Most recent entries from all

cnvd-2025-20870

2026-10-19T05:54:24.365900+00:00

cnvd-2025-20870

2026-10-19T05:54:24.365947+00:00

EUVD-2026-272115

2026-10-19T05:54:24.365969+00:00

Improper Control of Generation of Code ('Code Injection') vulnerability leading to a possible RCE in Apache OFBiz scrum plugin.

This issue affects Apache OFBiz: before 24.09.02 only when the scrum plugin is used.

Even unauthenticated attackers can exploit this vulnerability.

Users are recommended to upgrade to version 24.09.02, which fixes the issue.

2026-10-19T05:54:24.366022+00:00

Improper Control of Generation of Code ('Code Injection') vulnerability leading to a possible RCE in Apache OFBiz scrum plugin.

This issue affects Apache OFBiz: before 24.09.02 only when the scrum plugin is used.

Even unauthenticated attackers can exploit this vulnerability.

Users are recommended to upgrade to version 24.09.02, which fixes the issue.

2026-10-19T05:54:24.366060+00:00

Ein Angreifer kann eine Schwachstelle in Apache OFBiz ausnutzen, um beliebigen Programmcode auszuführen.