CVE-2024-10597

A vulnerability classified as critical has been found in ESAFENET CDG 5. This affects the function delPolicyAction of the file /com/esafenet/servlet/system/PolicyActionService.java. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-10597

CVE-2024-10597 affects ESAFENET CDG 5, specifically the function delPolicyAction in /com/esafenet/servlet/system/PolicyActionService.java. The vulnerability arises from improper handling of the id parameter, enabling SQL injection and allowing remote exploitation. Public exploit information is no...

CVE-2024-10596

CVE-2024-10596 affects ESAFENET CDG 5, specifically the function delEntryptPolicySort in /com/esafenet/servlet/system/EncryptPolicyTypeService.java. The vulnerability arises from improper handling of the id argument, enabling SQL injection that can be exploited remotely. Public disclosure of the ...

WordPress 5 Stars Rating Funnel Plugin <=1.4.01 is vulnerable to SQL Injection

Software 5 Stars Rating Funnel Type Plugin Vulnerable versions =1.4.01 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51579 Patch priority Low CVSS severity Low 8.5 Developer Tobias PSID a5f214d4be7a Credits Trương Hữu Phúc truonghuuphuc Required privilege...

PT-2024-16409 · Safenet · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version 5 Description: A critical issue has been identified, affecting the function delSystemEncryptPolicy in the file /com/esafenet/servlet/system/SystemEncryptPolicyService.java. The manipulation of the argument id leads to SQL...

CVE-2024-10502

A vulnerability has been found in ESAFENET CDG 5 and classified as critical. This vulnerability affects the function getOneFileDirectory of the file /com/esafenet/servlet/fileManagement/FileDirectoryService.java. The manipulation of the argument directoryId leads to sql injection. The attack can ...

CVE-2024-10501

A vulnerability, which was classified as critical, was found in ESAFENET CDG 5. This affects the function findById of the file /com/esafenet/servlet/document/ExamCDGDocService.java. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-10502

A vulnerability has been found in ESAFENET CDG 5 and classified as critical. This vulnerability affects the function getOneFileDirectory of the file /com/esafenet/servlet/fileManagement/FileDirectoryService.java. The manipulation of the argument directoryId leads to sql injection. The attack can ...

CVE-2024-10500

A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5. Affected by this issue is some unknown functionality of the file /com/esafenet/servlet/policy/HookWhiteListService.java. The manipulation of the argument policyId leads to sql injection. The attack may be launche...

CVE-2024-10502

Summary of CVE-2024-10502 : Affects ESAFENET CDG 5. The vulnerability is in the function getOneFileDirectory of /com/esafenet/servlet/fileManagement/FileDirectoryService.java, where manipulating the argument directoryId enables a SQL injection. The attack may be initiated remotely, and multiple s...

CVE-2024-10501

The CVE-2024-10501 entry concerns ESAFENET CDG 5. The vulnerability is in ExamCDGDocService.java, findById, where manipulation of the id parameter enables SQL injection. A remote attacker could trigger the issue, and public disclosures exist. Connected documents consistently describe the affected...

CVE-2024-10500

ESAFENET CDG 5 is affected by a SQL injection in the HookWhiteListService.java file, where manipulating the policyId argument enables remote exploitation. This vulnerability is corroborated across multiple sources (including PT-Security and CVE records) and is described as affecting unknown funct...

Huawei EulerOS: Security Advisory for krb5 (EulerOS-SA-2024-2752)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for krb5 (EulerOS-SA-2024-2704)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for krb5 (EulerOS-SA-2024-2690)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 41 Update: yarnpkg-1.22.22-5.fc41

Fast, reliable, and secure dependency management...

CVE-2024-10379

A vulnerability classified as problematic was found in ESAFENET CDG 5. Affected by this vulnerability is the function actionViewDecyptFile of the file /com/esafenet/servlet/client/DecryptApplicationService.java. The manipulation of the argument decryptFileId with the input...

CVE-2024-10378

A vulnerability classified as critical has been found in ESAFENET CDG 5. Affected is the function actionViewCDGRenewFile of the file /com/esafenet/servlet/client/CDGRenewApplicationService.java. The manipulation of the argument CDGRenewFileId leads to sql injection. It is possible to launch the...

CVE-2024-10379

ESAFENET CDG 5 contains a path traversal where the vulnerable function is actionViewDecyptFile in /com/esafenet/servlet/client/DecryptApplicationService.java. An attacker can manipulate decryptFileId (example: ../../../Windows/System32/drivers/etc/hosts) to access files outside the web root (path...

CVE-2024-10378

CVE-2024-10378 affects ESAFENET CDG 5. The vulnerability lies in the function actionViewCDGRenewFile of /com/esafenet/servlet/client/CDGRenewApplicationService.java. Manipulating the CDGRenewFileId parameter enables SQL injection. It is exploitable remotely and, per multiple sources, the exploit ...