CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

A vulnerability classified as critical was found in witmy my-springsecurity-plus up to 2024-07-04. Affected by this vulnerability is an unknown functionality of the file /api/dept/build. The manipulation of the argument params.dataScope leads to sql injection. The attack can be launched remotely...

6.5CVSS7.4AI score0.00473EPSS

Exploits0References1

RedhatCVE•added 2025/05/23 10:23 a.m.•4 views

CVE-2024-6679

A vulnerability classified as critical has been found in witmy my-springsecurity-plus up to 2024-07-04. Affected is an unknown function of the file /api/role. The manipulation of the argument params.dataScope leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

6.5CVSS7.5AI score0.00566EPSS

Exploits0References1

RedhatCVE•added 2025/05/23 10:23 a.m.•13 views

CVE-2024-40542

my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/role?offset...

9.8CVSS8.4AI score0.00381EPSS

Exploits1References1

RedhatCVE•added 2025/05/23 10:23 a.m.•7 views

CVE-2024-40539

my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/user...

9.8CVSS8.4AI score0.00456EPSS

Exploits1References1

RedhatCVE•added 2025/05/23 10:23 a.m.•6 views

CVE-2024-40540

my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/dept...

9.8CVSS8.4AI score0.00456EPSS

Exploits1References1

RedhatCVE•added 2025/05/23 8:13 a.m.•19 views

CVE-2024-6681

A vulnerability, which was classified as critical, has been found in witmy my-springsecurity-plus up to 2024-07-04. Affected by this issue is some unknown functionality of the file /api/dept. The manipulation of the argument params.dataScope leads to sql injection. The attack may be launched...

6.5CVSS6.8AI score0.00473EPSS

Exploits0References1

RedhatCVE•added 2025/05/23 8:9 a.m.•12 views

CVE-2024-6676

A vulnerability has been found in witmy my-springsecurity-plus up to 2024-07-03 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /api/user. The manipulation of the argument params.dataScope leads to sql injection. The attack can be launched...

6.5CVSS6.8AI score0.00446EPSS

Exploits0References1

RedhatCVE•added 2025/05/23 7:32 a.m.•13 views

CVE-2024-40541

my-springsecurity-plus before v2024.07.03 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /api/dept/build...

9.8CVSS9.8AI score0.00431EPSS

Exploits1References1

CNNVD•added 2025/03/22 12:0 a.m.•2 views

CicadasCMS 注入漏洞

CicadasCMS is a content management framework developed based on SpringBoot Mybatis SpringSecurity Vue by westboy Individual Developer in China. An injection vulnerability exists in CicadasCMS version 1.0, which stems from vulnerability to SQL injection attacks...

6.5CVSS7AI score0.00304EPSS

Exploits1References5