Lucene search
+L

37 matches found

NVD
NVD
added 2026/01/26 8:16 a.m.5 views

CVE-2026-1427

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...

8.8CVSS0.01291EPSS
Exploits0References2
CVE
CVE
added 2026/01/26 8:6 a.m.25 views

CVE-2026-1427

CVE-2026-1427 concerns the WellChoose Single Sign-On Portal System, where an OS Command Injection flaw allows authenticated remote attackers to inject and execute arbitrary commands on the server. The connected sources identify the affected product (WellChoose SSO Portal System), and the root cau...

8.8CVSS6.1AI score0.01291EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/26 12:0 a.m.8 views

PT-2026-4732

Name of the Vulnerable Software and Affected Versions WellChoose Single Sign-On Portal System affected versions not specified WellChoose Organization Portal System affected versions not specified Description An OS Command Injection issue exists in the WellChoose Portal Systems, potentially allowi...

8.8CVSS6.3AI score0.01291EPSS
Exploits0References12
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2025-24552

Malicious code in bioql PyPI...

6.1CVSS6.5AI score0.00349EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2025-24553

Malicious code in bioql PyPI...

7.1CVSS6.6AI score0.00632EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2025-24549

Malicious code in bioql PyPI...

9.8CVSS6.5AI score0.00625EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.11 views

EUVD-2025-24548

Malicious code in bioql PyPI...

7.5CVSS6.5AI score0.00382EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.13 views

EUVD-2025-24550

Malicious code in bioql PyPI...

8.7CVSS6.6AI score0.00575EPSS
Exploits0References2
CNVD
CNVD
added 2025/08/20 12:0 a.m.3 views

WellChoose Organization Portal System File Inclusion Vulnerability

WellChoose Organization Portal System is an electronic directory service system from WellChoose in Taiwan, China. A file inclusion vulnerability exists in the WellChoose Organization Portal System, which can be exploited by an attacker to execute arbitrary code on the server due to a failure to...

9.8CVSS7.5AI score0.00625EPSS
Exploits0References1
CNVD
CNVD
added 2025/08/20 12:0 a.m.4 views

WellChoose Organization Portal System Cross-Site Scripting Vulnerability (CNVD-2025-19588)

WellChoose Organization Portal System is an electronic directory service system from WellChoose in Taiwan, China. The WellChoose Organization Portal System suffers from a cross-site scripting vulnerability that originates from the application's lack of effective filtering and escaping of...

6.1CVSS6.6AI score0.00349EPSS
Exploits0References1
CNVD
CNVD
added 2025/08/20 12:0 a.m.13 views

WellChoose Organization Portal System Path Traversal Vulnerability

WellChoose Organization Portal System is an electronic directory service system from WellChoose in Taiwan, China. The WellChoose Organization Portal System suffers from a path traversal vulnerability that can be exploited by an attacker to download arbitrary system files...

8.7CVSS7AI score0.00575EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/15 9:28 a.m.15 views

CVE-2025-8914

Organization Portal System developed by WellChoose has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.5CVSS8.7AI score0.00382EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/15 9:28 a.m.11 views

CVE-2025-8911

Organization Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks...

6.1CVSS7.5AI score0.00349EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/15 9:28 a.m.11 views

CVE-2025-8912

Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files...

8.7CVSS7.6AI score0.00575EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/15 9:28 a.m.10 views

CVE-2025-8910

Organization Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks...

6.1CVSS7.5AI score0.00349EPSS
Exploits0References1
NVD
NVD
added 2025/08/13 10:15 a.m.21 views

CVE-2025-8914

Organization Portal System developed by WellChoose has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.5CVSS0.00382EPSS
Exploits0References2
OSV
OSV
added 2025/08/13 10:15 a.m.5 views

CVE-2025-8914

Organization Portal System developed by WellChoose has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.5CVSS6.1AI score0.00382EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/08/13 9:18 a.m.7 views

CVE-2025-8914 WellChoose|Organization Portal System - SQL Injection

Organization Portal System developed by WellChoose has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.1CVSS8.6AI score0.00382EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/08/13 9:16 a.m.4 views

CVE-2025-8913 WellChoose|Organization Portal System - Local File Inclusion

Organization Portal System developed by WellChoose has a Local File Inclusion vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server...

9.8CVSS8.3AI score0.00625EPSS
Exploits0References2
NVD
NVD
added 2025/08/13 9:15 a.m.6 views

CVE-2025-8911

Organization Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks...

6.1CVSS0.00349EPSS
Exploits0References2
Rows per page
Query Builder