Lucene search
+L

16 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 10:26 a.m.9 views

CVE-2024-42676

File Upload vulnerability in Huizhi enterprise resource management system v.1.0 and before allows a remote attacker to execute arbitrary code via the /nssys/common/Upload. Aspx? Action=DNPageAjaxPostBack component...

8.8CVSS8AI score0.01073EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:13 a.m.8 views

CVE-2024-42677

An issue in Huizhi enterprise resource management system v.1.0 and before allows a local attacker to obtain sensitive information via the /nssys/common/filehandle. Aspx component...

5.5CVSS5.2AI score0.0027EPSS
SaveExploits1References1
NVD
NVD
added 2024/08/15 2:15 p.m.18 views

CVE-2024-42677

An issue in Huizhi enterprise resource management system v.1.0 and before allows a local attacker to obtain sensitive information via the /nssys/common/filehandle. Aspx component...

5.5CVSS0.0027EPSS
SaveExploits1References2
NVD
NVD
added 2024/08/15 2:15 p.m.18 views

CVE-2024-42676

File Upload vulnerability in Huizhi enterprise resource management system v.1.0 and before allows a remote attacker to execute arbitrary code via the /nssys/common/Upload. Aspx? Action=DNPageAjaxPostBack component...

8.8CVSS0.01073EPSS
SaveExploits1References2
OSV
OSV
added 2024/08/15 2:15 p.m.6 views

CVE-2024-42677

An issue in Huizhi enterprise resource management system v.1.0 and before allows a local attacker to obtain sensitive information via the /nssys/common/filehandle. Aspx component...

5.5CVSS5.8AI score0.0027EPSS
SaveExploits1References2
OSV
OSV
added 2024/08/15 2:15 p.m.4 views

CVE-2024-42676

File Upload vulnerability in Huizhi enterprise resource management system v.1.0 and before allows a remote attacker to execute arbitrary code via the /nssys/common/Upload. Aspx? Action=DNPageAjaxPostBack component...

8.8CVSS6.1AI score0.01073EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/08/15 12:0 a.m.11 views

CVE-2024-42677

An issue in Huizhi enterprise resource management system v.1.0 and before allows a local attacker to obtain sensitive information via the /nssys/common/filehandle. Aspx component...

6.1AI score0.0027EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/08/15 12:0 a.m.18 views

CVE-2024-42676

File Upload vulnerability in Huizhi enterprise resource management system v.1.0 and before allows a remote attacker to execute arbitrary code via the /nssys/common/Upload. Aspx? Action=DNPageAjaxPostBack component...

7.9AI score0.01073EPSS
SaveExploits1References2
CVE
CVE
added 2024/08/15 12:0 a.m.70 views

CVE-2024-42676

Huizhi enterprise resource management system v1.0 and earlier is affected by a File Upload vulnerability in the /nssys/common/Upload.aspx?Action=DNPageAjaxPostBack endpoint that allows remote code execution. The issue arises from the file upload functionality, enabling an attacker to run arbitrar...

8.8CVSS7.9AI score0.01073EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2024/08/15 12:0 a.m.69 views

CVE-2024-42677

CVE-2024-42677 affects Huizhi enterprise resource management system v1.0 and earlier. The issue is a local information-disclosure vulnerability in the /nssys/common/filehandle.aspx component, enabling a local attacker to obtain sensitive data. The Red Hat/NVD/CVE entries corroborate a local-attac...

5.5CVSS6.2AI score0.0027EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/08/15 12:0 a.m.11 views

PT-2024-30102 · Huizhi · Huizhi

Name of the Vulnerable Software and Affected Versions: Huizhi enterprise resource management system versions 1.0 and earlier Description: The issue allows a local attacker to obtain sensitive information via the "/nssys/common/filehandle.aspx" component. A local attacker can exploit this to gain...

5.5CVSS6.4AI score0.0027EPSS
SaveExploits1References7
Cvelist
Cvelist
added 2024/08/15 12:0 a.m.25 views

CVE-2024-42676

File Upload vulnerability in Huizhi enterprise resource management system v.1.0 and before allows a remote attacker to execute arbitrary code via the /nssys/common/Upload. Aspx? Action=DNPageAjaxPostBack component...

0.01073EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/08/15 12:0 a.m.8 views

Huizhi enterprise resource management system 安全漏洞

Huizhi enterprise resource management system is an enterprise resource planning ERP system from Shenzhen Huizhi Software Development Co. A security vulnerability exists in Huizhi enterprise resource management system version v.1.0, which originates from the...

8.8CVSS7.8AI score0.01073EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/08/15 12:0 a.m.10 views

PT-2024-30101 · Huizhi · Huizhi

Name of the Vulnerable Software and Affected Versions: Huizhi enterprise resource management system versions 1.0 and before Description: The issue allows a remote attacker to execute arbitrary code via the "/nssys/common/Upload.aspx?Action=DNPageAjaxPostBack" component. This is a File Upload...

8.8CVSS8AI score0.01073EPSS
SaveExploits1References10
Cvelist
Cvelist
added 2024/08/15 12:0 a.m.23 views

CVE-2024-42677

An issue in Huizhi enterprise resource management system v.1.0 and before allows a local attacker to obtain sensitive information via the /nssys/common/filehandle. Aspx component...

0.0027EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/08/15 12:0 a.m.9 views

Huizhi enterprise resource management system 安全漏洞

Huizhi enterprise resource management system is an enterprise resource planning ERP system from Shenzhen Huizhi Software Development Co. A security vulnerability exists in Huizhi enterprise resource management system version v.1.0, which originates from the /nssys/common/filehandle.aspx component...

5.5CVSS6.2AI score0.0027EPSS
SaveExploits1References2
Rows per page
Query Builder