Browse CVEs

MEDIUM 6.1 CVE-2025-65442 DOM-based Cross-Site Scripting (XSS) vulnerability in 201206030 novel V3.5.0 allows remote attackers to execute arbitrary JavaScript code or disclose… Novel No fix yet Fix from $1,6002025-12-29 MEDIUM 5.4 CVE-2025-60298 Novel-Plus up to 5.2.4 was discovered to contain a Stored Cross-Site Scripting (XSS) vulnerability via the /author/updateIndexName endpoint. This vul… Novel Plus after 5.2.4 Fix from $1,6002025-10-08 MEDIUM 5.4 CVE-2025-60299 Novel-Plus with 5.2.0 was discovered to contain a Stored Cross-Site Scripting (XSS) vulnerability via the /book/addCommentReply endpoint. An authenti… Novel Plus No fix yet Fix from $1,6002025-10-08 HIGH 8.8 CVE-2025-6535 A vulnerability has been found in xxyopen/201206030 novel-plus up to 5.1.3 and classified as critical. This vulnerability affects the function list o… Novel Plus after 5.1.3 Fix from $1,9502025-06-24 MEDIUM 6.8 CVE-2025-6534 A vulnerability, which was classified as problematic, was found in xxyopen/201206030 novel-plus up to 5.1.3. This affects the function remove of the … Novel Plus after 5.1.3 Fix from $1,6002025-06-24 MEDIUM 5.9 CVE-2025-6533 A vulnerability, which was classified as critical, has been found in xxyopen/201206030 novel-plus up to 5.1.3. Affected by this issue is the function… Novel Plus after 5.1.3 Fix from $1,6002025-06-24 CRITICAL 9.8 CVE-2025-45890 Directory Traversal vulnerability in novel plus before v.5.1.0 allows a remote attacker to execute arbitrary code via the filePath parameter Novel Plus 5.1.0+ Fix from $2,3002025-06-20 CRITICAL 9.8 CVE-2025-4036 A vulnerability was found in 201206030 Novel 3.5.0 and classified as critical. This issue affects the function updateBookChapter of the file src/main… Novel No fix yet Fix from $2,3002025-04-28 CRITICAL 9.8 CVE-2025-4019 A vulnerability, which was classified as critical, was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. Affected is the f… Novel Plus 5.1.1+ Fix from $2,3002025-04-28 HIGH 7.5 CVE-2025-4018 A vulnerability, which was classified as critical, has been found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. This issue a… Novel Plus 5.1.1+ Fix from $1,9502025-04-28 CRITICAL 9.1 CVE-2025-4016 A vulnerability classified as critical has been found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. This affects the functio… Novel Plus 5.1.1+ Fix from $2,3002025-04-28 MEDIUM 6.5 CVE-2025-4017 A vulnerability classified as problematic was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. This vulnerability affects… Novel Plus after 5.1.1 Fix from $1,6002025-04-28 HIGH 7.5 CVE-2025-4015 A vulnerability was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. It has been rated as critical. Affected by this issu… Novel Plus 5.1.1+ Fix from $1,9502025-04-28 CRITICAL 9.8 CVE-2025-3956 A vulnerability has been found in 201206030 novel-cloud 1.4.0 and classified as critical. This vulnerability affects the function RestResp of the fil… Novel Cloud Mitigation only Fix from $2,3002025-04-27 CRITICAL 9.8 CVE-2025-3856 A vulnerability was found in xxyopen Novel-Plus 5.1.0. It has been classified as critical. This affects the function searchByPage of the file /book/s… Novel Plus No fix yet Fix from $2,3002025-04-22 CRITICAL 9.8 CVE-2025-3676 A vulnerability classified as critical has been found in xxyopen Novel-Plus 3.5.0. This affects an unknown part of the file /api/front/search/books. … Novel Plus No fix yet Fix from $2,3002025-04-16 CRITICAL 9.8 CVE-2025-3369 A vulnerability was found in xxyopen Novel-Plus 5.1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the fil… Novel Plus No fix yet Fix from $2,3002025-04-07 MEDIUM 6.5 CVE-2025-26182 An issue in xxyopen novel plus v.4.4.0 and before allows a remote attacker to execute arbitrary code via the PageController.java file Novel Plus after 4.4.0 Fix from $1,6002025-03-04 HIGH 7.5 CVE-2024-33383 Arbitrary File Read vulnerability in novel-plus 4.3.0 and before allows a remote attacker to obtain sensitive information via a crafted GET request u… Novel Plus after 4.3.0 Fix from $1,9502024-04-30 CRITICAL 9.8 CVE-2024-25274 An arbitrary file upload vulnerability in the component /sysFile/upload of Novel-Plus v4.3.0-RC1 allows attackers to execute arbitrary code via uploa… Novel Plus Mitigation only Fix from $2,3002024-02-20 CRITICAL 9.8 CVE-2024-24014 A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass crafted offset, limit, and sort parameters to … Novel Plus after 4.2.0 Fix from $2,3002024-02-08 CRITICAL 9.8 CVE-2024-24017 A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass crafted offset, limit, and sort parameters to … Novel Plus after 4.2.0 Fix from $2,3002024-02-08 CRITICAL 9.8 CVE-2024-24021 A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior. An attacker can pass specially crafted offset, limit, and sort parameters to… Novel Plus after 4.2.0 Fix from $2,3002024-02-08 CRITICAL 9.8 CVE-2024-24018 A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass in crafted offset, limit, and sort parameters … Novel Plus after 4.2.0 Fix from $2,3002024-02-08 CRITICAL 9.8 CVE-2024-24023 A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior. An attacker can pass specially crafted offset, limit, and sort parameters to… Novel Plus after 4.2.0 Fix from $2,3002024-02-08 CRITICAL 9.8 CVE-2024-24024 An arbitrary File download vulnerability exists in Novel-Plus v4.3.0-RC1 and prior at com.java2nb.common.controller.FileController: fileDownload(). A… Novel Plus after 4.2.0 Fix from $2,3002024-02-08 CRITICAL 9.8 CVE-2024-24025 An arbitrary File upload vulnerability exists in Novel-Plus v4.3.0-RC1 and prior at com.java2nb.common.controller.FileController: upload(). An attack… Novel Plus after 4.2.0 Fix from $2,3002024-02-08 CRITICAL 9.8 CVE-2024-24026 An arbitrary File upload vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions at com.java2nb.system.controller.SysUserController: uploadI… Novel Plus after 4.2.0 Fix from $2,3002024-02-08 CRITICAL 9.8 CVE-2024-24019 A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass in crafted offset, limit, and sort parameters … Novel Plus after 4.2.0 Fix from $2,3002024-02-07 CRITICAL 9.8 CVE-2024-24013 A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass crafted offset, limit, and sort parameters to … Novel Plus after 4.2.0 Fix from $2,3002024-02-06