Vulnerability index

Browse CVEs

52 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Novel MEDIUM 6.1
CVE-2025-65442

DOM-based Cross-Site Scripting (XSS) vulnerability in 201206030 novel V3.5.0 allows remote attackers to execute arbitrary JavaScript code or disclose…

No fix yet
Fix from $1,600 2025-12-29
Novel Plus MEDIUM 5.4
CVE-2025-60298

Novel-Plus up to 5.2.4 was discovered to contain a Stored Cross-Site Scripting (XSS) vulnerability via the /author/updateIndexName endpoint. This vul…

Fix: after 5.2.4
Fix from $1,600 2025-10-08
Novel Plus MEDIUM 5.4
CVE-2025-60299

Novel-Plus with 5.2.0 was discovered to contain a Stored Cross-Site Scripting (XSS) vulnerability via the /book/addCommentReply endpoint. An authenti…

No fix yet
Fix from $1,600 2025-10-08
Novel Plus HIGH 8.8
CVE-2025-6535

A vulnerability has been found in xxyopen/201206030 novel-plus up to 5.1.3 and classified as critical. This vulnerability affects the function list o…

Fix: after 5.1.3
Fix from $1,950 2025-06-24
Novel Plus MEDIUM 6.8
CVE-2025-6534

A vulnerability, which was classified as problematic, was found in xxyopen/201206030 novel-plus up to 5.1.3. This affects the function remove of the …

Fix: after 5.1.3
Fix from $1,600 2025-06-24
Novel Plus MEDIUM 5.9
CVE-2025-6533

A vulnerability, which was classified as critical, has been found in xxyopen/201206030 novel-plus up to 5.1.3. Affected by this issue is the function…

Fix: after 5.1.3
Fix from $1,600 2025-06-24
Novel Plus CRITICAL 9.8
CVE-2025-45890

Directory Traversal vulnerability in novel plus before v.5.1.0 allows a remote attacker to execute arbitrary code via the filePath parameter

Fix: 5.1.0+
Fix from $2,300 2025-06-20
Novel CRITICAL 9.8
CVE-2025-4036

A vulnerability was found in 201206030 Novel 3.5.0 and classified as critical. This issue affects the function updateBookChapter of the file src/main…

No fix yet
Fix from $2,300 2025-04-28
Novel Plus CRITICAL 9.8
CVE-2025-4019

A vulnerability, which was classified as critical, was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. Affected is the f…

Fix: 5.1.1+
Fix from $2,300 2025-04-28
Novel Plus HIGH 7.5
CVE-2025-4018

A vulnerability, which was classified as critical, has been found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. This issue a…

Fix: 5.1.1+
Fix from $1,950 2025-04-28
Novel Plus CRITICAL 9.1
CVE-2025-4016

A vulnerability classified as critical has been found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. This affects the functio…

Fix: 5.1.1+
Fix from $2,300 2025-04-28
Novel Plus MEDIUM 6.5
CVE-2025-4017

A vulnerability classified as problematic was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. This vulnerability affects…

Fix: after 5.1.1
Fix from $1,600 2025-04-28
Novel Plus HIGH 7.5
CVE-2025-4015

A vulnerability was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. It has been rated as critical. Affected by this issu…

Fix: 5.1.1+
Fix from $1,950 2025-04-28
Novel Cloud CRITICAL 9.8
CVE-2025-3956

A vulnerability has been found in 201206030 novel-cloud 1.4.0 and classified as critical. This vulnerability affects the function RestResp of the fil…

Mitigation only
Fix from $2,300 2025-04-27
Novel Plus CRITICAL 9.8
CVE-2025-3856

A vulnerability was found in xxyopen Novel-Plus 5.1.0. It has been classified as critical. This affects the function searchByPage of the file /book/s…

No fix yet
Fix from $2,300 2025-04-22
Novel Plus CRITICAL 9.8
CVE-2025-3676

A vulnerability classified as critical has been found in xxyopen Novel-Plus 3.5.0. This affects an unknown part of the file /api/front/search/books. …

No fix yet
Fix from $2,300 2025-04-16
Novel Plus CRITICAL 9.8
CVE-2025-3369

A vulnerability was found in xxyopen Novel-Plus 5.1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the fil…

No fix yet
Fix from $2,300 2025-04-07
Novel Plus MEDIUM 6.5
CVE-2025-26182

An issue in xxyopen novel plus v.4.4.0 and before allows a remote attacker to execute arbitrary code via the PageController.java file

Fix: after 4.4.0
Fix from $1,600 2025-03-04
Novel Plus HIGH 7.5
CVE-2024-33383

Arbitrary File Read vulnerability in novel-plus 4.3.0 and before allows a remote attacker to obtain sensitive information via a crafted GET request u…

Fix: after 4.3.0
Fix from $1,950 2024-04-30
Novel Plus CRITICAL 9.8
CVE-2024-25274

An arbitrary file upload vulnerability in the component /sysFile/upload of Novel-Plus v4.3.0-RC1 allows attackers to execute arbitrary code via uploa…

Mitigation only
Fix from $2,300 2024-02-20
Novel Plus CRITICAL 9.8
CVE-2024-24014

A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass crafted offset, limit, and sort parameters to …

Fix: after 4.2.0
Fix from $2,300 2024-02-08
Novel Plus CRITICAL 9.8
CVE-2024-24017

A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass crafted offset, limit, and sort parameters to …

Fix: after 4.2.0
Fix from $2,300 2024-02-08
Novel Plus CRITICAL 9.8
CVE-2024-24021

A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior. An attacker can pass specially crafted offset, limit, and sort parameters to…

Fix: after 4.2.0
Fix from $2,300 2024-02-08
Novel Plus CRITICAL 9.8
CVE-2024-24018

A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass in crafted offset, limit, and sort parameters …

Fix: after 4.2.0
Fix from $2,300 2024-02-08
Novel Plus CRITICAL 9.8
CVE-2024-24023

A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior. An attacker can pass specially crafted offset, limit, and sort parameters to…

Fix: after 4.2.0
Fix from $2,300 2024-02-08
Novel Plus CRITICAL 9.8
CVE-2024-24024

An arbitrary File download vulnerability exists in Novel-Plus v4.3.0-RC1 and prior at com.java2nb.common.controller.FileController: fileDownload(). A…

Fix: after 4.2.0
Fix from $2,300 2024-02-08
Novel Plus CRITICAL 9.8
CVE-2024-24025

An arbitrary File upload vulnerability exists in Novel-Plus v4.3.0-RC1 and prior at com.java2nb.common.controller.FileController: upload(). An attack…

Fix: after 4.2.0
Fix from $2,300 2024-02-08
Novel Plus CRITICAL 9.8
CVE-2024-24026

An arbitrary File upload vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions at com.java2nb.system.controller.SysUserController: uploadI…

Fix: after 4.2.0
Fix from $2,300 2024-02-08
Novel Plus CRITICAL 9.8
CVE-2024-24019

A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass in crafted offset, limit, and sort parameters …

Fix: after 4.2.0
Fix from $2,300 2024-02-07
Novel Plus CRITICAL 9.8
CVE-2024-24013

A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass crafted offset, limit, and sort parameters to …

Fix: after 4.2.0
Fix from $2,300 2024-02-06