Lucene search
K

23 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:40 p.m.7 views

CVE-2026-7060

A vulnerability was determined in liyupi yu-picture up to a053632c41340152bf75b66b3c543d129123d8ec. This impacts the function PageRequest of the file yu-picture-backend/src/main/java/com/yupi/yupicturebackend/service/impl/PictureServiceImpl.java of the component MyBatis-Plus. Executing a...

7.5CVSS6.9AI score0.00263EPSS
Exploits0References1
CVE
CVE
added 2026/04/26 8:15 p.m.13 views

CVE-2026-7060

Technical details (affected versions, exact file paths, patch info) are not publicly available in the provided documents. Monitor for updates.

7.5CVSS7.1AI score0.00263EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/04/26 8:15 p.m.4 views

CVE-2026-7060

A vulnerability was determined in liyupi yu-picture up to a053632c41340152bf75b66b3c543d129123d8ec. This impacts the function PageRequest of the file yu-picture-backend/src/main/java/com/yupi/yupicturebackend/service/impl/PictureServiceImpl.java of the component MyBatis-Plus. Executing a...

7.5CVSS5.3AI score0.00263EPSS
Exploits0References6
EUVD
EUVD
added 2026/04/26 8:15 p.m.6 views

EUVD-2026-25730

A vulnerability was determined in liyupi yu-picture up to a053632c41340152bf75b66b3c543d129123d8ec. This impacts the function PageRequest of the file yu-picture-backend/src/main/java/com/yupi/yupicturebackend/service/impl/PictureServiceImpl.java of the component MyBatis-Plus. Executing a...

7.5CVSS5.2AI score0.00263EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/04/26 8:15 p.m.27 views

CVE-2026-7060 liyupi yu-picture MyBatis-Plus PictureServiceImpl.java PageRequest sql injection

A vulnerability was determined in liyupi yu-picture up to a053632c41340152bf75b66b3c543d129123d8ec. This impacts the function PageRequest of the file yu-picture-backend/src/main/java/com/yupi/yupicturebackend/service/impl/PictureServiceImpl.java of the component MyBatis-Plus. Executing a...

7.5CVSS0.00263EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2026/04/26 8:15 p.m.3 views

CVE-2026-7060 liyupi yu-picture MyBatis-Plus PictureServiceImpl.java PageRequest sql injection

A vulnerability was determined in liyupi yu-picture up to a053632c41340152bf75b66b3c543d129123d8ec. This impacts the function PageRequest of the file yu-picture-backend/src/main/java/com/yupi/yupicturebackend/service/impl/PictureServiceImpl.java of the component MyBatis-Plus. Executing a...

7.5CVSS7.1AI score0.00263EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/04/26 12:0 a.m.6 views

PT-2026-35240

A vulnerability was determined in liyupi yu-picture up to a053632c41340152bf75b66b3c543d129123d8ec. This impacts the function PageRequest of the file yu-picture-backend/src/main/java/com/yupi/yupicturebackend/service/impl/PictureServiceImpl.java of the component MyBatis-Plus. Executing a...

7.5CVSS5.3AI score0.00263EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2005-1423

Malware in sbrugna...

5CVSS6.4AI score0.01306EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2021-15592

Malware in sbrugna...

5.3CVSS5.4AI score0.01131EPSS
Exploits1References3
NVD
NVD
added 2024/02/27 7:15 a.m.13 views

CVE-2021-46910

In the Linux kernel, the following vulnerability has been resolved: ARM: 9063/1: mm: reduce maximum number of CPUs if DEBUGKMAPLOCAL is enabled The debugging code for kmaplocal doubles the number of per-CPU fixmap slots allocated for kmaplocal, in order to use half of them as guard regions. This...

5.5CVSS5.2AI score0.00193EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2023/11/07 9:3 a.m.3 views

kernel: iommu/amd: Fix pci device refcount leak in ppr_notifier()

A reference counting violation was found in the Linux kernel's AMD IOMMU PPR Peripheral Page Request notification handler. When the handler looks up PCI devices using pcigetdomainbusandslot, it receives a reference-counted device pointer but never releases that reference before returning. This...

5.5CVSS7.2AI score0.00146EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2020/08/12 12:0 a.m.2 views

The vulnerability of the Page Request component in the Oracle Applications Framework software platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Page Request component in the Oracle Applications Framework is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

4CVSS6.3AI score0.00968EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2020/07/15 5:34 p.m.53 views

CVE-2020-14590

CVE-2020-14590 is a vulnerability in Oracle E-Business Suite’s Oracle Applications Framework (OA Framework), specifically the Page Request component. Affected versions are 12.1.3 and 12.2.3–12.2.9. The issue allows a high-privilege attacker with network access over HTTP to read a subset of OA Fra...

4CVSS3.2AI score0.00968EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2020/07/15 12:0 a.m.3 views

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2020-44271)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions.Applications Framework OA...

4CVSS9AI score0.00968EPSS
Exploits0References1
OSV
OSV
added 2020/02/11 10:15 p.m.1 views

CVE-2020-0618

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'...

8.8CVSS7.8AI score0.99046EPSS
Exploits14References4
Microsoft CVE
Microsoft CVE
added 2020/02/11 8:0 a.m.139 views

Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests. An attacker who successfully exploited this vulnerability could execute code in the context of the Report Server service account. To exploit the vulnerability, an...

9.8CVSS2.6AI score0.99046EPSS
Exploits14
Hacker One
Hacker One
added 2019/01/29 4:14 p.m.79 views

PayPal: Stored XSS on https://paypal.com/signin via cache poisoning

Due to a configuration in frontend, caching servers, it was possible for a researcher to use request smuggling to convert a page request into a cached redirect. If the cached redirect were accessed by a legitimate user, an attacker's content would be rendered instead of the requested page. While...

0.8AI score
Exploits0
NVD
NVD
added 2018/11/01 5:29 p.m.10 views

CVE-2018-6909

A missing X-Frame-Options header in the Green Electronics RainMachine Mini-8 2nd Generation and Touch HD 12 web application could be used by a remote attacker for clickjacking, as demonstrated by triggering an API page request...

6.5CVSS6.5AI score0.01064EPSS
Exploits1References1
Prion
Prion
added 2018/11/01 5:29 p.m.9 views

Design/Logic Flaw

A missing X-Frame-Options header in the Green Electronics RainMachine Mini-8 2nd Generation and Touch HD 12 web application could be used by a remote attacker for clickjacking, as demonstrated by triggering an API page request...

4.3CVSS6.5AI score0.01064EPSS
Exploits1References1
Cvelist
Cvelist
added 2018/11/01 5:0 p.m.11 views

CVE-2018-6909

A missing X-Frame-Options header in the Green Electronics RainMachine Mini-8 2nd Generation and Touch HD 12 web application could be used by a remote attacker for clickjacking, as demonstrated by triggering an API page request...

6.5AI score0.01064EPSS
Exploits1References1
Rows per page
Query Builder