4065 matches found
Preparing for PCI DSS 4.0
PCI DSS 4.0 is currently in its request for comments RFC process, where the industry can provide comments and feedback to help shape the next iteration. This process is initially open to the participating organizations - members that help steer and inform the PCI SSC based on their experiences. T...
Hardcoded credentials
SICK MSC800 all versions prior to Version 4.0, the affected firmware versions contain a hard-coded customer account password...
Information disclosure
HHVM, when used with FastCGI, would bind by default to all available interfaces. This behavior could allow a malicious individual unintended direct access to the application, which could result in information disclosure. This issue affects versions 4.3.0, 4.4.0, 4.5.0, 4.6.0, 4.7.0, 4.8.0, versio...
Essential Strategies for Securing Smart Factories
With Industry 4.0, manufacturing organizations need to recognize the unique threats and risks facing them, and strategize towards addressing them...
CVE-2017-12760
Ynet Interactive - http://demo.ynetinteractive.com/mobiketa/ Mobiketa 4.0 is affected by: SQL Injection. The impact is: Code execution remote...
CVE-2017-12760
Ynet Interactive - http://demo.ynetinteractive.com/mobiketa/ Mobiketa 4.0 is affected by: SQL Injection. The impact is: Code execution remote...
CVE-2017-12760
CVE-2017-12760 affects Ynet Interactive Mobiketa 4.0. The vulnerability is an SQL injection in Mobiketa 4.0 that leads to remote code execution. Documented in multiple sources (NVD, Red Hat advisory, CVE listings) with references to exposed URLs and, where available, CVSS scores indicating high i...
Fedora Update for links FEDORA-2018-2c0a92fd3d
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2019-11452
whatsns 4.0 allows index.php?admincategory/remove.html cid SQL injection...
CVE-2019-11452
whatsns 4.0 allows index.php?admincategory/remove.html cid SQL injection...
Sql injection
whatsns 4.0 allows index.php?question/ajaxadd.html title SQL injection...
Sql injection
whatsns 4.0 allows index.php?admincategory/remove.html cid SQL injection...
Sql injection
whatsns 4.0 allows index.php?inform/add.html qid SQL injection...
CVE-2019-11450
whatsns 4.0 allows index.php?question/ajaxadd.html title SQL injection...
CVE-2019-11450
whatsns 4.0 allows index.php?question/ajaxadd.html title SQL injection...
CVE-2019-11451
whatsns 4.0 allows index.php?inform/add.html qid SQL injection...
CVE-2019-11452
Whatsns 4.0 is affected by a SQL injection in the admin workflow: index.php?admin_category/remove.html cid[]. The Cy description in connected Red Hat EU and NVD entries confirms that the vulnerability stems from handling of the cid[] parameter, enabling SQL injection. The records do not provide s...
CVE-2019-11452
whatsns 4.0 allows index.php?admincategory/remove.html cid SQL injection...
CVE-2019-11451
CVE-2019-11451 affects the web app "whatsns 4.0". A SQL injection vulnerability exists in the parameterized endpoint: index.php?inform/add.html with the qid parameter. The root cause is unsanitized input leading to SQL injection, enabling an attacker to potentially read/modify data and affect ava...