Filtered by vendor Hummerrisk Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-63721 1 Hummerrisk 1 Hummerrisk 2025-12-11 9.8 Critical
HummerRisk thru v1.5.0 is using a vulnerable Snakeyaml component, allowing attackers with normal user privileges to hit the /rule/add API and thereby achieve RCE and take over the server.
CVE-2023-43449 1 Hummerrisk 1 Hummerrisk 2025-06-03 8.8 High
An issue in HummerRisk HummerRisk v.1.10 thru 1.4.1 allows an authenticated attacker to execute arbitrary code via a crafted request to the service/LicenseService component.