CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

OSV•added 2022/10/07 11:15 p.m.•14 views

CVE-2022-36635

ZKteco ZKBioSecurity V5000 4.1.3 was discovered to contain a SQL injection vulnerability via the component /baseOpLog.do...

8.8CVSS5.8AI score0.1704EPSS

SaveExploits3References3

NVD•added 2022/10/07 11:15 p.m.•21 views

CVE-2022-36635

ZKteco ZKBioSecurity V5000 4.1.3 was discovered to contain a SQL injection vulnerability via the component /baseOpLog.do...

8.8CVSS0.1704EPSS

SaveExploits3References1

Cvelist•added 2022/10/07 12:00 a.m.•40 views

CVE-2022-36635

ZKteco ZKBioSecurity V5000 4.1.3 was discovered to contain a SQL injection vulnerability via the component /baseOpLog.do...

9.2AI score0.1704EPSS

SaveExploits3References1

CVE•added 2022/10/07 12:00 a.m.•96 views

CVE-2022-36635

CVE-2022-36635 affects ZKTeco ZKBioSecurity V5000 (version 4.1.3) with a SQL injection in the /baseOpLog.do component. The root cause is a lack of input validation for external SQL statements, enabling attackers to obtain sensitive DB information. The CVSSv3.1 metrics indicate Network access, Low...

8.8CVSS9AI score0.1704EPSS

SaveExploits3References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2022/10/07 12:00 a.m.•3 views

CVE-2022-36635: Improper Neutralization of Special Elements used in an SQL Command

ZKteco ZKBioSecurity V5000 4.1.3 was discovered to contain a SQL injection vulnerability via the component /baseOpLog.do...

8.8CVSS7.7AI score0.1704EPSS

SaveExploits3References4

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by