Where
-Infinity
0

Trending

Last week
Last month
Last year

Versions

2.10.20
1

Dataease DataEaseDataEase: Stored SQL Injection Vulnerability

Risk 71
Severity
8.7
First published (updated )
CVE-2026-45535

Dataease DataEaseDataEase: Arbitrary SQL execution in preview path (direct data disclosure)

Risk 40
Severity
7.1
First published (updated )
CVE-2026-50030

Dataease DataEaseDataEase: Arbitrary File Write Vulnerability

Risk 62
Severity
8.5
First published (updated )
CVE-2026-45419

Dataease DataEaseDataEase: Token with Overly Broad Privileges in Share Mode: Access to Unshared Datasets

Risk 40
Severity
7.1
First published (updated )
CVE-2026-50530

Dataease DataEaseDataEase: Link Token Leakage Prior to Share Password/Ticket Validation

Risk 47
Severity
8.7
First published (updated )
CVE-2026-50529
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Dataease DataEaseDataEase: authenticated stored XSS in the dashboard text components

Risk 32
Severity
5.1
First published (updated )
CVE-2026-55647

Dataease DataEaseDataEase: Hardcoded JWT Signing Secret in ShareLink

Risk 52
Severity
8.3
First published (updated )
CVE-2026-57172

Dataease DataEaseDataEase: Unauthorized Access to Engine Database via previewSql Endpoint

Risk 71
Severity
8.7
First published (updated )
CVE-2026-53730

Dataease DataEaseDataEase H2 RCE via Zip Protocol & File Dropper Fix bypass

Risk 79
Severity
8.7
First published (updated )
CVE-2026-55633

Dataease DataEaseDataEase: Path Traversal Leading to Arbitrary File Deletion via Font Management

Risk 57
Severity
7.2
First published (updated )
CVE-2026-55631
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Dataease Dataease Data DashboardDataease Data Dashboard SqlparserUtils.java SqlparserUtils.transFilter sql injection

Risk 49
Severity
2
EPSS
0.39%
First published (updated )
CVE-2026-8724

Dataease DataEaseDataEase: Quartz Deserialization → Remote Code Execution

Risk 79
Severity
7.5
First published (updated )
CVE-2026-40901

Dataease DataEaseDataEase has SQL Injection via Stacked Queries

Risk 79
Severity
8.7
First published (updated )
CVE-2026-40900

Dataease DataEaseDataEase has an Arbitrary File Read Vulnerability

Risk 44
Severity
8.3
First published (updated )
CVE-2026-40899

Dataease DataEaseDataEase SQL Injection Vulnerability

Risk 79
Severity
8.6
First published (updated )
CVE-2026-33207
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Dataease DataEaseDataEase has SQL Injection via Datasource Management

Risk 86
Severity
8.6
First published (updated )
CVE-2026-33122

Dataease DataEaseDataEase has SQL Injection via Datasource Save Flow

Risk 79
Severity
8.7
First published (updated )
CVE-2026-33121

Dataease DataEaseDataEase has SQL Injection through its getFieldEnumObj Endpoint

Risk 79
Severity
8.7
First published (updated )
CVE-2026-33084

Dataease DataEaseDataEase has SQL Injection in Order By Clause

Risk 79
Severity
8.7
First published (updated )
CVE-2026-33083

Dataease DataEaseDataEase: SQL Injection in v2 Dataset Export

Risk 86
Severity
8.7
First published (updated )
CVE-2026-33082
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Dataease DataEaseDataEase is Vulnerable to H2 JDBC RCE Bypass

Risk 54
Severity
7.7
EPSS
0.06%
First published (updated )
CVE-2026-32939

Dataease DataEaseDataease: Redshift JDBC RCE Bypass

Risk 59
Severity
9.3
EPSS
0.35%
First published (updated )
CVE-2026-32140

Dataease DataEaseDataease: Unfiltered active SVG content leads to Stored XSS

Risk 25
Severity
5.4
EPSS
0.04%
First published (updated )
CVE-2026-32139

Dataease DataEaseDataEase SQL Injection Vulnerability

Risk 47
Severity
9.3
EPSS
0.06%
First published (updated )
CVE-2026-32137

Dataease DataEaseDataEase Vulnerable to Brute-Force Attack on Admin JWT Secret Derived from Password that Enables Full Account Takeover

Risk 61
Severity
9.8
EPSS
0.05%
First published (updated )
CVE-2026-23958
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Dataease DataEaseDataEase has an improper authentication vulnerability

Risk 61
Severity
7.7
EPSS
0.08%
First published (updated )
CVE-2025-27138

Dataease DataEaseDataease Mysql JDBC Connection Parameters Not Being Verified Leads to Arbitrary File Read Vulnerability​

Risk 41
Severity
7.3
EPSS
0.04%
First published (updated )
CVE-2025-27103

Dataease DataEaseUnauthorized users can manipulate a dashboard created by an administrator in DataEase

Risk 38
Severity
6.5
First published (updated )
CVE-2023-35164

Dataease DataEaseUnauthorized users can delete applications in DataEase

Risk 60
Severity
8.1
First published (updated )
CVE-2023-34463

Dataease DataEaseDataEase has a privilege bypass vulnerability

Risk 38
Severity
6.5
First published (updated )
CVE-2023-35168
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203