| CVE-2024-36104 |
Apache OFBiz: Path traversal leading to a RCE
|
Non notée
|
4 juin 2024 |
| CVE-2024-32113 |
Exploitée
Apache OFBiz Path Traversal Vulnerability
|
Non notée
|
8 mai 2024 |
| CVE-2024-23946 |
Possible path traversal in Apache OFBiz allowing file inclusion
|
Non notée
|
28 févr. 2024 |
| CVE-2024-25065 |
Possible path traversal in Apache OFBiz allowing authentication bypass
|
Non notée
|
28 févr. 2024 |
| CVE-2023-51467 |
The vulnerability permits attackers to circumvent authentication processes, enabling them to remotely execute…
|
Non notée
|
26 déc. 2023 |
| CVE-2023-50968 |
Arbitrary file properties reading vulnerability in Apache Software Foundation Apache OFBiz when user operates an uri…
|
Non notée
|
26 déc. 2023 |
| CVE-2023-49070 |
Pre-auth RCE in Apache Ofbiz 18.12.09
|
Non notée
|
5 déc. 2023 |
| CVE-2023-46819 |
Missing Authentication in Apache Software Foundation Apache OFBiz when using the Solr plugin
|
Non notée
|
7 nov. 2023 |
| CVE-2022-47501 |
Arbitrary file reading vulnerability in Apache Software Foundation Apache OFBiz when using the Solr plugin
|
Non notée
|
14 avr. 2023 |
| CVE-2022-29158 |
Apache OFBiz up to version 18.12.05 is vulnerable to Regular Expression Denial of Service (ReDoS) in the way it…
|
Non notée
|
2 sept. 2022 |
| CVE-2022-29063 |
The Solr plugin of Apache OFBiz is configured by default to automatically make a RMI request on localhost, port 1099
|
Non notée
|
2 sept. 2022 |
| CVE-2022-25813 |
In Apache OFBiz, versions 18.12.05 and earlier, an attacker acting as an anonymous user of the ecommerce plugin, can…
|
Non notée
|
2 sept. 2022 |
| CVE-2022-25371 |
Apache OFBiz uses the Birt project plugin (https://eclipse.github.io/birt-website/) to create data visualizations and…
|
Non notée
|
2 sept. 2022 |
| CVE-2022-25370 |
Apache OFBiz uses the Birt plugin (https://eclipse.github.io/birt-website/) to create data visualizations and reports
|
Non notée
|
2 sept. 2022 |
| CVE-2021-37608 |
Unrestricted Upload of File with Dangerous Type vulnerability in Apache OFBiz allows an attacker to execute remote…
|
Non notée
|
18 août 2021 |
| CVE-2021-30128 |
Apache OFBiz has unsafe deserialization prior to 17.12.07 version
|
Non notée
|
27 avr. 2021 |
| CVE-2021-29200 |
Apache OFBiz has unsafe deserialization prior to 17.12.07 version An unauthenticated user can perform an RCE attack
|
Non notée
|
27 avr. 2021 |
| CVE-2021-26295 |
Apache OFBiz has unsafe deserialization prior to 17.12.06
|
Non notée
|
22 mars 2021 |
| CVE-2018-8033 |
In Apache OFBiz 16.11.01 to 16.11.04, the OFBiz HTTP engine (org.apache.ofbiz.service.engine.HttpEngine.java) handles…
|
Non notée
|
13 déc. 2018 |
| CVE-2017-15714 |
The BIRT plugin in Apache OFBiz 16.11.01 to 16.11.03 does not escape user input property passed
|
Non notée
|
4 janv. 2018 |
| CVE-2016-6800 |
The default configuration of the Apache OFBiz framework offers a blog functionality
|
Non notée
|
30 août 2017 |
| CVE-2016-4462 |
By manipulating the URL parameter externalLoginKey, a malicious, logged in user could pass valid Freemarker directives…
|
Non notée
|
30 août 2017 |