33 matches found
EUVD-2024-35186
Malicious code in bioql PyPI...
EUVD-2024-35187
Malicious code in bioql PyPI...
EUVD-2024-35188
Malicious code in bioql PyPI...
CVE-2024-33139
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sqlfilter parameter in the findpage function...
CVE-2024-35090
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysUreportFileMapper.xml...
CVE-2024-35086
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in BpmTaskFromMapper.xml...
CVE-2024-35090
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysUreportFileMapper.xml...
CVE-2024-35091
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysTenantMapper.xml...
CVE-2024-35086
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in BpmTaskFromMapper.xml...
CVE-2024-35085
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in ProcessDefinitionMapper.xml...
CVE-2024-35084
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysMsgPushMapper.xml...
CVE-2024-35086
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in BpmTaskFromMapper.xml...
CVE-2024-35091
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysTenantMapper.xml...
CVE-2024-35091
J2EEFAST v2.7.0 is vulnerable to a SQL injection flaw within the findPage function of the SysTenantMapper.xml file. The root cause is a lack of external input SQL statement validation , which could allow an attacker to execute illegal SQL commands and steal sensitive database data . While no patc...
CVE-2024-35086
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in BpmTaskFromMapper.xml...
CVE-2024-35086
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in BpmTaskFromMapper.xml...
CVE-2024-35082
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysOperLogMapper.xml...
CVE-2024-35084
The J2EEFAST rapid development platform (version 2.7.0 ) contains a SQL injection vulnerability located in the findPage function within the SysMsgPushMapper.xml file. The root cause is a lack of proper validation for external inputs in SQL statements. An attacker can exploit this weakness to exec...
CVE-2024-35084
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysMsgPushMapper.xml...
CVE-2024-35090
The J2EEFAST rapid development platform (version v2.7.0 ) contains a SQL injection vulnerability in the findPage function within SysUreportFileMapper.xml. The root cause is a lack of validation for external input SQL statements. An attacker can exploit this flaw to execute illegal SQL commands an...