Lemon

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-9406 Aug 25, 04:15 LOW POC Monitor

A weakness has been identified in xuhuisheng lemon up to 1.13.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Java File Upload Lemon Mossle

NVD GitHub VulDB

CVSS 4.0

2.1

EPSS

0.1%

CVE-2018-18315 Oct 15, 04:29 HIGH This Week

com/mossle/cdn/CdnController.java in lemon 1.9.0 allows attackers to upload arbitrary files because the copyMultipartFileToFile method in CdnUtils only checks for a ../ substring, and does not. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Java File Upload Lemon Mossle

NVD GitHub

CVSS 3.0

7.5

EPSS

1.2%

CVE-2025-9406

EPSS 0% CVSS 2.1

LOW POC Monitor

Authentication Bypass Java File Upload +2

NVD GitHub VulDB

CVE-2018-18315

EPSS 1% CVSS 7.5

HIGH This Week

Java File Upload Lemon +1

NVD GitHub