dbcve.org
Vulnerability index

Browse CVEs

6 matching
Cards Compact
Filters 1 Clear all
Severity

Filters apply as you choose them.

Top technology Linux 13140 Google 12536 Microsoft 12379 Oracle 6843 Apple 6692 Adobe 6387 Ibm 6336 Cisco 5759 Debian 3919 Mozilla 2895 Apache 2864 Redhat 2592
Jfinaloa HIGH 8.8
CVE-2024-57775

JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component getWorkFlowHis?insid.

Fix: 2025-01-01+
Fix from $1,950 2025-01-16
Jfinaloa CRITICAL 9.8
CVE-2024-57768

JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component validRoleKey?sysRole.key.

Fix: 2025-01-01+
Fix from $2,300 2025-01-16
Jfinaloa HIGH 8.8
CVE-2024-57769

JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component borrowmoney/listData?applyUser.

Fix: 2025-01-01+
Fix from $1,950 2025-01-16
Jfinaloa HIGH 8.8
CVE-2024-57770

JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component apply/save#oaContractApply.id.

Fix: 2025-01-01+
Fix from $1,950 2025-01-16
Jfinaloa CRITICAL 9.8
CVE-2023-0758

A vulnerability was found in glorylion JFinalOA 1.0.2 and classified as critical. This issue affects some unknown processing of the file src/main/jav…

Mitigation only
Fix from $2,300 2023-02-09
Jfinaloa MEDIUM 6.5
CVE-2021-40645

An SQL Injection vulnerability exists in glorylion JFinalOA as of 9/7/2021 in the defkey parameter getHaveDoneTaskDataList method of the FlowTaskCont…

No fix yet
Fix from $1,600 2022-03-30