Export limit exceeded: 30231 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2023-25403

CleverStupidDog yf-exam v 1.8.0 is vulnerable to Authentication Bypass. The program uses a fixed JWT key, and the stored key uses username format characters. Any user who logged in within 24 hours. A token can be forged with his username to bypass authentication.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Yf-exam Project
Products
Yf-exam
CVE-2023-26779

CleverStupidDog yf-exam v 1.8.0 is vulnerable to Deserialization which can lead to remote code execution (RCE).

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Yf-exam Project
Products
Yf-exam
CVE-2023-25402

CleverStupidDog yf-exam 1.8.0 is vulnerable to File Upload. There is no restriction on the suffix of the uploaded file, resulting in any file upload.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Yf-exam Project
Products
Yf-exam