Browse CVEs

MEDIUM 6.1 CVE-2025-65442 DOM-based Cross-Site Scripting (XSS) vulnerability in 201206030 novel V3.5.0 allows remote attackers to execute arbitrary JavaScript code or disclose… Novel No fix yet Fix from $1,6002025-12-29 MEDIUM 5.4 CVE-2025-60299 Novel-Plus with 5.2.0 was discovered to contain a Stored Cross-Site Scripting (XSS) vulnerability via the /book/addCommentReply endpoint. An authenti… Novel Plus No fix yet Fix from $1,6002025-10-08 CRITICAL 9.8 CVE-2025-4036 A vulnerability was found in 201206030 Novel 3.5.0 and classified as critical. This issue affects the function updateBookChapter of the file src/main… Novel No fix yet Fix from $2,3002025-04-28 CRITICAL 9.8 CVE-2025-3956 A vulnerability has been found in 201206030 novel-cloud 1.4.0 and classified as critical. This vulnerability affects the function RestResp of the fil… Novel Cloud Mitigation only Fix from $2,3002025-04-27 CRITICAL 9.8 CVE-2025-3856 A vulnerability was found in xxyopen Novel-Plus 5.1.0. It has been classified as critical. This affects the function searchByPage of the file /book/s… Novel Plus No fix yet Fix from $2,3002025-04-22 CRITICAL 9.8 CVE-2025-3676 A vulnerability classified as critical has been found in xxyopen Novel-Plus 3.5.0. This affects an unknown part of the file /api/front/search/books. … Novel Plus No fix yet Fix from $2,3002025-04-16 CRITICAL 9.8 CVE-2025-3369 A vulnerability was found in xxyopen Novel-Plus 5.1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the fil… Novel Plus No fix yet Fix from $2,3002025-04-07 CRITICAL 9.8 CVE-2024-25274 An arbitrary file upload vulnerability in the component /sysFile/upload of Novel-Plus v4.3.0-RC1 allows attackers to execute arbitrary code via uploa… Novel Plus Mitigation only Fix from $2,3002024-02-20 CRITICAL 9.8 CVE-2024-0941 A vulnerability was found in Novel-Plus 4.3.0-RC1 and classified as critical. This issue affects some unknown processing of the file /novel/bookComme… Novel Plus No fix yet Fix from $2,3002024-01-26 CRITICAL 9.8 CVE-2024-0655 A vulnerability has been found in Novel-Plus 4.3.0-RC1 and classified as critical. Affected by this vulnerability is an unknown functionality of the … Novel Plus No fix yet Fix from $2,3002024-01-18 CRITICAL 9.8 CVE-2023-46981 SQL injection vulnerability in Novel-Plus v.4.2.0 allows a remote attacker to execute arbitrary code via a crafted script to the sort parameter in /c… Novel Plus No fix yet Fix from $2,3002023-11-05 HIGH 7.2 CVE-2023-41443 SQL injection vulnerability in Novel-Plus v.4.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the sort parameter in /s… Novel Plus No fix yet Fix from $1,9502023-09-18 CRITICAL 9.8 CVE-2023-30058 novel-plus 3.6.2 is vulnerable to SQL Injection. Novel Plus No fix yet Fix from $2,3002023-09-11 CRITICAL 9.8 CVE-2023-37847 novel-plus v3.6.2 was discovered to contain a SQL injection vulnerability. Novel Plus Mitigation only Fix from $2,3002023-08-14 HIGH 8.8 CVE-2023-2040 A vulnerability classified as critical has been found in novel-plus 3.6.2. Affected is an unknown function of the file /news/list?limit=10&offset=0&o… Novel Plus No fix yet Fix from $1,9502023-04-14 HIGH 8.8 CVE-2023-2041 A vulnerability classified as critical was found in novel-plus 3.6.2. Affected by this vulnerability is an unknown functionality of the file /categor… Novel Plus No fix yet Fix from $1,9502023-04-14 HIGH 8.8 CVE-2023-2039 A vulnerability was found in novel-plus 3.6.2. It has been rated as critical. This issue affects some unknown processing of the file /author/list?lim… Novel Plus No fix yet Fix from $1,9502023-04-14 HIGH 8.8 CVE-2023-1607 A vulnerability was found in novel-plus 3.6.2. It has been classified as critical. This affects an unknown part of the file /common/sysFile/list. The… Novel Plus No fix yet Fix from $1,9502023-03-23 CRITICAL 9.8 CVE-2023-1606 A vulnerability was found in novel-plus 3.6.2 and classified as critical. Affected by this issue is some unknown functionality of the file DictContro… Novel Plus No fix yet Fix from $2,3002023-03-23 HIGH 7.2 CVE-2023-1595 A vulnerability has been found in novel-plus 3.6.2 and classified as critical. Affected by this vulnerability is an unknown functionality of the file… Novel Plus No fix yet Fix from $1,9502023-03-23 CRITICAL 9.8 CVE-2023-1594 A vulnerability, which was classified as critical, was found in novel-plus 3.6.2. Affected is the function MenuService of the file sys/menu/list. The… Novel Plus No fix yet Fix from $2,3002023-03-23 CRITICAL 9.8 CVE-2022-36672 Novel-Plus v3.6.2 was discovered to contain a hard-coded JWT key located in the project config file. This vulnerability allows attackers to create a … Novel Plus No fix yet Fix from $2,3002022-09-01 HIGH 7.5 CVE-2022-36671 Novel-Plus v3.6.2 was discovered to contain an arbitrary file download vulnerability via the background file download API. Novel Plus No fix yet Fix from $1,9502022-09-01 CRITICAL 9.8 CVE-2022-35121 Novel-Plus v3.6.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /service/impl/BookServiceImpl.java. Novel Plus No fix yet Fix from $2,3002022-08-17 CRITICAL 9.8 CVE-2021-42967 Unrestricted file upload in /novel-admin/src/main/java/com/java2nb/common/controller/FileController.java in novel-plus all versions allows allows an … Novel Plus No fix yet Fix from $2,3002022-05-13 HIGH 7.5 CVE-2022-28462 novel-plus 3.6.0 suffers from an Arbitrary file reading vulnerability. Novel Plus No fix yet Fix from $1,9502022-05-05 CRITICAL 9.8 CVE-2021-41921 novel-plus V3.6.1 allows unrestricted file uploads. Unrestricted file suffixes and contents can lead to server attacks and arbitrary code execution. Novel Plus No fix yet Fix from $2,3002022-04-28 CRITICAL 9.8 CVE-2022-24568 Novel-plus v3.6.0 was discovered to be vulnerable to Server-Side Request Forgery (SSRF) via user-supplied crafted input. Novel Plus No fix yet Fix from $2,3002022-02-10