Vulnerabilities > Weaver > Critical

DATE CVE VULNERABILITY TITLE RISK
2024-01-20 CVE-2023-51892 Unspecified vulnerability in Weaver E-Cology 10.0.2310.01
An issue in weaver e-cology v.10.0.2310.01 allows a remote attacker to execute arbitrary code via a crafted script to the FrameworkShellController component.
network
low complexity
weaver
critical
9.8
2023-07-25 CVE-2023-34798 Unrestricted Upload of File with Dangerous Type vulnerability in Weaver E-Office
An arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute arbitrary code via uploading a crafted file.
network
low complexity
weaver CWE-434
critical
9.8
2023-07-20 CVE-2023-3793 SQL Injection vulnerability in Weaver E-Cology 10.0.2310.01/9.0
A vulnerability was found in Weaver e-cology.
network
low complexity
weaver CWE-89
critical
9.8
2023-05-11 CVE-2023-2648 Unrestricted Upload of File with Dangerous Type vulnerability in Weaver E-Office 9.5
A vulnerability was found in Weaver E-Office 9.5.
network
low complexity
weaver CWE-434
critical
9.8