Export limit exceeded: 425803 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 16

Export CSV
CVE-2026-1427

WellChoose｜Single Sign-On Portal System - OS Command Injection

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server.

CVSS 4.0 · 8.7 High EPSS 1.4% KEV · Not listed
Vendors
Wellchoose
Products
Single Sign-on Portal System
CVE-2026-1429

WellChoose｜Single Sign-On Portal System - Reflected Cross-site Scripting

Single Sign-On Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing authenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Wellchoose
Products
Single Sign-on Portal System
CVE-2025-7619

WellChoose｜BatchSignCS - Arbitrary File Write through Path Traversal

BatchSignCS, a background Windows application developed by WellChoose, has an Arbitrary File Write vulnerability. If a user visits a malicious website while the application is running, remote attackers can write arbitrary files to any path and potentially lead to arbitrary code execution.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Wellchoose
Products
Batchsigncs
CVE-2026-3824

WellChoose｜IFTOP - Open redirect

IFTOP developed by WellChoose has an Open redirect vulnerability, allowing authenticated remote attackers to craft a URL that tricks users into visiting malicious website.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Wellchoose
Products
Iftop Organization Portal System
CVE-2026-3825

WellChoose｜IFTOP - Reflected Cross-site Scripting

IFTOP developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing authenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Wellchoose
Products
Iftop Organization Portal System
CVE-2026-3826

WellChoose｜IFTOP - Local File Inclusion

IFTOP developed by WellChoose has a Local File Inclusion vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Wellchoose
Products
Iftop Organization Portal System
CVE-2025-8909

WellChoose｜Organization Portal System - Arbitrary File Reading through Path Traversal

Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Wellchoose
Products
Organization Portal System
CVE-2025-8910

WellChoose｜Organization Portal System - Reflected Cross-site Scripting

Organization Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Wellchoose
Products
Organization Portal System
CVE-2025-8911

WellChoose｜Organization Portal System - Reflected Cross-site Scripting

Organization Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Wellchoose
Products
Organization Portal System
CVE-2025-8912

WellChoose｜Organization Portal System - Arbitrary File Reading through Path Traversal

Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Wellchoose
Products
Organization Portal System
CVE-2025-8913

WellChoose｜Organization Portal System - Local File Inclusion

Organization Portal System developed by WellChoose has a Local File Inclusion vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Wellchoose
Products
Organization Portal System
CVE-2025-8914

WellChoose｜Organization Portal System - SQL Injection

Organization Portal System developed by WellChoose has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Wellchoose
Products
Organization Portal System
CVE-2024-10202

Wellchoose Administrative Management System - OS Command Injection

Administrative Management System from Wellchoose has an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject and execute arbitrary OS commands.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Wellchoose
Products
Administrative Management System
CVE-2024-10200

Wellchoose Administrative Management System - Arbitrary File Read through Path Traversal

Administrative Management System from Wellchoose has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to download arbitrary files on the server.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Wellchoose
Products
Administrative Management System
CVE-2024-10201

Wellchoose Administrative Management System - Arbitrary File Upload

Administrative Management System from Wellchoose does not properly validate uploaded file types, allowing remote attackers with regular privileges to upload and execute webshells.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Wellchoose
Products
Administrative Management System