Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

14 records

Vendor: zj1983 Component: Zz Clear all filters
TI-2025-01592 CVE-2025-1847 · GHSA-r8x4-pq89-gfpq

zj1983 zz improper authorization

Priority MEDIUM 57

A vulnerability was found in zj1983 zz up to 2024-8.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00526 Published 2025-03-03 No fix listed CWE-266
TI-2025-01581 CVE-2025-1834 · GHSA-9563-qrch-r2xp

zj1983 zz resolve unrestricted upload

Priority MEDIUM 57

A vulnerability, which was classified as critical, was found in zj1983 zz up to 2024-8.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00552 Published 2025-03-02 No fix listed CWE-284
TI-2025-01578 CVE-2025-1831 · GHSA-fwv7-rrjm-6m82

zj1983 zz ZorgAction.java GetDBUser sql injection

Priority MEDIUM 57

A vulnerability classified as critical has been found in zj1983 zz up to 2024-8.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00569 Published 2025-03-02 No fix listed CWE-74
TI-2025-01571 CVE-2025-1820 · GHSA-j48h-86ph-5xjx

zj1983 zz ZworkflowAction.java getOaWid sql injection

Priority MEDIUM 57

A vulnerability has been found in zj1983 zz up to 2024-8 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00543 Published 2025-03-02 No fix listed CWE-74
TI-2025-01569 CVE-2025-1818 · GHSA-fqr8-q3mh-59gh

zj1983 zz ZfileAction.upload unrestricted upload

Priority MEDIUM 57

A vulnerability, which was classified as critical, has been found in zj1983 zz up to 2024-8.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00664 Published 2025-03-02 No fix listed CWE-284
TI-2025-01564 CVE-2025-1813 · GHSA-h8m4-rhxm-3v55

zj1983 zz cross-site request forgery

Priority MEDIUM 57

A vulnerability classified as problematic was found in zj1983 zz up to 2024-08.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00356 Published 2025-03-02 No fix listed CWE-352
TI-2025-01563 CVE-2025-1812 · GHSA-5h74-rc34-8rh3

zj1983 zz SuperZ.java GetUserOrg sql injection

Priority MEDIUM 57

A vulnerability classified as critical has been found in zj1983 zz up to 2024-08.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0062 Published 2025-03-02 No fix listed CWE-74