83173 matches found
CVE-2025-15436 Yonyou KSOA work_edit.jsp sql injection
A vulnerability has been found in Yonyou KSOA 9.0. Affected by this issue is some unknown functionality of the file /worksheet/workedit.jsp. Such manipulation of the argument Report leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may b...
CVE-2025-15436
CVE-2025-15436 affects Yonyou KSOA 9.0. The issue lies in the file /worksheet/work_edit.jsp where manipulating the Report argument enables SQL injection. It can be exploited remotely, with the exploit publicly disclosed and vendor contact attempts noted as unaddressed. Multiple sources (NVD, Red ...
CVE-2025-15435
CVE-2025-15435 affects Yonyou KSOA 9.0. The vulnerability is an SQL injection in an unknown functionality of file /worksheet/work_update.jsp, triggered by manipulating the Report argument. The attack can be initiated remotely and an exploit has been published; vendor response is not provided. Con...
CVE-2025-15420
CVE-2025-15420 affects Yonyou KSOA 9.0. The vulnerability is in the file "/worksheet/agent_work_report.jsp" where manipulating the parameter ID leads to SQL injection. This can be exploited remotely, with the exploit publicly disclosed. Multiple sources (NVD, Red Hat, CVE lists) corroborate the i...
CVE-2025-15420 Yonyou KSOA agent_work_report.jsp sql injection
A security vulnerability has been detected in Yonyou KSOA 9.0. This affects an unknown part of the file /worksheet/agentworkreport.jsp. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The...
CVE-2025-15420 Yonyou KSOA agent_work_report.jsp sql injection
A security vulnerability has been detected in Yonyou KSOA 9.0. This affects an unknown part of the file /worksheet/agentworkreport.jsp. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The...
Yonyou KSOA SQL注入漏洞
Yonyou KSOA is an enterprise-level management software from China's UFIDA Yonyou Corporation. A SQL injection vulnerability exists in Yonyou KSOA version 9.0, which originates from an incorrect manipulation of the parameter Report in the file /worksheet/workedit.jsp, which could lead to a SQL...
Yonyou KSOA SQL注入漏洞
Yonyou KSOA is an enterprise management software from China's Yonyou Corporation. A SQL injection vulnerability exists in Yonyou KSOA version 9.0, which stems from incorrect manipulation of the parameter ID in the file /worksheet/agentworkreport.jsp, which could lead to a SQL injection attack...
PT-2026-1056
Name of the Vulnerable Software and Affected Versions Yonyou KSOA version 9.0 Description A flaw exists in Yonyou KSOA 9.0 related to the file '/worksheet/work update.jsp'. Manipulation of the Report argument in this file can lead to SQL injection. The attack can be initiated remotely. An exploit...
PT-2026-1036
Name of the Vulnerable Software and Affected Versions Yonyou KSOA version 9.0 Description A security issue exists in Yonyou KSOA 9.0 related to SQL injection. The issue is located in the file /worksheet/agent work report.jsp. Manipulation of the ID argument can lead to a successful exploit. The...
PT-2026-1059
Name of the Vulnerable Software and Affected Versions Yonyou KSOA version 9.0 Description A SQL injection issue exists in Yonyou KSOA 9.0 due to manipulation of the Report argument within the file /worksheet/work edit.jsp. This allows for remote attacks. The exploit details have been publicly...
PT-2026-1149
CVE-2025-22185 - Apache Tomcat HTTP Request Smuggling CVE ID : CVE-2025-22185 Published : Jan. 1, 2026, 1:15 a.m. | 3 hours, 5 minutes ago Description : Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used. Severity: 0.0 | NA Visit...
PT-2026-8208
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's IPv6 implementation related to ECMP Equal-Cost Multi-Path routing. Specifically, a mismatch in sibling counts can occur when clearing the RTF ADDRCONF...
SQLite report about CVE-2026-11824
This appears to be a duplicate of CVE-2026-11822...
PT-2026-26578
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.0-rc8+ 33 Description The Linux kernel contains a flaw within the macvlan module. Specifically, a race condition exists in the macvlan common newlink function's error path, potentially leading to a...
PT-2026-5525
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the idpf vc core deinit function. The issue involves failing to free hw-lan regs, as reported by kmemleak during reset. This can lead to memory...
PT-2026-27709
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a use-after-free issue within the crypto/ccp module. Specifically, the error path in the sev tsm init locked function dereferences a pointer t after the...
PT-2026-8186
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential buffer overflow issue exists in the i2c hid get report function within the Linux kernel's HID i2c subsystem. The i2c hid xfer function reads data into ihid-rawbuf, and the...
PT-2026-20643
Name of the Vulnerable Software and Affected Versions Open Babel versions prior to 3.1.2 Description A security issue exists in Open Babel up to version 3.1.1. The issue involves an out-of-bounds read within the OpenBabel::transform3d::DescribeAsString function located in the...