Vulnerabilities in yogeshojha

7 results

Vexday analysis

O fornecedor yogeshojha apresenta 7 vulnerabilidades catalogadas, todas de severidade baixa a média, com nenhuma sob exploração ativa confirmada. A fraqueza dominante é Cross-site Scripting (CWE-79), padrão em aplicações web, e não há publicações recentes, indicando risco estabilizado e não imediato.

CVE-2022-1813HIGHOS Command Injection in yogeshojha/rengineEPSS 2.7%CVE-2025-24962HIGHCommand Injection in reNgineEPSS 0.7%CVE-2025-24968HIGHBusiness Logic And Unrestricted Project Deletion Lead To Take Over the System in reNgineEPSS 0.6%CVE-2025-24899HIGHDisclosure of Sensitive User Information via API in reNgineEPSS 0.5%CVE-2024-43381MEDIUMreNgine vulnerable to Stored Cross-Site Scripting (XSS) via DNS Record PoisoningEPSS 0.4%CVE-2025-24967HIGHStored XSS on Admin Panel When Deleting a User in reNgineEPSS 0.3%CVE-2025-24966MEDIUMHTML Injection in reNgineEPSS 0.3%