Vulnerability index

Browse CVEs

52 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Novel Plus CRITICAL 9.8
CVE-2024-24015

A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass in crafted offset, limit, and sort parameters …

Fix: after 4.2.0
Fix from $2,300 2024-02-06
Novel Plus CRITICAL 9.8
CVE-2024-0941

A vulnerability was found in Novel-Plus 4.3.0-RC1 and classified as critical. This issue affects some unknown processing of the file /novel/bookComme…

No fix yet
Fix from $2,300 2024-01-26
Novel Plus CRITICAL 9.8
CVE-2024-0655

A vulnerability has been found in Novel-Plus 4.3.0-RC1 and classified as critical. Affected by this vulnerability is an unknown functionality of the …

No fix yet
Fix from $2,300 2024-01-18
Novel Plus MEDIUM 5.4
CVE-2023-7166

A vulnerability classified as problematic has been found in Novel-Plus up to 4.2.0. This affects an unknown part of the file /user/updateUserInfo of …

Fix: after 4.2.0
Fix from $1,600 2023-12-29
Novel Plus CRITICAL 9.8
CVE-2023-46981

SQL injection vulnerability in Novel-Plus v.4.2.0 allows a remote attacker to execute arbitrary code via a crafted script to the sort parameter in /c…

No fix yet
Fix from $2,300 2023-11-05
Novel Plus HIGH 7.2
CVE-2023-41443

SQL injection vulnerability in Novel-Plus v.4.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the sort parameter in /s…

No fix yet
Fix from $1,950 2023-09-18
Novel Plus CRITICAL 9.8
CVE-2023-30058

novel-plus 3.6.2 is vulnerable to SQL Injection.

No fix yet
Fix from $2,300 2023-09-11
Novel Plus CRITICAL 9.8
CVE-2023-37847

novel-plus v3.6.2 was discovered to contain a SQL injection vulnerability.

Mitigation only
Fix from $2,300 2023-08-14
Novel Plus HIGH 8.8
CVE-2023-2040

A vulnerability classified as critical has been found in novel-plus 3.6.2. Affected is an unknown function of the file /news/list?limit=10&offset=0&o…

No fix yet
Fix from $1,950 2023-04-14
Novel Plus HIGH 8.8
CVE-2023-2041

A vulnerability classified as critical was found in novel-plus 3.6.2. Affected by this vulnerability is an unknown functionality of the file /categor…

No fix yet
Fix from $1,950 2023-04-14
Novel Plus HIGH 8.8
CVE-2023-2039

A vulnerability was found in novel-plus 3.6.2. It has been rated as critical. This issue affects some unknown processing of the file /author/list?lim…

No fix yet
Fix from $1,950 2023-04-14
Novel Plus HIGH 8.8
CVE-2023-1607

A vulnerability was found in novel-plus 3.6.2. It has been classified as critical. This affects an unknown part of the file /common/sysFile/list. The…

No fix yet
Fix from $1,950 2023-03-23
Novel Plus CRITICAL 9.8
CVE-2023-1606

A vulnerability was found in novel-plus 3.6.2 and classified as critical. Affected by this issue is some unknown functionality of the file DictContro…

No fix yet
Fix from $2,300 2023-03-23
Novel Plus HIGH 7.2
CVE-2023-1595

A vulnerability has been found in novel-plus 3.6.2 and classified as critical. Affected by this vulnerability is an unknown functionality of the file…

No fix yet
Fix from $1,950 2023-03-23
Novel Plus CRITICAL 9.8
CVE-2023-1594

A vulnerability, which was classified as critical, was found in novel-plus 3.6.2. Affected is the function MenuService of the file sys/menu/list. The…

No fix yet
Fix from $2,300 2023-03-23
Novel Plus CRITICAL 9.8
CVE-2022-36672

Novel-Plus v3.6.2 was discovered to contain a hard-coded JWT key located in the project config file. This vulnerability allows attackers to create a …

No fix yet
Fix from $2,300 2022-09-01
Novel Plus HIGH 7.5
CVE-2022-36671

Novel-Plus v3.6.2 was discovered to contain an arbitrary file download vulnerability via the background file download API.

No fix yet
Fix from $1,950 2022-09-01
Novel Plus CRITICAL 9.8
CVE-2022-35121

Novel-Plus v3.6.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /service/impl/BookServiceImpl.java.

No fix yet
Fix from $2,300 2022-08-17
Novel Plus CRITICAL 9.8
CVE-2021-42967

Unrestricted file upload in /novel-admin/src/main/java/com/java2nb/common/controller/FileController.java in novel-plus all versions allows allows an …

No fix yet
Fix from $2,300 2022-05-13
Novel Plus HIGH 7.5
CVE-2022-28462

novel-plus 3.6.0 suffers from an Arbitrary file reading vulnerability.

No fix yet
Fix from $1,950 2022-05-05
Novel Plus CRITICAL 9.8
CVE-2021-41921

novel-plus V3.6.1 allows unrestricted file uploads. Unrestricted file suffixes and contents can lead to server attacks and arbitrary code execution.

No fix yet
Fix from $2,300 2022-04-28
Novel Plus CRITICAL 9.8
CVE-2022-24568

Novel-plus v3.6.0 was discovered to be vulnerable to Server-Side Request Forgery (SSRF) via user-supplied crafted input.

No fix yet
Fix from $2,300 2022-02-10