Lucene search
K

26 matches found

RedhatCVE
RedhatCVE
added 2025/12/08 5:11 p.m.1 views

CVE-2025-14199

A flaw has been found in Verysync 微力同步 up to 2.21.3. This impacts an unknown function of the file /rest/f/api/resources/f96956469e7be39d/tmp/text.txt?override=false of the component Web Administration Module. Executing manipulation can lead to unrestricted upload. The attack may be performed from...

9.8CVSS6.1AI score0.00053EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/12/08 5:11 p.m.2 views

CVE-2025-14198

A vulnerability was detected in Verysync 微力同步 2.21.3. This affects an unknown function of the file /safebrowsing/clientreport/download?key=dummytoken of the component Web Administration Module. Performing manipulation results in information disclosure. The attack is possible to be carried out...

6.9CVSS6.3AI score0.00044EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/12/08 4:14 p.m.6 views

CVE-2025-14197

A security vulnerability has been detected in Verysync 微力同步 up to 2.21.3. The impacted element is an unknown function of the file /rest/f/api/resources/f96956469e7be39d of the component Web Administration Module. Such manipulation leads to information disclosure. The attack can be executed...

6.9CVSS5.2AI score0.0004EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/07 6:31 p.m.2 views

EUVD-2025-201606

A security vulnerability has been detected in Verysync 微力同步 up to 2.21.3. The impacted element is an unknown function of the file /rest/f/api/resources/f96956469e7be39d of the component Web Administration Module. Such manipulation leads to information disclosure. The attack can be executed...

6.9CVSS5.8AI score0.0004EPSS
Exploits0References7
EUVD
EUVD
added 2025/12/07 6:31 p.m.1 views

EUVD-2025-201608

A flaw has been found in Verysync 微力同步 up to 2.21.3. This impacts an unknown function of the file /rest/f/api/resources/f96956469e7be39d/tmp/text.txt?override=false of the component Web Administration Module. Executing manipulation can lead to unrestricted upload. The attack may be performed from...

6.5CVSS5.8AI score0.00053EPSS
Exploits1References5
EUVD
EUVD
added 2025/12/07 6:31 p.m.3 views

EUVD-2025-201609

A vulnerability was detected in Verysync 微力同步 2.21.3. This affects an unknown function of the file /safebrowsing/clientreport/download?key=dummytoken of the component Web Administration Module. Performing manipulation results in information disclosure. The attack is possible to be carried out...

6.9CVSS5.8AI score0.00044EPSS
Exploits1References5
OSV
OSV
added 2025/12/07 5:15 p.m.3 views

CVE-2025-14198

A vulnerability was detected in Verysync 微力同步 2.21.3. This affects an unknown function of the file /safebrowsing/clientreport/download?key=dummytoken of the component Web Administration Module. Performing manipulation results in information disclosure. The attack is possible to be carried out...

6.9CVSS5.5AI score
Exploits0References4
NVD
NVD
added 2025/12/07 5:15 p.m.1 views

CVE-2025-14198

A vulnerability was detected in Verysync 微力同步 2.21.3. This affects an unknown function of the file /safebrowsing/clientreport/download?key=dummytoken of the component Web Administration Module. Performing manipulation results in information disclosure. The attack is possible to be carried out...

6.9CVSS0.00044EPSS
Exploits1References4
NVD
NVD
added 2025/12/07 5:15 p.m.3 views

CVE-2025-14199

A flaw has been found in Verysync 微力同步 up to 2.21.3. This impacts an unknown function of the file /rest/f/api/resources/f96956469e7be39d/tmp/text.txt?override=false of the component Web Administration Module. Executing manipulation can lead to unrestricted upload. The attack may be performed from...

9.8CVSS0.00053EPSS
Exploits1References4
OSV
OSV
added 2025/12/07 5:15 p.m.1 views

CVE-2025-14199

A flaw has been found in Verysync 微力同步 up to 2.21.3. This impacts an unknown function of the file /rest/f/api/resources/f96956469e7be39d/tmp/text.txt?override=false of the component Web Administration Module. Executing manipulation can lead to unrestricted upload. The attack may be performed from...

9.8CVSS5.3AI score
Exploits0References4
Cvelist
Cvelist
added 2025/12/07 5:2 p.m.18 views

CVE-2025-14199 Verysync 微力同步 Web Administration text.txt unrestricted upload

A flaw has been found in Verysync 微力同步 up to 2.21.3. This impacts an unknown function of the file /rest/f/api/resources/f96956469e7be39d/tmp/text.txt?override=false of the component Web Administration Module. Executing manipulation can lead to unrestricted upload. The attack may be performed from...

6.5CVSS0.00053EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/12/07 5:2 p.m.1 views

CVE-2025-14199 Verysync 微力同步 Web Administration text.txt unrestricted upload

A flaw has been found in Verysync 微力同步 up to 2.21.3. This impacts an unknown function of the file /rest/f/api/resources/f96956469e7be39d/tmp/text.txt?override=false of the component Web Administration Module. Executing manipulation can lead to unrestricted upload. The attack may be performed from...

6.5CVSS5.9AI score0.00053EPSS
Exploits1References4
CVE
CVE
added 2025/12/07 5:2 p.m.8 views

CVE-2025-14199

Verysync up to 2.21.3 is affected in the Web Administration Module via the file path /rest/f/api/resources/f96956469e7be39d/tmp/text.txt?override=false, where manipulation can lead to unrestricted file upload. The vulnerability can be exploited remotely and an exploit has been published. Affected...

9.8CVSS5.9AI score0.00053EPSS
Exploits1References4Affected Software1
CVE
CVE
added 2025/12/07 4:32 p.m.10 views

CVE-2025-14198

CVE-2025-14198 affects Verysync 微力同步 version 2.21.3, specifically the Web Administration Module’s file /safebrowsing/clientreport/download?key=dummytoken. The issue is an information disclosure caused by manipulation of that endpoint, with remote access possible. Public exploit appears to exist, ...

6.9CVSS5.2AI score0.00044EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2025/12/07 4:32 p.m.14 views

CVE-2025-14198 Verysync 微力同步 Web Administration download information disclosure

A vulnerability was detected in Verysync 微力同步 2.21.3. This affects an unknown function of the file /safebrowsing/clientreport/download?key=dummytoken of the component Web Administration Module. Performing manipulation results in information disclosure. The attack is possible to be carried out...

6.9CVSS0.00044EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/12/07 4:32 p.m.1 views

CVE-2025-14198 Verysync 微力同步 Web Administration download information disclosure

A vulnerability was detected in Verysync 微力同步 2.21.3. This affects an unknown function of the file /safebrowsing/clientreport/download?key=dummytoken of the component Web Administration Module. Performing manipulation results in information disclosure. The attack is possible to be carried out...

6.9CVSS6AI score0.00044EPSS
Exploits1References4
NVD
NVD
added 2025/12/07 4:15 p.m.1 views

CVE-2025-14197

A security vulnerability has been detected in Verysync 微力同步 up to 2.21.3. The impacted element is an unknown function of the file /rest/f/api/resources/f96956469e7be39d of the component Web Administration Module. Such manipulation leads to information disclosure. The attack can be executed...

6.9CVSS0.0004EPSS
Exploits0References6
CVE
CVE
added 2025/12/07 4:2 p.m.8 views

CVE-2025-14197

CVE-2025-14197 affects Verysync up to 2.21.3 in the Web Administration Module, via manipulation of the file path /rest/f/api/resources/f96956469e7be39d, leading to information disclosure. The vulnerability is remote-exploitable with a publicly disclosed exploit; vendor acknowledgement is absent i...

6.9CVSS6AI score0.0004EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2025/12/07 4:2 p.m.2 views

CVE-2025-14197 Verysync 微力同步 Web Administration f96956469e7be39d information disclosure

A security vulnerability has been detected in Verysync 微力同步 up to 2.21.3. The impacted element is an unknown function of the file /rest/f/api/resources/f96956469e7be39d of the component Web Administration Module. Such manipulation leads to information disclosure. The attack can be executed...

6.9CVSS6AI score0.0004EPSS
Exploits0References6
Cvelist
Cvelist
added 2025/12/07 4:2 p.m.13 views

CVE-2025-14197 Verysync 微力同步 Web Administration f96956469e7be39d information disclosure

A security vulnerability has been detected in Verysync 微力同步 up to 2.21.3. The impacted element is an unknown function of the file /rest/f/api/resources/f96956469e7be39d of the component Web Administration Module. Such manipulation leads to information disclosure. The attack can be executed...

6.9CVSS0.0004EPSS
Exploits0References6
Rows per page
Query Builder