Vulnerability index

Browse CVEs

15 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

U Office Force CRITICAL 9.8
CVE-2026-3422

U-Office Force developed by e-Excellence has a Insecure Deserialization vulnerability, allowing unauthenticated remote attackers to execute arbitrary…

Fix: 29.50+
Fix from $2,300 2026-03-02
U Office Force HIGH 8.8
CVE-2025-12864

U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to inject arbitrary SQL commands t…

Fix: 29.50+
Fix from $1,950 2025-11-10
U Office Force HIGH 8.8
CVE-2025-12865

U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to inject arbitrary SQL commands t…

Fix: 29.50+
Fix from $1,950 2025-11-10
U Office Force HIGH 8.8
CVE-2025-2396

The U-Office Force from e-Excellence has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and exec…

Fix: 28.0+
Fix from $1,950 2025-03-17
U Office Force CRITICAL 9.8
CVE-2025-2395

The U-Office Force from e-Excellence has an Improper Authentication vulnerability, allowing unauthenticated remote attackers to use a particular API …

Fix: 28.0+
Fix from $2,300 2025-03-17
U Office Force CRITICAL 9.8
CVE-2023-32757

e-Excellence U-Office Force file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker without …

Mitigation only
Fix from $2,300 2023-08-25
U Office Force HIGH 7.5
CVE-2023-32756

e-Excellence U-Office Force has a path traversal vulnerability within its file uploading and downloading functions. An unauthenticated remote attacke…

Mitigation only
Fix from $1,950 2023-08-25
U Office Force MEDIUM 5.3
CVE-2023-32755

e-Excellence U-Office Force generates an error message in webiste service. An unauthenticated remote attacker can obtain partial sensitive system inf…

Mitigation only
Fix from $1,600 2023-08-25
U Office Force MEDIUM 6.5
CVE-2022-39022

U-Office Force Download function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to …

Fix: after 20.50.7821d
Fix from $1,600 2022-10-31
U Office Force MEDIUM 6.5
CVE-2022-39023

U-Office Force Download function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to …

Fix: after 20.50.7821d
Fix from $1,600 2022-10-31
U Office Force MEDIUM 6.1
CVE-2022-39024

U-Office Force Bulletin function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability…

Fix: after 20.50.7821d
Fix from $1,600 2022-10-31
U Office Force MEDIUM 6.1
CVE-2022-39025

U-Office Force PrintMessage function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerabi…

Fix: after 20.50.7821d
Fix from $1,600 2022-10-31
U Office Force MEDIUM 5.4
CVE-2022-39026

U-Office Force UserDefault page has insufficient filtering for special characters in the HTTP header fields. A remote attacker with general user priv…

Fix: after 20.50.7821d
Fix from $1,600 2022-10-31
U Office Force MEDIUM 5.4
CVE-2022-39027

U-Office Force Forum function has insufficient filtering for special characters. A remote attacker with general user privilege can inject JavaScript …

Fix: after 20.50.7821d
Fix from $1,600 2022-10-31
U Office Force MEDIUM 6.1
CVE-2022-39021

U-Office Force login function has an Open Redirect vulnerability. An unauthenticated remote attacker can exploit this vulnerability to redirect user …

Fix: after 20.50.7821d
Fix from $1,600 2022-10-31