CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
| 11/03/2025 |
| CVE-2025-2208 | 中4.8 | A vulnerability, which was classified as problematic, has been found in aitangbao springboot-manager 3.0. This issue affects some unknown processing of the file /sysFiles/upload of the component Filename Handler. The manipulation of the argument name leads to cross site scripting. The attack may be initiated remotely. | 11/03/2025 |
| CVE-2025-2207 | 中4.8 | A vulnerability classified as problematic was found in aitangbao springboot-manager 3.0. This vulnerability affects unknown code of the file /sys/dept. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. | 11/03/2025 |
| CVE-2025-2206 | 中4.8 | A vulnerability classified as problematic has been found in aitangbao springboot-manager 3.0. This affects an unknown part of the file /sys/permission. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and ma | 11/03/2025 |
| CVE-2024-24062 | 中5.4 | springboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sys/role. | 01/02/2024 |
| CVE-2024-24061 | 中5.4 | springboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sysContent/add. | 01/02/2024 |
| CVE-2024-24060 | 中5.4 | springboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sys/user. | 01/02/2024 |
| CVE-2024-24059 | 中5.4 | springboot-manager v1.6 is vulnerable to Arbitrary File Upload. The system does not filter the suffixes of uploaded files. | 01/02/2024 |