CVE Program partner

ZUSO ART

ZUSO ART

API
CVEs, 365 days1450 all time, 1 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationZUSO ART
RoleNot in the current partner list
Type-
Reports to-
Scope-

Latest CVEs · RSS

  • CVE-2026-96440 2026-09-29 · CVSS 7.1
    Improper Limitation of a Pathname to a Restricted Directory（Path Traversal） in the /WebAgenda/download/uploadFile.jsp API endpoint of Flowring Agentflow 4.0 ver
  • CVE-2026-96431 2026-09-29 · CVSS 9.3
    Unrestricted Upload of File with Dangerous Type in the /WebAgenda/download/uploadFile.jsp API endpoint of Flowring Agentflow 4.0 version before 2023/03/24 allow
  • CVE-2026-96430 2026-09-29 · CVSS 8.7
    Exposed Dangerous Method or Function in the /WebAgenda/SQLWin.do API endpoint of Flowring Agentflow 4.0 version Before 2026/08/28 allows remote authenticated us
  • CVE-2026-96429 2026-09-29 · CVSS 9.3
    SQL Injection in the /WebAgenda/SMBAjaxConfigProcess.do API endpoint of Flowring Agentflow 4.0 version before 2025/08/08 allows remote attackers to execute arbi
  • CVE-2026-96428 2026-09-29 · CVSS 9.3
    SQL Injection in the /WebAgenda/SMBAjaxAutoComplete.do API endpoint of Flowring Agentflow 4.0 version before 2025/08/08 allows remote attackers to execute arbit
  • CVE-2026-76159 2026-09-15 · CVSS 7.0
    Incorrect Permission Assignment for Critical Resource in the configuration loader of Duplicati for Windows versions before v2.4.0.0 allows a local low-privileg
  • CVE-2026-76158 2026-08-21 · CVSS 9.3
    External Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to write
  • CVE-2026-76157 2026-08-21 · CVSS 8.8
    Missing authentication for a critical function in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an unauthenticated
  • CVE-2026-76156 2026-08-21 · CVSS 9.4
    OS command injection in the api endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an authenticated administrator to execute arbitrary
  • CVE-2026-76155 2026-08-21 · CVSS 9.3
    Use of default credentials in Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to gain administrative access to the management
  • CVE-2026-24727 2026-07-24 · CVSS 9.3
    An unrestricted upload of file with dangerous type vulnerability in the e-paper draft upload function of SUNNET Corporate Training Management System through v10
  • CVE-2026-24729 2026-01-30 · CVSS 10.0
    An unrestricted upload of file with dangerous type vulnerability in the file upload function of Interinfo DreamMaker versions before 2025/10/22 allows remote at
  • CVE-2026-24728 2026-01-30 · CVSS 9.3
    A missing authentication for critical function vulnerability in the /servlet/baServer3 endpoint of Interinfo DreamMaker versions before 2025/10/22 allows remote
  • CVE-2025-31342 2025-10-20 · CVSS 9.3
    An unrestricted upload of file with dangerous type vulnerability in the upload file function of Galaxy Software Services Corporation Vitals ESP Forum Module thr
  • CVE-2025-54946 2025-08-30 · CVSS 9.3
    A SQL injection vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary SQL commands.
  • CVE-2025-54945 2025-08-30 · CVSS 10.0
    An external control of file name or path vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary
  • CVE-2025-54944 2025-08-30 · CVSS 6.9
    An unrestricted upload of file with dangerous type vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to write ma
  • CVE-2025-54943 2025-08-30 · CVSS 9.3
    A missing authorization vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to perform unauthorized application de
  • CVE-2025-54942 2025-08-30 · CVSS 9.3
    A missing authentication for critical function vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to access deplo
  • CVE-2025-48784 2025-06-06 · CVSS 8.8
    A missing authorization vulnerability in Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to modify system
  • CVE-2025-48783 2025-06-06 · CVSS 8.8
    An external control of file name or path vulnerability in the delete file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0
  • CVE-2025-48782 2025-06-06 · CVSS 9.9
    An unrestricted upload of file with dangerous type vulnerability in the upload file function of Soar Cloud HRD Human Resource Management System through version
  • CVE-2025-48781 2025-06-06 · CVSS 8.7
    An external control of file name or path vulnerability in the download file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025
  • CVE-2025-48780 2025-06-06 · CVSS 9.9
    A deserialization of untrusted data vulnerability in the download file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408
  • CVE-2025-5192 2025-06-06 · CVSS 9.3
    A missing authentication for critical function vulnerability in the client application of Soar Cloud HRD Human Resource Management System through version 7.3.20

All CVE Program partners