Skip to contentDromara vulnerabilities
Newest
- dromara ujcmsDromara ujcms File Upload WebFileUploadController.java upload cross site scriptingCVE-2025-24904.8 Medium
- dromara ujcmsDromara UJCMS User ID id authorizationCVE-2024-12483Public exploit6.3 Medium
- apache hertzbeatGHSL-2023-255: HertzBeat Authenticated (user role) RCE via unsafe deserialization in /api/monitors/importCVE-2024-423628.8 High
- apache hertzbeatGHSL-2023-256: HertzBeat Authenticated (guest role) SQL injection in /api/monitor/{monitorId}/metric/{metricFull}CVE-2024-423617.5 High
- dromara j2eefastJ2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter...CVE-2024-331539.8 Critical
- dromara open-capacity-platformDromara open-capacity-platform auth-server heapdump information disclosureCVE-2024-39284.3 Medium
- apache hertzbeatHertzBeat SnakeYAML Deser RCECVE-2023-513899.8 Critical
- apache hertzbeatHertzBeat AviatorScript Inject RCECVE-2023-513889.8 Critical
- apache hertzbeatHertzbeat JMX JNDI RCECVE-2023-516539.8 Critical
- apache hertzbeatUnauthorized access vulnerability on three interfacesCVE-2023-516507.5 High
- apache hertzbeatExpression Injection Vulnerability in HertzbeatCVE-2023-513877.2 High
- apache hertzbeatPermission bypass due to incorrect configuration in github.com/dromara/hertzbeatCVE-2022-393377.5 High
- dromara sa-tokenSaToken privilege escalation vulnerabilityCVE-2023-44794Fix available9.8 Critical
- dromara sa-tokenSaToken authentication bypass vulnerabilityCVE-2023-43961Fix available8.8 High
- dromara surenessSureness uses hardcoded keyCVE-2023-31581Fix available9.8 Critical
- dromara hutoolDromara HuTool XML Parsing Module XmlUtil.java readBySax xml external entity referenceCVE-2023-32765.5 Medium
- dromara ujcmsUJCMS ZIP Package information disclosureCVE-2023-32313.1 Low
- dromara j2eefastDromara J2eeFAST Announcement cross site scriptingCVE-2023-24763.5 Low
- dromara j2eefastDromara J2eeFAST System Message cross site scriptingCVE-2023-24753.5 Low
- dromara hutoolDromara HuTool cn.hutool.core.util.ZipUtil.java resource consumptionCVE-2022-4565Fix available4.3 Medium