R1bbit

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

R1bbit records in CISA KEV

No R1bbit vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Yimioa 10 records HIGH

Records

10 records in Yimioa · all components

TI-2025-01050 CVE-2025-1226 · GHSA-9vcr-v878-4x73

ywoa setup.jsp improper authorization

HIGH 70

A vulnerability was found in ywoa up to 2024.07.03.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00833 Published 2025-02-12 No fix listed CWE-266

TI-2025-19057 CVE-2025-25585 · GHSA-82xf-2h8m-pmc5

Incorrect access control in the component /config/WebSecurityConfig.java of yimioa before…

HIGH 65

Incorrect access control in the component /config/WebSecurityConfig.java of yimioa before v2024.07.04 allows unauthorized attackers to arbitrarily modify Administrator passwords.

CVSS 3.1HIGH 7.3 Local No auth User interaction EPSS 0.00273 Published 2025-03-18 No fix listed CWE-284

TI-2025-19060 CVE-2025-25590 · GHSA-6hc9-74fh-6p7m

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the…

MEDIUM 62

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the component /mapper/xml/AddressDao.xml.

CVSS 3.1MEDIUM 6.1 Local Low privileges User interaction EPSS 0.00197 Published 2025-03-18 No fix listed CWE-89

TI-2025-19056 CVE-2025-25582 · GHSA-xq3p-5xwv-rm48

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the…

MEDIUM 62

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the selectNoticeList() method at /xml/OaNoticeMapper.xml.

CVSS 3.1MEDIUM 6.1 Local Low privileges User interaction EPSS 0.0019 Published 2025-03-18 No fix listed CWE-89

TI-2025-19055 CVE-2025-25580 · GHSA-966q-fgpf-cj7x

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the…

MEDIUM 62

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the listNameBySql() method at /xml/UserMapper.xml.

CVSS 3.1MEDIUM 6.1 Local Low privileges User interaction EPSS 0.00197 Published 2025-03-18 No fix listed CWE-89

TI-2025-01051 CVE-2025-1227 · GHSA-2mff-4q5m-q2cm

ywoa AddressDao.xml selectList sql injection

MEDIUM 57

A vulnerability was found in ywoa up to 2024.07.03.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00526 Published 2025-02-12 No fix listed CWE-74

TI-2025-01049 CVE-2025-1225 · GHSA-7m23-4qgm-g7v4

ywoa WXCallBack Interface XMLParse.java extract xml external entity reference

MEDIUM 57

A vulnerability, which was classified as problematic, has been found in ywoa up to 2024.07.03.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00382 Published 2025-02-12 No fix listed CWE-610

TI-2025-01048 CVE-2025-1224 · GHSA-xpm3-5wvv-pxfh

ywoa UserMapper.xml listNameBySql sql injection

MEDIUM 57

A vulnerability classified as critical was found in ywoa up to 2024.07.03.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00422 Published 2025-02-12 No fix listed CWE-74

TI-2025-01040 CVE-2025-1216 · GHSA-9jp4-rjhp-hhpx

ywoa OaNoticeMapper.xml selectNoticeList sql injection

MEDIUM 57

A vulnerability, which was classified as critical, has been found in ywoa up to 2024.07.03.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00536 Published 2025-02-12 No fix listed CWE-74

TI-2025-19058 CVE-2025-25586 · GHSA-h26c-c6vw-jjjm

yimioa before v2024.07.04 was discovered to contain an information disclosure…

MEDIUM 53

yimioa before v2024.07.04 was discovered to contain an information disclosure vulnerability via the component /resources/application.yml.

CVSS 3.1MEDIUM 4.2 Local Low privileges User interaction EPSS 0.00156 Published 2025-03-18 No fix listed CWE-538

Open these records in search →

Critical	0
High	1
Medium	9
Low	0
No CVSS	0