| CVE-2024-48962 |
Improper Control of Generation of Code ('Code Injection'), Cross-Site Request Forgery (CSRF), : Improper…
|
8.9
Élevée
|
18 nov. 2024 |
| CVE-2024-45195 |
Exploitée
Apache OFBiz Forced Browsing Vulnerability
|
Non notée
|
4 sept. 2024 |
| CVE-2024-38856 |
Exploitée
Apache OFBiz Incorrect Authorization Vulnerability
|
Non notée
|
5 août 2024 |
| CVE-2024-32113 |
Exploitée
Apache OFBiz Path Traversal Vulnerability
|
Non notée
|
8 mai 2024 |
| CVE-2024-23946 |
Possible path traversal in Apache OFBiz allowing file inclusion
|
Non notée
|
28 févr. 2024 |
| CVE-2024-25065 |
Possible path traversal in Apache OFBiz allowing authentication bypass
|
Non notée
|
28 févr. 2024 |
| CVE-2022-47501 |
Arbitrary file reading vulnerability in Apache Software Foundation Apache OFBiz when using the Solr plugin
|
Non notée
|
14 avr. 2023 |
| CVE-2019-10074 |
An RCE is possible by entering Freemarker markup in an Apache OFBiz Form Widget textarea field when encoding has been…
|
Non notée
|
11 sept. 2019 |
| CVE-2019-10073 |
The "Blog", "Forum", "Contact Us" screens of the template "ecommerce" application bundled in Apache OFBiz are weak to…
|
Non notée
|
11 sept. 2019 |
| CVE-2019-0189 |
The java.io.ObjectInputStream is known to cause Java serialisation issues
|
Non notée
|
11 sept. 2019 |
| CVE-2018-17200 |
The Apache OFBiz HTTP engine (org.apache.ofbiz.service.engine.HttpEngine.java) handles requests for HTTP services via…
|
Non notée
|
11 sept. 2019 |