Lucene search
K

35 matches found

CISA KEV Catalog
CISA KEV Catalog
added 2025/10/15 12:0 a.m.17 views

Adobe Experience Manager Forms Code Execution Vulnerability

Adobe Experience Manager Forms in JEE contains an unspecified vulnerability that allows for arbitrary code execution...

10CVSS7.8AI score0.24192EPSS
In wildExploits7
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2006-3124

Malware in sbrugna...

7.8CVSS6.4AI score0.02052EPSS
Exploits0References9
CNNVD
CNNVD
added 2024/05/23 12:0 a.m.2 views

J2EEFAST 安全漏洞

J2eeFAST is a Java EE enterprise-class rapid development platform , is committed to building the best small and medium-sized open source free back-end framework platform . J2EEFAST v2.7.0 version of the SQL injection vulnerability , the vulnerability stems from ProcessDefinitionMapper.xml findPag...

5.4CVSS8.2AI score0.00099EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/05/23 12:0 a.m.2 views

J2EEFAST 安全漏洞

J2eeFAST is a Java EE enterprise-class rapid development platform , is committed to building the best small and medium-sized open source free back-end framework platform . J2EEFAST v2.7.0 version of the SQL injection vulnerability , the vulnerability stems from the SysLoginInfoMapper.xml findPage...

8.8CVSS8.2AI score0.00122EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/05/23 12:0 a.m.2 views

J2EEFAST 安全漏洞

J2eeFAST is a Java EE enterprise-class rapid development platform , is committed to building the best small and medium-sized open source free back-end framework platform . J2EEFAST v2.7.0 version of the SQL injection vulnerability , the vulnerability stems from the SysOperLogMapper.xml findPage...

6.3CVSS8.2AI score0.00076EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/05/07 12:0 a.m.1 views

J2EEFAST 安全漏洞

J2eeFAST is a Java EE enterprise-class rapid development platform , is committed to building the best small and medium-sized open source free back-end framework platform . J2EEFAST v2.7.0 version exists SQL injection vulnerability , the vulnerability stems from the getDeptList function in the...

9.8CVSS8.2AI score0.0016EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/05/07 12:0 a.m.1 views

J2EEFAST 安全漏洞

J2eeFAST is a Java EE enterprise-class rapid development platform , is committed to building the best small and medium-sized open source free back-end framework platform . J2EEFAST v2.7.0 version exists SQL injection vulnerability , the vulnerability stems from the authUserList function in the...

9.8CVSS8.2AI score0.00158EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/05/07 12:0 a.m.1 views

J2EEFAST 安全漏洞

J2eeFAST is a Java EE enterprise-class rapid development platform , is committed to building the best small and medium-sized open source free back-end framework platform . J2EEFAST v2.7.0 version exists SQL injection vulnerability , the vulnerability stems from the authRoleList function in the...

8.8CVSS8.2AI score0.0016EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/05/02 12:0 a.m.2 views

J2eeFAST 跨站脚本漏洞

J2eeFAST is a Java EE enterprise-class rapid development platform , is committed to building the best small and medium-sized open source free backend framework platform . A cross-site scripting vulnerability exists in J2eeFAST version 2.6.0 and earlier versions. An attacker can exploit this...

5.4CVSS4.8AI score0.00212EPSS
Exploits1References5
CNNVD
CNNVD
added 2023/02/20 12:0 a.m.3 views

Liima 安全漏洞

Liima is a Liima open source application. Allows you to manage the configuration of Java EE applications in an unlimited number of different environments in various versions, including automated deployment of these applications. A security vulnerability exists in versions prior to Liima 1.17.28...

9.8CVSS8.3AI score0.01139EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2022/10/19 10:43 p.m.1 views

OpenJDK: improper MultiByte conversion can lead to buffer overflow (JGSS, 8286077)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JGSS. Supported versions that are affected are Oracle Java SE: 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 21.3.3 and 22.2.0. Easily exploitable vulnerability allows unauthenticated...

5.3CVSS7.2AI score0.0018EPSS
Exploits0References4
CNVD
CNVD
added 2021/09/10 12:0 a.m.16 views

JEESNS stored cross-site scripting vulnerability (CNVD-2021-74059)

JEESNS is a social management system developed on JAVA's enterprise-level platform. A stored cross-site scripting vulnerability exists in the /member/picture/album component in JEESNS version 1.4.2. The vulnerability can be exploited to execute arbitrary web script or HTML via a specially crafted...

5.4CVSS5.3AI score0.00264EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/09/09 12:0 a.m.1 views

JEESNS 跨站脚本漏洞

JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web script or HTML via a specially crafted payload in the header...

5.4CVSS6AI score0.0017EPSS
Exploits1References3
CNNVD
CNNVD
added 2021/09/09 12:0 a.m.1 views

Jeesns 跨站脚本漏洞

JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web script or HTML via a specially crafted payload in published articles...

5.4CVSS6AI score0.00191EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/08/12 12:0 a.m.3 views

J2eeFAST SQL注入漏洞

J2eeFAST is a Java EE enterprise-class rapid development platform , is committed to building the best small and medium-sized open source free backend framework platform . J2eeFAST 2.2.1 suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL...

9.8CVSS8.7AI score0.00478EPSS
Exploits1References2
CNVD
CNVD
added 2020/07/15 12:0 a.m.4 views

Oracle WebLogic Server Remote Code Execution Vulnerability (CNVD-2020-38878)

WebLogic is an application server produced by Oracle, is a middleware based on the JAVAEE architecture , WebLogic is used to develop, integrate, deploy and manage large-scale distributed Web applications, network applications and database applications of the Java application server . A remote cod...

9.8CVSS9.7AI score0.9231EPSS
Exploits3References1
OSV
OSV
added 2020/06/29 6:15 p.m.3 views

CVE-2018-6446

A vulnerability in Brocade Network Advisor Version Before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and install additional JEE applications...

9.8CVSS5.8AI score
Exploits0References1
CNVD
CNVD
added 2020/06/28 12:0 a.m.1 views

Jeesite has an XSS vulnerability

JeeSite is an enterprise information technology development infrastructure platform , Java enterprise applications open source framework. Jeesite has an XSS vulnerability that can be exploited by an attacker to obtain an administrator cookie...

6.2AI score
Exploits0
CNVD
CNVD
added 2020/02/17 12:0 a.m.1 views

IBM WebSphere Application Server Memory Corruption Vulnerability

IBM WebSphere Application Server WAS is an application server product from IBM in the United States. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform. IBM WebSphere Application Server memory corruption vulnerability. N...

7.2CVSS6.9AI score0.00394EPSS
Exploits0References1
CNVD
CNVD
added 2019/05/14 12:0 a.m.1 views

XSS Vulnerability at JEESNS Group Posts

JEESNS is an open source social management system developed on the JAVA enterprise level platform. JEESNS group posts at the existence of XSS vulnerability , an attacker can be exploited to inject arbitrary Web script or HTML...

6.4AI score
Exploits0
Rows per page
Query Builder