Lucene search
+L

4902 matches found

OSV
OSV
•added 2026/01/26 8:16 a.m.•13 views

CVE-2026-1427

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...

8.7CVSS6.1AI score0.01424EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/01/26 8:14 a.m.•38 views

CVE-2026-1428 WellChoose|Single Sign-On Portal System - OS Command Injection

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...

8.8CVSS0.01397EPSS
SaveExploits0References2
CVE
CVE
•added 2026/01/26 8:14 a.m.•34 views

CVE-2026-1428

CVE-2026-1428 concerns WellChoose’s Single Sign-On Portal System. The connected documents describe an OS Command Injection vulnerability that allows authenticated remote attackers to inject arbitrary OS commands and execute them on the server. The advisories do not publicly provide exact affected...

8.8CVSS6.1AI score0.01397EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/01/26 8:14 a.m.•7 views

CVE-2026-1428 WellChoose|Single Sign-On Portal System - OS Command Injection

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...

8.8CVSS6.1AI score0.01397EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/26 8:14 a.m.•11 views

EUVD-2026-4708

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...

8.8CVSS6.1AI score0.01397EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/01/26 8:14 a.m.•9 views

CVE-2026-1428

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...

8.8CVSS6.1AI score0.01397EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/01/26 8:06 a.m.•13 views

EUVD-2026-4707

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...

8.8CVSS6.1AI score0.01424EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/01/26 8:06 a.m.•9 views

CVE-2026-1427

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...

8.8CVSS6.1AI score0.01424EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/01/26 8:06 a.m.•40 views

CVE-2026-1427 WellChoose|Single Sign-On Portal System - OS Command Injection

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...

8.8CVSS0.01424EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/01/26 12:00 a.m.•17 views

PT-2026-4733

Name of the Vulnerable Software and Affected Versions WellChoose Single Sign-On Portal System affected versions not specified Description The WellChoose Single Sign-On Portal System contains an OS Command Injection issue. Authenticated remote attackers can inject arbitrary OS commands and execute...

8.8CVSS6.1AI score0.01397EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2026/01/26 12:00 a.m.•14 views

PT-2026-4732

Name of the Vulnerable Software and Affected Versions WellChoose Single Sign-On Portal System affected versions not specified WellChoose Organization Portal System affected versions not specified Description An OS Command Injection issue exists in the WellChoose Portal Systems, potentially allowi...

8.8CVSS6.3AI score0.01424EPSS
SaveExploits0References12
CNNVD
CNNVD
•added 2026/01/26 12:00 a.m.•20 views

WellChoose Single Sign-On Portal System: Operating System Command Injection Vulnerability

WellChoose Single Sign-On Portal System is a single-sign-on portal system developed by WellChoose in Taiwan, China. The WellChoose Single Sign-On Portal System has a vulnerability related to operating system command injection. This vulnerability stems from the presence of OS command injection,...

8.8CVSS6AI score0.01397EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/01/26 12:00 a.m.•15 views

WellChoose Single Sign-On Portal System has security vulnerabilities

WellChoose Single Sign-On Portal System is a single-sign-on portal system developed by WellChoose in Taiwan, China. The WellChoose Single Sign-On Portal System has a security vulnerability, which stems from OS command injection, potentially allowing for the execution of arbitrary OS commands...

8.8CVSS6AI score0.01424EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/01/26 12:00 a.m.•19 views

WellChoose Single Sign-On Portal System Cross-Site Script Vulnerabilities

WellChoose Single Sign-On Portal System is a single-sign-on portal system developed by WellChoose, a company based in Taiwan, China. The WellChoose Single Sign-On Portal System has a cross-site scripting vulnerability. This vulnerability stems from the presence of reflective cross-site scripts,...

5.4CVSS5.8AI score0.00247EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/01/26 12:00 a.m.•19 views

PT-2026-4734

Name of the Vulnerable Software and Affected Versions WellChoose Single Sign-On Portal System affected versions not specified Description The WellChoose Single Sign-On Portal System is susceptible to a Reflected Cross-site Scripting issue. This allows attackers with existing access to execute...

5.4CVSS6.1AI score0.00247EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/26 12:00 a.m.•0 views

CVE-2026-1428: Improper Neutralization of Special Elements used in an OS Command

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...

8.8CVSS6.1AI score0.01397EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/26 12:00 a.m.•2 views

CVE-2026-1429: Improper Neutralization of Input During Web Page Generation

Single Sign-On Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing authenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks...

5.4CVSS6.3AI score0.00247EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/26 12:00 a.m.•1 views

CVE-2026-1427: Improper Neutralization of Special Elements used in an OS Command

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...

8.8CVSS6.1AI score0.01424EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/24 3:17 p.m.•16 views

CVE-2025-2204

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tapandsign Technologies Software Inc. Tap allows Cross-Site Scripting XSS.This issue affects Tap: through 23012026. NOTE: The vendor was contacted early about this disclosure but did not...

4.7CVSS5.4AI score0.00325EPSS
SaveExploits0References1
The Hacker News
The Hacker News
•added 2026/01/23 12:30 p.m.•19 views

Fortinet Confirms Active FortiCloud SSO Bypass on Fully Patched FortiGate Firewalls

Fortinet has officially confirmed that it's working to completely plug a FortiCloud SSO authentication bypass vulnerability following reports of fresh exploitation activity on fully-patched firewalls. "In the last 24 hours, we have identified a number of cases where the exploit was to a device th...

9.8CVSS5.8AI score0.68293EPSS
SaveExploits1
Rows per page
Query Builder