54 matches found
EUVD-2020-20602
Malware in sbrugna...
EUVD-2023-43268
Malicious code in bioql PyPI...
EUVD-2024-28807
Malicious code in bioql PyPI...
EUVD-2023-43267
Malicious code in bioql PyPI...
EUVD-2023-40329
Malicious code in bioql PyPI...
CVE-2023-39558
AudimexEE v15.0 was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities via the Show Kai Data component...
CVE-2023-39559
AudimexEE 15.0 was discovered to contain a full path disclosure vulnerability...
CVE-2023-36361
Audimexee v14.1.7 was discovered to contain a SQL injection vulnerability via the ptablename parameter...
CVE-2020-28115
SQL Injection vulnerability in "Documents component" found in AudimexEE version 14.1.0 allows an attacker to execute arbitrary SQL commands via the objectpath parameter...
CVE-2020-28047
AudimexEE before 14.1.1 is vulnerable to Reflected XSS Cross-Site-Scripting. If the recommended security configuration parameter "uniqueerrornumbers" is not set, remote attackers can inject arbitrary web script or HTML via 'action, cargo, panel' parameters that can lead to data leakage...
CVE-2024-30889
Cross Site Scripting vulnerability in audimex audimexEE v.15.1.2 and fixed in 15.1.3.9 allows a remote attacker to execute arbitrary code via the service, method, widgettype, requestid, payload parameters...
CVE-2024-30889
Cross Site Scripting vulnerability in audimex audimexEE v.15.1.2 and fixed in 15.1.3.9 allows a remote attacker to execute arbitrary code via the service, method, widgettype, requestid, payload parameters...
CVE-2024-30889
Cross Site Scripting vulnerability in audimex audimexEE v.15.1.2 and fixed in 15.1.3.9 allows a remote attacker to execute arbitrary code via the service, method, widgettype, requestid, payload parameters...
CVE-2024-30889
Cross Site Scripting vulnerability in audimex audimexEE v.15.1.2 and fixed in 15.1.3.9 allows a remote attacker to execute arbitrary code via the service, method, widgettype, requestid, payload parameters...
PT-2024-23659 · Audimexee · Audimexee
Name of the Vulnerable Software and Affected Versions: audimexEE versions prior to 15.1.3.9 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the service, method, widget type, request id, payload parameters. Recommendations: For versions prior to...
Audimex AG AudimexEE Cross-Site Scripting Vulnerability
Audimex AG AudimexEE is a system for audit management from Audimex Ag, Germany. The system meets complex audit processes around a company's business, supports customization for use and is deployed platform-independently. A cross-site scripting vulnerability exists in Audimex version 15.0.0, which...
CVE-2023-36361
Audimexee v14.1.7 was discovered to contain a SQL injection vulnerability via the ptablename parameter...
CVE-2023-36361
Audimexee v14.1.7 was discovered to contain a SQL injection vulnerability via the ptablename parameter...
Sql injection
Audimexee v14.1.7 was discovered to contain a SQL injection vulnerability via the ptablename parameter...
CVE-2023-36361
CVE-2023-36361 affects Audimexee v14.1.7, with a SQL injection vulnerability exploitable through the p_table_name parameter. The root cause is improper handling/sanitization of the p_table_name input, enabling attackers to inject SQL commands. Documented impact is high confidentiality, integrity,...