| CVE-2024-36104 |
Apache OFBiz: Path traversal leading to a RCE
|
Not rated
|
Jun 4, 2024 |
| CVE-2024-32113 |
Exploited
Apache OFBiz Path Traversal Vulnerability
|
Not rated
|
May 8, 2024 |
| CVE-2024-23946 |
Possible path traversal in Apache OFBiz allowing file inclusion
|
Not rated
|
Feb 28, 2024 |
| CVE-2024-25065 |
Possible path traversal in Apache OFBiz allowing authentication bypass
|
Not rated
|
Feb 28, 2024 |
| CVE-2023-51467 |
The vulnerability permits attackers to circumvent authentication processes, enabling them to remotely execute…
|
Not rated
|
Dec 26, 2023 |
| CVE-2023-50968 |
Arbitrary file properties reading vulnerability in Apache Software Foundation Apache OFBiz when user operates an uri…
|
Not rated
|
Dec 26, 2023 |
| CVE-2023-49070 |
Pre-auth RCE in Apache Ofbiz 18.12.09
|
Not rated
|
Dec 5, 2023 |
| CVE-2023-46819 |
Missing Authentication in Apache Software Foundation Apache OFBiz when using the Solr plugin
|
Not rated
|
Nov 7, 2023 |
| CVE-2022-47501 |
Arbitrary file reading vulnerability in Apache Software Foundation Apache OFBiz when using the Solr plugin
|
Not rated
|
Apr 14, 2023 |
| CVE-2022-29158 |
Apache OFBiz up to version 18.12.05 is vulnerable to Regular Expression Denial of Service (ReDoS) in the way it…
|
Not rated
|
Sep 2, 2022 |
| CVE-2022-29063 |
The Solr plugin of Apache OFBiz is configured by default to automatically make a RMI request on localhost, port 1099
|
Not rated
|
Sep 2, 2022 |
| CVE-2022-25813 |
In Apache OFBiz, versions 18.12.05 and earlier, an attacker acting as an anonymous user of the ecommerce plugin, can…
|
Not rated
|
Sep 2, 2022 |
| CVE-2022-25371 |
Apache OFBiz uses the Birt project plugin (https://eclipse.github.io/birt-website/) to create data visualizations and…
|
Not rated
|
Sep 2, 2022 |
| CVE-2022-25370 |
Apache OFBiz uses the Birt plugin (https://eclipse.github.io/birt-website/) to create data visualizations and reports
|
Not rated
|
Sep 2, 2022 |
| CVE-2021-37608 |
Unrestricted Upload of File with Dangerous Type vulnerability in Apache OFBiz allows an attacker to execute remote…
|
Not rated
|
Aug 18, 2021 |
| CVE-2021-30128 |
Apache OFBiz has unsafe deserialization prior to 17.12.07 version
|
Not rated
|
Apr 27, 2021 |
| CVE-2021-29200 |
Apache OFBiz has unsafe deserialization prior to 17.12.07 version An unauthenticated user can perform an RCE attack
|
Not rated
|
Apr 27, 2021 |
| CVE-2021-26295 |
Apache OFBiz has unsafe deserialization prior to 17.12.06
|
Not rated
|
Mar 22, 2021 |
| CVE-2018-8033 |
In Apache OFBiz 16.11.01 to 16.11.04, the OFBiz HTTP engine (org.apache.ofbiz.service.engine.HttpEngine.java) handles…
|
Not rated
|
Dec 13, 2018 |
| CVE-2017-15714 |
The BIRT plugin in Apache OFBiz 16.11.01 to 16.11.03 does not escape user input property passed
|
Not rated
|
Jan 4, 2018 |
| CVE-2016-6800 |
The default configuration of the Apache OFBiz framework offers a blog functionality
|
Not rated
|
Aug 30, 2017 |
| CVE-2016-4462 |
By manipulating the URL parameter externalLoginKey, a malicious, logged in user could pass valid Freemarker directives…
|
Not rated
|
Aug 30, 2017 |