Filter
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-7171Novel-Plus Friendly Link FriendLinkController.java cross site scripting
4.8
EPSS
0.06%
First published (updated )
CVE-2023-7166Novel-Plus HTTP POST Request updateUserInfo cross site scripting
5.4
EPSS
0.07%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Xxyopen Novel-plusnovel-plus DictController.java sql injection
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Xxyopen Novel-plusnovel-plus list MenuService sql injection
9.8
First published (updated )
Xxyopen Novel-plusNovel-Plus v3.6.2 was discovered to contain a hard-coded JWT key located in the project config file.…
9.8
First published (updated )
Xxyopen Novel-plusNovel-Plus v3.6.2 was discovered to contain an arbitrary file download vulnerability via the backgro…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Xxyopen Novel-plusnovel-plus 3.6.0 suffers from an Arbitrary file reading vulnerability.
7.5
First published (updated )