HOMEVULNERABILITIESVENDORSXxyopen

XxyopenCVEs & Vulnerabilities

53 CVEs affecting Xxyopen products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

53 CVEs→ All vendors

Most Affected Products

novel-plus 61novel 2novel-cloud 1
CVE-2022-35121CRITICAL

Novel-Plus v3.6.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /service/impl/BookServiceImpl.java.

17 Aug 2022
9.8
CVSS
CVE-2021-42967CRITICAL

Unrestricted file upload in /novel-admin/src/main/java/com/java2nb/common/controller/FileController.java in novel-plus all versions allows allows an attacker to upload malicious JSP files.

13 May 2022
9.8
CVSS
CVE-2022-28462HIGH

novel-plus 3.6.0 suffers from an Arbitrary file reading vulnerability.

5 May 2022
7.5
CVSS
CVE-2021-41921CRITICAL

novel-plus V3.6.1 allows unrestricted file uploads. Unrestricted file suffixes and contents can lead to server attacks and arbitrary code execution.

28 Apr 2022
9.8
CVSS
CVE-2022-24568CRITICAL

Novel-plus v3.6.0 was discovered to be vulnerable to Server-Side Request Forgery (SSRF) via user-supplied crafted input.

10 Feb 2022
9.8
CVSS
← PrevPage 2 / 2Next →
← All Vendors·CVE Database