Browse CVEs

CRITICAL 9.8 CVE-2026-22679EPSS 21% Weaver (Fanwei) E-cology 10.0 versions prior to 20260312 contain an unauthenticated remote code execution vulnerability in the /papi/esearch/data/dev… E Cology 20260312+ Fix from $2,3002026-04-07 HIGH 7.5 CVE-2025-34038 A SQL injection vulnerability exists in Weaver E-cology 8.0 via the getdata.jsp endpoint. The application directly passes unsanitized user input from… E Cology after 8.0 Fix from $1,9502025-06-24 CRITICAL 9.8 CVE-2024-48069 A vulnerability was found in Weaver E-cology allows attackers use race conditions to bypass security mechanisms to upload malicious files and control… E Cology Mitigation only Fix from $2,3002024-11-19 CRITICAL 9.8 CVE-2024-48070 An issue in Weaver E-cology v. attackers construct special requests to insert remote malicious code and to trigger malicious code execution, and cont… E Cology Mitigation only Fix from $2,3002024-11-19 CRITICAL 9.8 CVE-2024-48072 Weaver Ecology v9.* was discovered to contain a SQL injection vulnerability via the component /mobilemode/Action.jsp?invoker=com.weaver.formmodel.mob… E Cology Mitigation only Fix from $2,3002024-11-19 MEDIUM 6.5 CVE-2024-48071 E-cology has a directory traversal vulnerability. An attacker can exploit this vulnerability to delete the server directory, causing the server to pe… E Cology Mitigation only Fix from $1,6002024-11-19 HIGH 7.5 CVE-2024-7704 A vulnerability was found in Weaver e-cology 8. It has been classified as problematic. Affected is an unknown function of the file /cloudstore/ecode/… E Cology No fix yet Fix from $1,9502024-08-12 HIGH 7.2 CVE-2024-3227 A vulnerability was found in Panwei eoffice OA up to 9.5. It has been declared as critical. This vulnerability affects unknown code of the file /gene… E Office after 9.5 Fix from $1,9502024-04-03 CRITICAL 9.8 CVE-2023-51892 An issue in weaver e-cology v.10.0.2310.01 allows a remote attacker to execute arbitrary code via a crafted script to the FrameworkShellController co… E Cology Mitigation only Fix from $2,3002024-01-20 CRITICAL 9.8 CVE-2023-34798 An arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute arbitrary code via uploading a crafted file. E Office 9.5+ Fix from $2,3002023-07-25 CRITICAL 9.8 CVE-2023-3793 A vulnerability was found in Weaver e-cology. It has been rated as critical. This issue affects some unknown processing of the file filelFileDownload… E Cology 10.58.0+ Fix from $2,3002023-07-20 HIGH 8.8 CVE-2023-2806 A vulnerability classified as problematic was found in Weaver e-cology up to 9.0. Affected by this vulnerability is the function RequestInfoByXml of … E Cology No fix yet Fix from $1,9502023-05-19 HIGH 7.5 CVE-2023-2765 A vulnerability has been found in Weaver OA up to 9.5 and classified as problematic. This vulnerability affects unknown code of the file /E-mobile/Ap… E Office No fix yet Fix from $1,9502023-05-17 HIGH 7.5 CVE-2023-2766EPSS 54% A vulnerability was found in Weaver OA 9.5 and classified as problematic. This issue affects some unknown processing of the file /building/backmgr/ur… E Office No fix yet Fix from $1,9502023-05-17 CRITICAL 9.8 CVE-2023-2648EPSS 28% A vulnerability was found in Weaver E-Office 9.5. It has been classified as critical. This affects an unknown part of the file /inc/jquery/uploadify/… E Office No fix yet Fix from $2,3002023-05-11 HIGH 8.8 CVE-2023-2647EPSS 7% A vulnerability was found in Weaver E-Office 9.5 and classified as critical. Affected by this issue is some unknown functionality of the file /webroo… E Office No fix yet Fix from $1,9502023-05-11 MEDIUM 6.5 CVE-2019-16133 An issue was discovered in eteams OA v4.0.34. Because the session is not strictly checked, the account names and passwords of all employees in the co… Eteams Oa No fix yet Fix from $1,6002019-09-09 MEDIUM 6.1 CVE-2019-10272 An issue was discovered in Weaver e-cology 9.0. There is a CRLF Injection vulnerability via the /workflow/request/ViewRequestForwardSPA.jsp isinterve… E Cology No fix yet Fix from $1,6002019-04-30