dromara Latest High & Critical Vulnerabilities
Latest High & Critical vulnerabilities published by dromara
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Server-Side Request Forgery in Dromara Skyeye Affects File Editing Functionality
CVE-2026-107781DromaraSkyeye9.1CRITICALOS Command Injection in Dromara Skyeye Product by Dromara
CVE-2026-107780DromaraSkyeye9.3CRITICALMissing Authentication Vulnerability in Dromara Skyeye's JobInfoController
CVE-2026-107779DromaraSkyeye9.3CRITICALRemote Code Execution in Northstar Trading Platform by Dromara
CVE-2026-88391DromaraNorthstar9.8CRITICALAuthorization Bypass Vulnerability in lamp-cloud by dromara
CVE-2026-94535DromaraLamp-cloud👾🟡7.1HIGHUser Profile Vulnerability in Lamp-Cloud by Dromara
CVE-2026-94534DromaraLamp-cloud👾🟡7.1HIGHAuthorization Bypass in lamp-cloud Vulnerability Allowing File Access
CVE-2026-94533DromaraLamp-cloud👾🟡7.1HIGHAuthorization Bypass in Lamp-Cloud by Dromara
CVE-2026-94532DromaraLamp-cloud👾🟡7.1HIGHUnauthorized Access Vulnerability in lamp-cloud by dromara
CVE-2026-91996DromaraLamp-cloud👾🟡8.7HIGHRemote Code Execution Vulnerability in RuoYi-Vue-Plus by Dromara
CVE-2026-88616DromaraRuoYi-Vue-Plus8.8HIGHUnauthorized Access Vulnerability in MaxKey Authentication System by Dromara
CVE-2026-69102DromaraMaxkey9.3CRITICALRemote Code Execution Vulnerability in LAMP Rapid Development Platform by Dromara
CVE-2026-69100DromaraLamp-cloud👾🟡8.7HIGHInsufficient Redirect URI Validation in MaxKey OAuth 2.0 Implementation
CVE-2026-67345DromaraMaxkey👾🟡8.5HIGHAuthorization Bypass in RuoYi-Vue-Plus Workflow Management
CVE-2026-58176DromaraRuoyi-vue-plus👾🟡7.1HIGHArbitrary File Access in RuoYi-Vue-Plus Software by Dromara
CVE-2025-66916DromaraRuoYi-Vue-Plus9.4CRITICALHertzbeat Fixes YAML Deserialization Vulnerability in Version 1.4.1
CVE-2023-51389DromaraHertzbeat9.8CRITICALHertzbeat Monitoring System Vulnerability Fix
CVE-2023-51388DromaraHertzbeat9.8CRITICALJNDI Injection Vulnerability in Hertzbeat's `JmxCollectImpl.java` Could Lead to Remote Code Execution
CVE-2023-51653DromaraHertzbeat9.8CRITICALDenial of Service Vulnerability in hutool-core by Dromara
CVE-2023-51075DromaraHutool7.5HIGHExpression Injection Vulnerability in Hertzbeat
CVE-2023-51387dromarahertzbeat8.8HIGHUnauthorized access vulnerability on three interfaces
CVE-2023-51650DromaraHertzbeat7.5HIGHPermission bypass due to incorrect configuration in github.com/dromara/hertzbeat
CVE-2022-39337DromaraHertzbeat7.5HIGHHardcoded Key Vulnerability in Dromara Sureness Authentication Framework
CVE-2023-31581DromaraSureness9.8CRITICALAuthentication Bypass in Dromara SaToken by Spring Dynamic Controllers
CVE-2023-43961DromaraSa-token8.8HIGHRemote Code Execution Vulnerability in Dromara SaToken
CVE-2023-44794DromaraSa-token9.8CRITICAL