12 matches found
EUVD-2025-6695
Malicious code in bioql PyPI...
CVE-2025-25589
An XML external entity XXE injection vulnerability in the component /weixin/aes/XMLParse.java of yimioa before v2024.07.04 allows attackers to execute arbitrary code via supplying a crafted XML file...
CVE-2025-25586
yimioa before v2024.07.04 was discovered to contain an information disclosure vulnerability via the component /resources/application.yml...
CVE-2025-25580
yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the listNameBySql method at /xml/UserMapper.xml...
CVE-2025-25590
yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the component /mapper/xml/AddressDao.xml...
CVE-2025-25586
yimioa before v2024.07.04 was discovered to contain an information disclosure vulnerability via the component /resources/application.yml...
CVE-2025-25590
The yimioa (CloudNet OA) software, a locally deployed OA solution, contains a SQL injection vulnerability in versions prior to v2024.07.04 . The flaw exists within the /mapper/xml/AddressDao.xml component. An attacker could potentially exploit this to manipulate database queries, leading to high ...
CVE-2025-25580
The yimioa (CloudNet OA) software, a locally deployed OA application, is vulnerable to a SQL injection vulnerability in versions prior to v2024.07.04 . The flaw exists within the listNameBySql() method located at the /xml/UserMapper.xml API endpoint. This vulnerability allows for the improper neu...
CVE-2025-25586
yimioa before v2024.07.04 was discovered to contain an information disclosure vulnerability via the component /resources/application.yml...
CVE-2025-25582
yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the selectNoticeList method at /xml/OaNoticeMapper.xml...