Threat database

12 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.3	EPSS 0.2%	CVE-2024-33161cxcxcxcxcxcxcxc · SQL Injection Medium5.3EPSS 0.2%2024-05-07CVE Database V5CVE-2024-33161 J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the unallocatedList() function. EPSS 0.2%Vulnerability CWE-89	CVE Database V5	2024-05-07
Critical	9.8	EPSS 0.6%	CVE-2024-33155cxcxcxcxcxcxcxc · SQL Injection Critical9.8EPSS 0.6%2024-05-07CVE Database V5CVE-2024-33155 J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the getDeptList() function. EPSS 0.6%Vulnerability CWE-89	CVE Database V5	2024-05-07
Critical	9.8	EPSS 0.6%	CVE-2024-33153cxcxcxcxcxcxcxc · SQL Injection Critical9.8EPSS 0.6%2024-05-07CVE Database V5CVE-2024-33153 J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the commentList() function. EPSS 0.6%Vulnerability CWE-89	CVE Database V5	2024-05-07
High	8.1	EPSS 0.5%	CVE-2024-33149cxcxcxcxcxcxcxc · SQL Injection High8.1EPSS 0.5%2024-05-07CVE Database V5CVE-2024-33149 J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the myProcessList function. EPSS 0.5%Vulnerability CWE-89	CVE Database V5	2024-05-07
High	7.3	EPSS 0.4%	CVE-2024-33148cxcxcxcxcxcxcxc · SQL Injection High7.3EPSS 0.4%2024-05-07CVE Database V5CVE-2024-33148 J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the list function. EPSS 0.4%Vulnerability CWE-89	CVE Database V5	2024-05-07
High	8.8	EPSS 0.5%	CVE-2024-33147cxcxcxcxcxcxcxc · SQL Injection High8.8EPSS 0.5%2024-05-07CVE Database V5CVE-2024-33147 J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the authRoleList function. EPSS 0.5%Vulnerability CWE-89	CVE Database V5	2024-05-07
High	8.8	EPSS 0.5%	CVE-2024-33144cxcxcxcxcxcxcxc · SQL Injection High8.8EPSS 0.5%2024-05-07CVE Database V5CVE-2024-33144 J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the findApplyedTasksPage function in BpmTaskMapper.xml. EPSS 0.5%Vulnerability CWE-89	CVE Database V5	2024-05-07
High	7.5	EPSS 0.5%	CVE-2024-33139cxcxcxcxcxcxcxc · SQL Injection High7.5EPSS 0.5%2024-05-07CVE Database V5CVE-2024-33139 J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the findpage function. EPSS 0.5%Vulnerability CWE-89	CVE Database V5	2024-05-07
Critical	9.8	EPSS 0.5%	CVE-2024-33124cxcxcxcxcxcxcxc · SQL Injection Critical9.8EPSS 0.5%2024-05-07CVE Database V5CVE-2024-33124 Roothub v2.6 was discovered to contain a SQL injection vulnerability via the nodeTitle parameter in the parentNode() function.. EPSS 0.5%Vulnerability CWE-89	CVE Database V5	2024-05-07
Critical	9.8	EPSS 0.8%	CVE-2024-33120cxcxcxcxcxcxcxc · Unrestricted File Upload Critical9.8EPSS 0.8%2024-05-07CVE Database V5CVE-2024-33120 Roothub v2.5 was discovered to contain an arbitrary file upload vulnerability via the customPath parameter in the upload() function. This vulnerability allows attackers to execute arbitrary code via a crafted JSP file. EPSS 0.8%Vulnerability CWE-434	CVE Database V5	2024-05-07
Medium	6.3	EPSS 0.3%	CVE-2024-33121cxcxcxcxcxcxcxc · SQL Injection Medium6.3EPSS 0.3%2024-05-06CVE Database V5CVE-2024-33121 Roothub v2.6 was discovered to contain a SQL injection vulnerability via the 's' parameter in the search() function. EPSS 0.3%Vulnerability CWE-89	CVE Database V5	2024-05-06
Critical	9.8	EPSS 1.0%	CVE-2023-51892 Critical9.8EPSS 1.0%2024-01-20CVE Database V5 An issue in weaver e-cology v.10.0.2310.01 allows a remote attacker to execute arbitrary code via a crafted script to the FrameworkShellController component. EPSS 1.0%Vulnerability	CVE Database V5	2024-01-20

Page 1 of 1