iocoder records

13 published records for vendor iocoder.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

13 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2022-37158No exploit	RuoYi v3.8.3 has a Weak password vulnerability in the management system.iocoder · ruoyi-vue-pro · CWE-521 Pre-auth	Critical9.8	—	0.9%	Aug 25, 2022
21Monitor	CVE-2025-2707No exploit	zhijiantianya ruoyi-vue-pro Front-End Store Interface upload path traversaliocoder · ruoyi-vue-pro · CWE-22 Path traversal	Medium5.3	—	0.9%	Mar 24, 2025
21Monitor	CVE-2025-2708No exploit	zhijiantianya ruoyi-vue-pro Backend File Upload Interface upload path traversaliocoder · ruoyi-vue-pro · CWE-22 Path traversal	Medium5.3	—	0.9%	Mar 24, 2025
21Monitor	CVE-2025-2742No exploit	zhijiantianya ruoyi-vue-pro Material Upload Interface upload-permanent path traversaliocoder · ruoyi-vue-pro · CWE-22 Path traversal	Medium5.3	—	0.9%	Mar 25, 2025
21Monitor	CVE-2025-2743No exploit	zhijiantianya ruoyi-vue-pro Material Upload Interface upload-temporary path traversaliocoder · ruoyi-vue-pro · CWE-22 Path traversal	Medium5.3	—	0.9%	Mar 25, 2025
21Monitor	CVE-2025-2744No exploit	zhijiantianya ruoyi-vue-pro Material Upload Interface upload-news-image path traversaliocoder · ruoyi-vue-pro · CWE-22 Path traversal	Medium5.3	—	0.7%	Mar 25, 2025
21Monitor	CVE-2025-2040No exploit	zhijiantianya ruoyi-vue-pro deploy special elements used in a template engineiocoder · ruoyi-vue-pro · CWE-791	Medium5.3	—	0.5%	Mar 6, 2025
8Monitor	CVE-2025-10987No exploit	YunaiV yudao-cloud HTTP Request transfer improper authorizationiocoder · yudao-cloud · CWE-266	Low2.1	—	0.3%	Sep 25, 2025
8Monitor	CVE-2025-10988No exploit	YunaiV ruoyi-vue-pro transfer improper authorizationiocoder · ruoyi-vue-pro · CWE-266	Low2.1	—	0.3%	Sep 25, 2025
8Monitor	CVE-2025-10277No exploit	YunaiV yudao-cloud submit improper authorizationiocoder · yudao-cloud · CWE-266	Low2.1	—	0.3%	Sep 11, 2025
8Monitor	CVE-2025-10276No exploit	YunaiV ruoyi-vue-pro transfer improper authorizationiocoder · ruoyi-vue-pro · CWE-266	Low2.1	—	0.3%	Sep 11, 2025
8Monitor	CVE-2025-10275No exploit	YunaiV yudao-cloud transfer improper authorizationiocoder · yudao-cloud · CWE-266	Low2.1	—	0.3%	Sep 11, 2025
8Monitor	CVE-2025-10278No exploit	YunaiV ruoyi-vue-pro transfer improper authorizationiocoder · ruoyi-vue-pro · CWE-266	Low2.1	—	0.3%	Sep 12, 2025

CVE-2022-37158
39Monitor
RuoYi v3.8.3 has a Weak password vulnerability in the management system.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
iocoder · ruoyi-vue-proAug 25, 2022
CVE-2025-2707
21Monitor
zhijiantianya ruoyi-vue-pro Front-End Store Interface upload path traversal
MediumCVSS 5.3No exploitEPSS 1%
- Path traversal
iocoder · ruoyi-vue-proMar 24, 2025
CVE-2025-2708
21Monitor
zhijiantianya ruoyi-vue-pro Backend File Upload Interface upload path traversal
MediumCVSS 5.3No exploitEPSS 1%
- Path traversal
iocoder · ruoyi-vue-proMar 24, 2025
CVE-2025-2742
21Monitor
zhijiantianya ruoyi-vue-pro Material Upload Interface upload-permanent path traversal
MediumCVSS 5.3No exploitEPSS 1%
- Path traversal
iocoder · ruoyi-vue-proMar 25, 2025
CVE-2025-2743
21Monitor
zhijiantianya ruoyi-vue-pro Material Upload Interface upload-temporary path traversal
MediumCVSS 5.3No exploitEPSS 1%
- Path traversal
iocoder · ruoyi-vue-proMar 25, 2025
CVE-2025-2744
21Monitor
zhijiantianya ruoyi-vue-pro Material Upload Interface upload-news-image path traversal
MediumCVSS 5.3No exploitEPSS 1%
- Path traversal
iocoder · ruoyi-vue-proMar 25, 2025
CVE-2025-2040
21Monitor
zhijiantianya ruoyi-vue-pro deploy special elements used in a template engine
MediumCVSS 5.3No exploitEPSS 0%
iocoder · ruoyi-vue-proMar 6, 2025
CVE-2025-10987
8Monitor
YunaiV yudao-cloud HTTP Request transfer improper authorization
LowCVSS 2.1No exploitEPSS 0%
iocoder · yudao-cloudSep 25, 2025
CVE-2025-10988
8Monitor
YunaiV ruoyi-vue-pro transfer improper authorization
LowCVSS 2.1No exploitEPSS 0%
iocoder · ruoyi-vue-proSep 25, 2025
CVE-2025-10277
8Monitor
YunaiV yudao-cloud submit improper authorization
LowCVSS 2.1No exploitEPSS 0%
iocoder · yudao-cloudSep 11, 2025
CVE-2025-10276
8Monitor
YunaiV ruoyi-vue-pro transfer improper authorization
LowCVSS 2.1No exploitEPSS 0%
iocoder · ruoyi-vue-proSep 11, 2025
CVE-2025-10275
8Monitor
YunaiV yudao-cloud transfer improper authorization
LowCVSS 2.1No exploitEPSS 0%
iocoder · yudao-cloudSep 11, 2025
CVE-2025-10278
8Monitor
YunaiV ruoyi-vue-pro transfer improper authorization
LowCVSS 2.1No exploitEPSS 0%
iocoder · ruoyi-vue-proSep 12, 2025