Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

xxyopen Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2025-65442`	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published12/29/2025	SeverityMedium
`CVE-2025-60299`	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published10/08/2025	SeverityMedium
`CVE-2025-60298`	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published10/08/2025	SeverityMedium
`CVE-2025-6535`xxyopen/201206030 novel-plus User Management Module UserMapper.xml list sql injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productNovel-Plus	Published06/24/2025	SeverityMedium
`CVE-2025-6534`xxyopen/201206030 novel-plus File FileController.java remove resource injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productNovel-Plus	Published06/24/2025	SeverityLow
`CVE-2025-6533`xxyopen/201206030 novel-plus CATCHA LoginController.java ajaxLogin authentication replay	Exploitation statusPublic exploit	FixNot confirmed	Affected productNovel-Plus	Published06/24/2025	SeverityMedium
`CVE-2025-45890`	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published06/20/2025	SeverityCritical
`CVE-2025-4036`201206030 Novel Chapter AuthorController.java updateBookChapter access control	Exploitation statusPublic exploit	FixNot confirmed	Affected productNovel	Published04/28/2025	SeverityMedium
`CVE-2025-4019`20120630 Novel-Plus GeneratorController.java genCode missing authentication	Exploitation statusPublic exploit	FixNot confirmed	Affected productNovel-Plus	Published04/28/2025	SeverityMedium
`CVE-2025-4018`20120630 Novel-Plus CrawlController.java addCrawlSource missing authentication	Exploitation statusPublic exploit	FixNot confirmed	Affected productNovel-Plus	Published04/28/2025	SeverityMedium
`CVE-2025-4017`20120630 Novel-Plus LogController.java list improper authorization	Exploitation statusPublic exploit	FixNot confirmed	Affected productNovel-Plus	Published04/28/2025	SeverityMedium
`CVE-2025-4016`20120630 Novel-Plus LogController.java deleteIndex improper authorization	Exploitation statusPublic exploit	FixNot confirmed	Affected productNovel-Plus	Published04/28/2025	SeverityMedium
`CVE-2025-4015`20120630 Novel-Plus SessionController.java list missing authentication	Exploitation statusPublic exploit	FixNot confirmed	Affected productNovel-Plus	Published04/28/2025	SeverityMedium
`CVE-2025-3956`201206030 novel-cloud BookInfoMapper.xml RestResp sql injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productnovel-cloud	Published04/27/2025	SeverityMedium
`CVE-2025-3856`xxyopen Novel-Plus searchByPage sql injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productNovel-Plus	Published04/22/2025	SeverityMedium
`CVE-2025-3676`xxyopen Novel-Plus books sql injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productNovel-Plus	Published04/16/2025	SeverityMedium
`CVE-2025-3369`xxyopen Novel-Plus list sql injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productNovel-Plus	Published04/07/2025	SeverityMedium
`CVE-2025-26182`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published03/04/2025	SeverityMedium
`CVE-2025-1154`xxyopen Novel books sql injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productNovel	Published02/10/2025	SeverityMedium
`CVE-2024-33383`	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published04/30/2024	SeverityHigh
`CVE-2024-25274`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published02/20/2024	SeverityCritical
`CVE-2024-24014`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published02/08/2024	SeverityCritical
`CVE-2024-24025`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published02/08/2024	SeverityCritical
`CVE-2024-24018`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published02/08/2024	SeverityCritical
`CVE-2024-24026`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published02/08/2024	SeverityCritical
`CVE-2024-24021`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published02/08/2024	SeverityCritical
`CVE-2024-24024`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published02/08/2024	SeverityCritical
`CVE-2024-24023`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published02/08/2024	SeverityCritical
`CVE-2024-24017`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published02/08/2024	SeverityHigh
`CVE-2024-24019`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published02/07/2024	SeverityCritical
`CVE-2024-24013`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published02/06/2024	SeverityCritical
`CVE-2024-24015`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published02/06/2024	SeverityCritical
`CVE-2024-0941`Novel-Plus list sql injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productNovel-Plus	Published01/26/2024	SeverityMedium
`CVE-2024-0655`Novel-Plus list sql injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productNovel-Plus	Published01/18/2024	SeverityMedium
`CVE-2023-7171`Novel-Plus Friendly Link FriendLinkController.java cross site scripting	Exploitation statusPublic exploit	FixYes	Affected productNovel-Plus	Published12/29/2023	SeverityLow
`CVE-2023-7166`Novel-Plus HTTP POST Request updateUserInfo cross site scripting	Exploitation statusPublic exploit	FixYes	Affected productNovel-Plus	Published12/29/2023	SeverityLow
`CVE-2023-46981`	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published11/04/2023	SeverityUnknown
`CVE-2023-41443`	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published09/18/2023	SeverityUnknown
`CVE-2023-30058`	Exploitation statusPublic exploit	FixNot confirmed	Affected productNot confirmed	Published09/11/2023	SeverityUnknown
`CVE-2023-37847`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published08/14/2023	SeverityUnknown
`CVE-2023-2041`novel-plus sql injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productnovel-plus	Published04/14/2023	SeverityMedium
`CVE-2023-2040`novel-plus sql injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productnovel-plus	Published04/14/2023	SeverityMedium
`CVE-2023-2039`novel-plus sql injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productnovel-plus	Published04/14/2023	SeverityMedium
`CVE-2023-1607`novel-plus list sql injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productnovel-plus	Published03/23/2023	SeverityMedium
`CVE-2023-1606`novel-plus DictController.java sql injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productnovel-plus	Published03/23/2023	SeverityMedium
`CVE-2023-1595`novel-plus list sql injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productnovel-plus	Published03/23/2023	SeverityMedium
`CVE-2023-1594`novel-plus list MenuService sql injection	Exploitation statusPublic exploit	FixNot confirmed	Affected productnovel-plus	Published03/23/2023	SeverityHigh
`CVE-2022-36672`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published09/01/2022	SeverityUnknown
`CVE-2022-36671`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published09/01/2022	SeverityUnknown
`CVE-2022-35121`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published08/17/2022	SeverityUnknown
`CVE-2021-42967`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published05/13/2022	SeverityUnknown
`CVE-2022-28462`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published05/05/2022	SeverityUnknown
`CVE-2021-41921`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published04/28/2022	SeverityUnknown
`CVE-2022-24568`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published02/10/2022	SeverityUnknown

54 / 54 Results

All vulnerabilities loaded

Security vulnerabilities from xxyopen

xxyopen

Filters

Run an in-depth assessment with complete web risk management

Popular xxyopen products

Novel-Plus

Novel