CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 25/10/2022 |
| CVE-2022-34115 | 심각9.8 | DataEase v1.11.1 was discovered to contain a arbitrary file write vulnerability via the parameter dataSourceId. | 22/07/2022 |
| CVE-2022-34114 | 높음8.8 | Dataease v1.11.1 was discovered to contain a SQL injection vulnerability via the parameter dataSourceId. | 22/07/2022 |
| CVE-2022-34113 | 심각9.8 | An issue in the component /api/plugin/upload of Dataease v1.11.1 allows attackers to execute arbitrary code via a crafted plugin. | 22/07/2022 |
| CVE-2022-34112 | 보통6.5 | An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstall the plugin, a right normally reserved for the administrator. | 22/07/2022 |