Lucene search
K

91 matches found

RedhatCVE
RedhatCVE
added 2025/10/07 6:9 a.m.2 views

CVE-2025-11320

A security vulnerability has been detected in zhuimengshaonian wisdom-education up to 1.0.4. Impacted is the function uploadFile of the file src/main/java/com/education/core/controller/UploadController.java. Such manipulation of the argument File leads to unrestricted upload. It is possible to...

6.5CVSS6.7AI score0.00048EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/10/07 6:9 a.m.1 views

CVE-2025-11321

A vulnerability was detected in zhuimengshaonian wisdom-education up to 1.0.4. The affected element is an unknown function of the file src/main/java/com/education/api/controller/student/WrongBookController.java. Performing manipulation of the argument subjectId results in authorization bypass. Th...

5.3CVSS6.7AI score0.00033EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2014-6694

Malware in sbrugna...

5.4CVSS6.4AI score0.00134EPSS
Exploits0References4
NVD
NVD
added 2025/10/06 5:15 a.m.1 views

CVE-2025-11321

A vulnerability was detected in zhuimengshaonian wisdom-education up to 1.0.4. The affected element is an unknown function of the file src/main/java/com/education/api/controller/student/WrongBookController.java. Performing manipulation of the argument subjectId results in authorization bypass. Th...

5.3CVSS0.00033EPSS
Exploits0References5
NVD
NVD
added 2025/10/06 5:15 a.m.2 views

CVE-2025-11320

A security vulnerability has been detected in zhuimengshaonian wisdom-education up to 1.0.4. Impacted is the function uploadFile of the file src/main/java/com/education/core/controller/UploadController.java. Such manipulation of the argument File leads to unrestricted upload. It is possible to...

6.5CVSS0.00048EPSS
Exploits0References5
CVE
CVE
added 2025/10/06 5:2 a.m.7 views

CVE-2025-11321

CVE-2025-11321 affects zhuimengshaonian wisdom-education up to version 1.0.4. The vulnerability resides in an unknown function in src/main/java/com/education/api/controller/student/WrongBookController.java, where manipulating the subjectId argument leads to an authorization bypass. It is exploita...

5.3CVSS6.5AI score0.00033EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/10/06 5:2 a.m.6 views

CVE-2025-11321 zhuimengshaonian wisdom-education WrongBookController.java authorization

A vulnerability was detected in zhuimengshaonian wisdom-education up to 1.0.4. The affected element is an unknown function of the file src/main/java/com/education/api/controller/student/WrongBookController.java. Performing manipulation of the argument subjectId results in authorization bypass. Th...

5.3CVSS0.00033EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/10/06 5:2 a.m.1 views

CVE-2025-11321 zhuimengshaonian wisdom-education WrongBookController.java authorization

A vulnerability was detected in zhuimengshaonian wisdom-education up to 1.0.4. The affected element is an unknown function of the file src/main/java/com/education/api/controller/student/WrongBookController.java. Performing manipulation of the argument subjectId results in authorization bypass. Th...

5.3CVSS6.5AI score0.00033EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/06 4:32 a.m.1 views

EUVD-2025-32485

A security vulnerability has been detected in zhuimengshaonian wisdom-education up to 1.0.4. Impacted is the function uploadFile of the file src/main/java/com/education/core/controller/UploadController.java. Such manipulation of the argument File leads to unrestricted upload. It is possible to...

6.5CVSS6.4AI score0.00048EPSS
Exploits0References6
Cvelist
Cvelist
added 2025/10/06 4:32 a.m.6 views

CVE-2025-11320 zhuimengshaonian wisdom-education UploadController.java uploadFile unrestricted upload

A security vulnerability has been detected in zhuimengshaonian wisdom-education up to 1.0.4. Impacted is the function uploadFile of the file src/main/java/com/education/core/controller/UploadController.java. Such manipulation of the argument File leads to unrestricted upload. It is possible to...

6.5CVSS0.00048EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/10/06 4:32 a.m.1 views

CVE-2025-11320 zhuimengshaonian wisdom-education UploadController.java uploadFile unrestricted upload

A security vulnerability has been detected in zhuimengshaonian wisdom-education up to 1.0.4. Impacted is the function uploadFile of the file src/main/java/com/education/core/controller/UploadController.java. Such manipulation of the argument File leads to unrestricted upload. It is possible to...

6.5CVSS6.4AI score0.00048EPSS
Exploits0References5
CVE
CVE
added 2025/10/06 4:32 a.m.7 views

CVE-2025-11320

CVE-2025-11320 affects zhuimengshaonian wisdom-education up to 1.0.4. The vulnerability lies in the uploadFile function in src/main/java/com/education/core/controller/UploadController.java, where improper handling/manipulation of the File argument enables unrestricted file upload. Remote exploita...

6.5CVSS6.6AI score0.00048EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/10/06 12:0 a.m.2 views

PT-2025-40849

Name of the Vulnerable Software and Affected Versions zhuimengshaonian wisdom-education versions up to 1.0.4 Description A flaw exists in zhuimengshaonian wisdom-education that allows for authorization bypass. This occurs through manipulation of the subjectId argument within an unknown function...

5.3CVSS4.1AI score0.00033EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2025/10/06 12:0 a.m.2 views

PT-2025-40848

Name of the Vulnerable Software and Affected Versions zhuimengshaonian wisdom-education versions prior to 1.0.5 Description A security issue exists in zhuimengshaonian wisdom-education. The uploadFile function within the file src/main/java/com/education/core/controller/UploadController.java is...

6.5CVSS6.3AI score0.00048EPSS
Exploits0References10
CNNVD
CNNVD
added 2025/10/06 12:0 a.m.1 views

wisdom-education 安全漏洞

wisdom-education is a cloud intelligence education platform by zhuimengshaonian individual developer. A security vulnerability exists in wisdom-education 1.0.4 and earlier versions, which originates from the incorrect operation of subjectId in the file...

5.3CVSS4.8AI score0.00033EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/10/06 12:0 a.m.1 views

wisdom-education 代码问题漏洞

wisdom-education is a cloud intelligence education platform by zhuimengshaonian individual developer. A code issue vulnerability exists in wisdom-education 1.0.4 and earlier versions, which stems from the incorrect manipulation of the parameter File in the file...

6.5CVSS6.6AI score0.00048EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-11525

Malicious code in bioql PyPI...

9.9CVSS6.6AI score0.0135EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-11524

Malicious code in bioql PyPI...

5.3CVSS6.6AI score0.009EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-31441

Malicious code in bioql PyPI...

5.3CVSS4.9AI score0.00036EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-11521

Malicious code in bioql PyPI...

6.9CVSS6.6AI score0.01311EPSS
Exploits0References2
Rows per page
Query Builder