an incorrect path limitation for the restricted directory. Exploiting this vulnerability allows a malicious actor to...

10CVSS8.2AI score0.46933EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2017/08/18 12:0 a.m.2 views

The vulnerability of the FileUploadController servlet in the web application, which is designed for managing and monitoring printing devices and image processing. SyncThru 6 allows a perpetrator to execute arbitrary code with system privileges.

The vulnerability of the FileUploadController servlet in the web application, which is designed for managing and monitoring printing devices and image processing, exists due to an incorrect path limitation for the restricted directory. Exploiting this vulnerability allows a malicious actor to...

10CVSS8.2AI score0.46933EPSS
Exploits0References4
Rows per page
Query Builder