310 matches found
KingH5Stream of Beijing Asian Control Technology Development Co., Ltd. is vulnerable to a logic flaw.
Beijing Asian Control Technology Development Co., Ltd. is a high-tech enterprise of automation software platform. Beijing Asian Control Technology Development Co., Ltd KingH5Stream has a logic flaw vulnerability that can be exploited by an attacker to obtain user passwords and log in to the syste...
CVE-2023-1064
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Uzay Baskul Weighbridge Automation Software allows SQL Injection. This issue affects Weighbridge Automation Software: before 1.1...
Sql injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Uzay Baskul Weighbridge Automation Software allows SQL Injection.This issue affects Weighbridge Automation Software: before 1.1...
CVE-2023-1064 SQLi in Uzay Baskul's Weighbridge Automation Software
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Uzay Baskul Weighbridge Automation Software allows SQL Injection. This issue affects Weighbridge Automation Software: before 1.1...
CVE-2023-1064
Uzay Baskul Weighbridge Automation Software prior to version 1.1 is affected by an SQL Injection due to improper neutralization of special elements in SQL commands. Root cause: input not properly sanitized in SQL query construction. Impact is high (C, I, A = HIGH) with CVSS v3.1 base score 9.8; a...
CVE-2023-1064 SQLi in Uzay Baskul's Weighbridge Automation Software
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Uzay Baskul Weighbridge Automation Software allows SQL Injection. This issue affects Weighbridge Automation Software: before 1.1...
CVE-2023-1064: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Uzay Baskul Weighbridge Automation Software allows SQL Injection. This issue affects Weighbridge Automation Software: before 1.1...
Uzay Baskul Weighbridge Automation Software SQL注入漏洞
Uzay Baskul Weighbridge Automation Software is an industrial control automation software from Uzay Baskul. A security vulnerability exists in Uzay Baskul Weighbridge Automation Software versions prior to 1.1, which stems from improper neutralization of a special element, resulting in SQL injectio...
Siemens SICAM PAS/PQS 代码问题漏洞
Siemens SICAM PAS/PQS is a software from Siemens with an operating system for energy automation and power quality. A security vulnerability exists in Siemens SICAM PAS/PQS versions prior to V7.0 that stems from a failure to properly protect the containing folder. An attacker can exploit the...
The vulnerability of Websoft HCM’s automation software for HR processes stems from improper code generation management, allowing attackers to execute arbitrary code.
The vulnerability of Websoft HCM’s automation software for HR processes is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code during the generation of HTTP requests...
The vulnerability of Websoft HCM’s automation software for HR processes lies in the lack of protection for operational data, allowing attackers to gain unauthorized access to protected information.
The vulnerability of Websoft HCM’s automation software for HR processes is related to the lack of protection for operational data. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information through specially crafted requests...
The vulnerability of Websoft HCM’s automation software for HR processes stems from the lack of measures taken to protect the website structure. This allows attackers to carry out XSS attacks.
The vulnerability of Websoft HCM’s HR automation software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
The vulnerability of Websoft HCM’s automation software for HR processes stems from the lack of measures taken to protect the website structure. This allows attackers to carry out XSS attacks.
The vulnerability of Websoft HCM’s HR automation software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
The vulnerability of Websoft HCM’s automation software for HR processes stems from the lack of measures taken to protect the website structure. This allows attackers to carry out XSS attacks.
The vulnerability of Websoft HCM’s HR automation software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
Open Automation Software Platform Authentication Bypass (CVE-2022-26833)
An authentication bypass vulnerability exists in Open Automation Software Platform. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...
HCL Technologies HCL Launch Information Disclosure Vulnerability (CNVD-2022-58411)
HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, India. for handling the most complex deployment processes in DevOps. HCL Technologies HCL Launch suffers from an information disclosure vulnerability that stems from the...
CVE-2022-34151
Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac...
Mautic Cross-Site Scripting Vulnerability
Mautic is a marketing automation software. The software monitors and manages websites, sends emails and manages customer resources. A cross-site scripting vulnerability exists in Mautic versions prior to 4.3.0, which can be exploited by an attacker to execute JavaScript code on the client side...
CVE-2022-22414
IBM Robotic Process Automation 21.0.2 could allow a local user to obtain sensitive web service configuration credentials from system memory. IBM X-Force ID: 223026...
The vulnerability of the REST API interface implementation of the software package for working with IoT devices, known as Open Automation Software, arises from the lack of authentication for a critical function. This allows a perpetrator to execute arbitrary code.
The vulnerability of the REST API interface implementation of the software package for working with IoT devices is related to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted HTTP...