Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: ZONG YU Clear all filters
TI-2025-04072 CVE-2025-4557 · GHSA-qg79-8fm6-f6qw

ZONG YU Parking Management System - Missing Authentication

Priority MEDIUM 47

The specific APIs of Parking Management System from ZONG YU has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access specific APIs and operate system functions.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00539 Published 2025-05-12 No fix listed CWE-306
TI-2025-04071 CVE-2025-4556 · GHSA-mx8m-h62w-82vp

ZONG YU Okcat Parking Management Platform - Arbitrary File Upload

Priority MEDIUM 49

The web management interface of Okcat Parking Management Platform from ZONG YU has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enab…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00789 Published 2025-05-12 No fix listed CWE-434
TI-2025-04070 CVE-2025-4555 · GHSA-4c44-wpv3-4f58

ZONG YU Okcat Parking Management Platform - Missing Authentication

Priority MEDIUM 49

The web management interface of Okcat Parking Management Platform from ZONG YU has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access system functions.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00599 Published 2025-05-12 No fix listed CWE-306