Approved changes feed: RSS · Atom
cpe:2.3:a:ruoyi:ruoyi:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ruoyi (a1e9b548-8c40-5372-82d6-75ba62c50bcc) |
|---|---|
| Product | Ruoyi (bfb7fb4b-ffd1-597f-a690-4f054b2e8325) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-4564 |
vulnerable | 2026-06-08 08:05:13.535112 |
yangzongzhuan RuoYi Quartz Job job code injection
MEDIUM (4.7)
A security vulnerability has been detected in yangzongzhuan RuoYi up to 4.8.2. This issue affects some unknown processing of the file /monitor/job/ of the component Quartz Job Handler. Such manipulation of the argument invokeTarget leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-03-22T23:51:06.285Z
Updated: 2026-03-23T13:58:10.363Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8847 |
vulnerable | 2026-06-08 07:45:21.308053 |
yangzongzhuan RuoYi edit cross site scripting
LOW (3.5)
A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1. Affected by this vulnerability is the function Edit of the file /system/notice/edit. The manipulation of the argument noticeTitle/noticeContent leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-08-11T13:02:06.785Z
Updated: 2025-08-12T13:42:58.718Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7907 |
vulnerable | 2026-06-08 07:45:18.485563 |
yangzongzhuan RuoYi Druid application-druid.yml default credentials
MEDIUM (4.3)
A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1. It has been classified as problematic. Affected is an unknown function of the file ruoyi-admin/src/main/resources/application-druid.yml of the component Druid. The manipulation leads to use of default credentials. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-20T20:32:05.417Z
Updated: 2025-07-21T12:43:57.841Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7906 |
vulnerable | 2026-06-08 07:45:18.485080 |
yangzongzhuan RuoYi CommonController.java uploadFile unrestricted upload
MEDIUM (6.3)
A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1 and classified as critical. This issue affects the function uploadFile of the file ruoyi-admin/src/main/java/com/ruoyi/web/controller/common/CommonController.java. The manipulation of the argument File leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-20T19:32:05.216Z
Updated: 2025-07-21T15:52:37.624Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7903 |
vulnerable | 2026-06-08 07:45:18.480878 |
yangzongzhuan RuoYi Image Source ui layer
MEDIUM (4.3)
A vulnerability classified as problematic was found in yangzongzhuan RuoYi up to 4.8.1. Affected by this vulnerability is an unknown functionality of the component Image Source Handler. The manipulation leads to improper restriction of rendered ui layers. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-20T16:32:05.647Z
Updated: 2025-07-21T16:05:13.228Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7902 |
vulnerable | 2026-06-08 07:45:18.480386 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7901 |
vulnerable | 2026-06-08 07:45:18.479806 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-67342 |
vulnerable | 2026-06-08 07:41:19.805237 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14856 |
vulnerable | 2026-06-08 07:06:35.255598 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10989 |
vulnerable | 2026-06-08 07:02:27.888785 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10473 |
vulnerable | 2026-06-08 07:02:26.932173 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10384 |
vulnerable | 2026-06-08 07:02:26.775460 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0734 |
vulnerable | 2026-06-08 07:02:25.299816 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9048 |
vulnerable | 2026-06-08 07:00:26.555497 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6511 |
vulnerable | 2026-06-08 06:58:19.642140 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-57521 |
vulnerable | 2026-06-08 06:56:13.566216 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-54762 |
vulnerable | 2026-06-08 06:54:16.805248 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46076 |
vulnerable | 2026-06-08 06:48:09.927711 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42900 |
vulnerable | 2026-06-08 06:45:47.086340 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41599 |
vulnerable | 2026-06-08 06:43:54.732057 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49371 |
vulnerable | 2026-06-08 06:14:29.058803 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3815 |
vulnerable | 2026-06-08 06:09:40.594169 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3163 |
vulnerable | 2026-06-08 06:09:38.740614 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27025 |
vulnerable | 2026-06-08 05:57:40.540512 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-48114 |
vulnerable | 2026-06-08 05:50:41.206265 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32065 |
vulnerable | 2026-06-08 05:44:42.544598 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38241 |
vulnerable | 2026-06-08 05:32:55.706194 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.