Approved changes feed: RSS · Atom

cpe:2.3:a:zj1983:zz:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZj1983 (c8908e87-ae11-50e0-a1e0-34b9c50bf9a9)
ProductZz (6dadca63-06cd-56f2-8733-8638e97ca014)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-1849 vulnerable 2026-06-08 07:08:38.336306 zj1983 zz import_data_todb server-side request forgery
MEDIUM (6.3)
A vulnerability classified as critical was found in zj1983 zz up to 2024-8. Affected by this vulnerability is an unknown functionality of the file /import_data_todb. The manipulation of the argument url leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-03-03T04:00:09.157Z
Updated: 2025-03-03T17:20:51.596Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1848 vulnerable 2026-06-08 07:08:38.335717 zj1983 zz import_data_check server-side request forgery
MEDIUM (6.3)
A vulnerability classified as critical has been found in zj1983 zz up to 2024-8. Affected is an unknown function of the file /import_data_check. The manipulation of the argument url leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-03-03T03:31:04.563Z
Updated: 2025-03-03T17:22:35.499Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1847 vulnerable 2026-06-08 07:08:38.335334 zj1983 zz improper authorization
MEDIUM (6.3)
A vulnerability was found in zj1983 zz up to 2024-8. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-03-03T03:00:08.622Z
Updated: 2025-03-03T17:31:51.406Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1846 vulnerable 2026-06-08 07:08:38.334728 zj1983 zz File ZfileAction.java deleteLocalFile denial of service
MEDIUM (5.4)
A vulnerability was found in zj1983 zz up to 2024-8. It has been declared as problematic. This vulnerability affects the function deleteLocalFile of the file src/main/java/com/futvan/z/system/zfile/ZfileAction.java of the component File Handler. The manipulation of the argument zids leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-03-03T02:31:04.750Z
Updated: 2025-03-03T17:32:35.153Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1834 vulnerable 2026-06-08 07:08:38.305631 zj1983 zz resolve unrestricted upload
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in zj1983 zz up to 2024-8. This affects an unknown part of the file /resolve. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-03-02T22:00:06.192Z
Updated: 2025-03-03T20:09:51.021Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1833 vulnerable 2026-06-08 07:08:38.305149 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1832 vulnerable 2026-06-08 07:08:38.304748 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1831 vulnerable 2026-06-08 07:08:38.304369 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1830 vulnerable 2026-06-08 07:08:38.303871 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1821 vulnerable 2026-06-08 07:08:38.217588 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1820 vulnerable 2026-06-08 07:08:38.217045 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1818 vulnerable 2026-06-08 07:08:38.212170 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1813 vulnerable 2026-06-08 07:08:38.201996 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1812 vulnerable 2026-06-08 07:08:38.200766 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.