Vulnerability index

Browse CVEs

62 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Jeecg Boot CRITICAL 9.8
CVE-2023-41543

SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /…

Fix: after 3.5.3
Fix from $2,300 2023-12-30
Jimureport CRITICAL 9.8
CVE-2023-6307

A vulnerability classified as critical was found in jeecgboot JimuReport up to 1.6.1. Affected by this vulnerability is an unknown functionality of t…

Fix: after 1.6.1
Fix from $2,300 2023-11-27
Jeecg Boot MEDIUM 6.5
CVE-2023-47467

Directory Traversal vulnerability in jeecg-boot v.3.6.0 allows a remote privileged attacker to obtain sensitive information via the file directory st…

Mitigation only
Fix from $1,600 2023-11-22
Jeecg Boot CRITICAL 9.8
CVE-2023-40989

SQL injection vulnerbility in jeecgboot jeecg-boot v 3.0, 3.5.3 that allows a remote attacker to execute arbitrary code via a crafted request to the …

Mitigation only
Fix from $2,300 2023-09-22
Jeecg Boot CRITICAL 9.8
CVE-2023-42268

Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show.

Fix: after 3.5.3
Fix from $2,300 2023-09-08
Jeecg Boot HIGH 7.5
CVE-2023-41578

Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection.

Fix: after 3.5.3
Fix from $1,950 2023-09-08
Jimureport CRITICAL 9.8
CVE-2023-4450EPSS 11%

A vulnerability was found in jeecgboot JimuReport up to 1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functio…

Fix: 1.6.1+
Fix from $2,300 2023-08-21
Jeecg Boot MEDIUM 5.5
CVE-2023-38905

SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to cause a denial of service via the Benchmark, PG_Sleep, DBMS_L…

Fix: after 3.5.0
Fix from $1,600 2023-08-17
Jeecg Boot CRITICAL 9.8
CVE-2023-38992EPSS 74%

jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData.

Patch available
Fix from $2,300 2023-07-28
Jeecgboot HIGH 7.5
CVE-2023-34602

JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByCode at org.jeecg.modules.api.…

Fix: after 3.5.1
Fix from $1,950 2023-06-19
Jeecgboot HIGH 7.5
CVE-2023-34603

JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictInfo at org.jeecg.modules.api.c…

Fix: after 3.5.1
Fix from $1,950 2023-06-19
Jeecg Boot CRITICAL 9.8
CVE-2023-34659EPSS 12%

jeecg-boot 3.5.0 and 3.5.1 have a SQL injection vulnerability the id parameter of the /jeecg-boot/jmreport/show interface.

No fix yet
Fix from $2,300 2023-06-16
Jeecg Boot MEDIUM 6.5
CVE-2023-34660

jjeecg-boot V3.5.0 has an unauthorized arbitrary file upload in /jeecg-boot/jmreport/upload interface.

No fix yet
Fix from $1,600 2023-06-16
Jeecg Boot CRITICAL 9.8
CVE-2023-1784

A vulnerability was found in jeecg-boot 3.5.0 and classified as critical. This issue affects some unknown processing of the component API Documentati…

Mitigation only
Fix from $2,300 2023-03-31
Jeecg Boot CRITICAL 9.8
CVE-2023-1741

A vulnerability was found in jeecg-boot 3.5.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the…

Mitigation only
Fix from $2,300 2023-03-30
Jeecg Boot CRITICAL 9.8
CVE-2023-1454EPSS 36%

A vulnerability classified as critical has been found in jeecg-boot 3.5.0. This affects an unknown part of the file jmreport/qurestSql. The manipulat…

No fix yet
Fix from $2,300 2023-03-17
Jeecg HIGH 8.8
CVE-2023-24789

jeecg-boot v3.4.4 was discovered to contain an authenticated SQL injection vulnerability via the building block report component.

No fix yet
Fix from $1,950 2023-03-06
Jeecg HIGH 7.5
CVE-2021-37304

An Insecure Permissions issue in jeecg-boot 2.4.5 allows unauthenticated remote attackers to gain escalated privilege and view sensitive information …

Fix: after 2.4.5
Fix from $1,950 2023-02-03
Jeecg HIGH 7.5
CVE-2021-37305

An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via …

Fix: after 2.4.5
Fix from $1,950 2023-02-03
Jeecg HIGH 7.5
CVE-2021-37306

An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via …

Fix: after 2.4.5
Fix from $1,950 2023-02-03
Jeecg Boot CRITICAL 9.8
CVE-2022-47105

Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData.

Patch available
Fix from $2,300 2023-01-19
Jeecg Boot CRITICAL 9.8
CVE-2022-45206

Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/duplicate/check.

Mitigation only
Fix from $2,300 2022-11-25
Jeecg Boot CRITICAL 9.8
CVE-2022-45207

Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString.

Mitigation only
Fix from $2,300 2022-11-25
Jeecg Boot MEDIUM 5.3
CVE-2022-45205

Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData.

No fix yet
Fix from $1,600 2022-11-25
Jeecg Boot CRITICAL 9.8
CVE-2022-2647

A vulnerability was found in jeecg-boot. It has been declared as critical. This vulnerability affects unknown code of the file /api/. The manipulatio…

Mitigation only
Fix from $2,300 2022-08-04
Jeecg Boot MEDIUM 6.1
CVE-2021-44585

A Cross Site Scripting (XSS) vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event.

No fix yet
Fix from $1,600 2022-03-10
Jeecg Boot CRITICAL 9.8
CVE-2022-22880

Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId.

Fix: after 3.0
Fix from $2,300 2022-02-16
Jeecg Boot CRITICAL 9.8
CVE-2022-22881

Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData.

Fix: after 3.0
Fix from $2,300 2022-02-16
Jeecg Boot CRITICAL 9.8
CVE-2021-46089

In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges.

No fix yet
Fix from $2,300 2022-01-25
Jeecg HIGH 7.5
CVE-2020-20948

An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable.

No fix yet
Fix from $1,950 2021-12-27