CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Github Security Blog•added 2023/01/26 9:30 p.m.•40 views

Remote Code Execution in com.bstek.uflo:uflo-core

All versions of the package com.bstek.uflo:uflo-core are vulnerable to Remote Code Execution RCE in the ExpressionContextImpl class via jexl.createExpressionexpression.evaluatecontext; functionality, due to improper user input validation...

9.8CVSS6.5AI score0.02575EPSS

SaveExploits1References5Affected Software1

Cvelist•added 2023/01/25 5:00 a.m.•59 views

CVE-2022-25894

9.8CVSS10AI score0.02575EPSS

SaveExploits1References3

Rapid7 Vulnerability Database (full)•added 2023/01/25 12:00 a.m.•1 views

CVE-2022-25894: Improper Control of Generation of Code

9.8CVSS5.8AI score0.02575EPSS

SaveExploits1References4

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by