Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
Finesoft ProjectFinesoft

4 matches found

CVE
CVE•added 2024/05/30 3:1 p.m.•72 views

CVE-2024-35504

CVE-2024-35504 affects FineSoft v8.0, with a cross-site scripting (XSS) vulnerability in the login page that allows an attacker to execute arbitrary scripts via a crafted payload in the URL’s errorname parameter after a failed login. The Red Hat / NVD / CVE enrichment entries confirm the issue as...

5.4CVSS5.8AI score0.00254EPSS
CVE
CVE•added 2024/06/24 12:0 a.m.•59 views

CVE-2024-37679

CVE-2024-37679 is a cross-site scripting vulnerability in Hangzhou Meisoft Information Technology Co.’s Finesoft v8.0 and earlier. The issue allows a remote attacker to execute arbitrary code by submitting a crafted script to the login.jsp parameter. The affected software is Finesoft (FineSoft) v...

6.1CVSS6.9AI score0.00416EPSS
CVE
CVE•added 2024/06/24 12:0 a.m.•56 views

CVE-2024-37680

CVE-2024-37680 affects Hangzhou Meisoft Information Technology Co.’s FineSoft

6.3CVSS6.5AI score0.00416EPSS
CVE
CVE•added 2024/06/24 12:0 a.m.•45 views

CVE-2024-37678

CVE-2024-37678 describes a Cross Site Scripting vulnerability in Hangzhou Meisoft Information Technology Co., Ltd. Finesoft v8.0 and earlier. The flaw allows a remote attacker to execute arbitrary code via a crafted script. The affected product is Finesoft (version 8.0 and before); the underlying...

5.3CVSS7.3AI score0.0027EPSS