Frostmourne
Approved changes feed: RSS · Atom
cpe:2.3:a:autohomecorp:frostmourne:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Autohomecorp (cf984c40-7720-587c-9374-203976c9fab9) |
|---|---|
| Product | Frostmourne (cd8eb934-a0dc-59ec-9976-950ceef905cb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-5563 |
vulnerable | 2026-06-08 08:07:03.839130 |
AutohomeCorp frostmourne Alarm Preview previewData httpTest sql injection
MEDIUM (6.3)
A security flaw has been discovered in AutohomeCorp frostmourne up to 1.0. Affected is the function httpTest of the file /api/monitor-api/alarm/previewData of the component Alarm Preview. The manipulation results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-04-05T11:15:47.088Z
Updated: 2026-04-06T18:03:27.509Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5259 |
vulnerable | 2026-06-08 08:07:03.457762 |
AutohomeCorp frostmourne Alarm Preview AlarmController.java server-side request forgery
MEDIUM (6.3)
A vulnerability was determined in AutohomeCorp frostmourne up to 1.0. The affected element is an unknown function of the file frostmourne-monitor/src/main/java/com/autohome/frostmourne/monitor/controller/AlarmController.java of the component Alarm Preview. Executing a manipulation can lead to server-side request forgery. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
Published: 2026-04-01T07:30:51.295Z
Updated: 2026-04-01T11:42:16.770Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3968 |
vulnerable | 2026-06-08 08:01:19.723734 |
AutohomeCorp frostmourne Oracle Nashorn JavaScript ExpressionRule.java scriptEngine.eval code injection
MEDIUM (6.3)
A vulnerability has been found in AutohomeCorp frostmourne up to 1.0. This affects the function scriptEngine.eval of the file ExpressionRule.java of the component Oracle Nashorn JavaScript Engine. Such manipulation of the argument EXPRESSION leads to code injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-03-12T00:32:07.723Z
Updated: 2026-03-12T13:25:49.428Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.