Lucene search
+L

21139 matches found

Cvelist
Cvelist
•added 2025/05/02 10:59 a.m.•39 views

CVE-2025-1301 Reflected XSS in Yordam Informatics' Library Automation System

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Yordam Informatics Library Automation System allows Reflected XSS. This issue affects Library Automation System: before 21.6...

6.1CVSS0.00242EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/05/02 10:59 a.m.•21 views

CVE-2025-1301 Reflected XSS in Yordam Informatics' Library Automation System

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Yordam Informatics Library Automation System allows Reflected XSS. This issue affects Library Automation System: before 21.6...

6.1CVSS5.4AI score0.00242EPSS
SaveExploits0References2
The Hacker News
The Hacker News
•added 2025/05/02 10:30 a.m.•34 views

How to Automate CVE and Vulnerability Advisory Response with Tines

Run by the team at workflow orchestration and AI platform Tines, the Tines library features pre-built workflows shared by security practitioners from across the community - all free to import and deploy through the platform's Community Edition. A recent standout is a workflow that automates...

7.5AI score
SaveExploits0
OSV
OSV
•added 2025/05/02 9:15 a.m.•18 views

CVE-2025-2812

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mydata Informatics Ticket Sales Automation allows Blind SQL Injection.This issue affects Ticket Sales Automation: before 03.04.2025 DD.MM.YYYY...

9.8CVSS5.8AI score0.00488EPSS
SaveExploits0References2
NVD
NVD
•added 2025/05/02 9:15 a.m.•36 views

CVE-2025-2812

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mydata Informatics Ticket Sales Automation allows Blind SQL Injection. This issue affects Ticket Sales Automation: before 03.04.2025 DD.MM.YYYY...

9.8CVSS0.00488EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2025/05/02 9:15 a.m.•20 views

CVE-2025-2812

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mydata Informatics Ticket Sales Automation allows Blind SQL Injection. This issue affects Ticket Sales Automation: before 03.04.2025 DD.MM.YYYY...

9.8CVSS5.6AI score0.00488EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/05/02 8:24 a.m.•47 views

CVE-2025-2812 SQLi in Mydata Informatics' Ticket Sales Automation

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mydata Informatics Ticket Sales Automation allows Blind SQL Injection. This issue affects Ticket Sales Automation: before 03.04.2025 DD.MM.YYYY...

9.8CVSS0.00488EPSS
SaveExploits0References3
CVE
CVE
•added 2025/05/02 8:24 a.m.•86 views

CVE-2025-2812

CVE-2025-2812 concerns an SQL Injection in Mydata Informatics’ Ticket Sales Automation. The vulnerability arises from improper neutralization of SQL elements, enabling blind SQL injection in the application (Ticket Sales Automation) prior to 03.04.2025. Documented impact is high: potential data d...

9.8CVSS5.6AI score0.00488EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2025/05/02 8:24 a.m.•21 views

CVE-2025-2812 SQLi in Mydata Informatics' Ticket Sales Automation

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mydata Informatics Ticket Sales Automation allows Blind SQL Injection. This issue affects Ticket Sales Automation: before 03.04.2025 DD.MM.YYYY...

9.8CVSS5.6AI score0.00488EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
•added 2025/05/02 8:09 a.m.•38 views

Security Bulletin: Multiple vulnerabilities in Java affect IBM Business Automation Workflow - October 2024 CPU

Summary IBM Business Automation Workflow traditional includes IBM Java 8. Information about security vulnerabilities in these Java runtumes have been published. Vulnerability Details CVEID:CVE-2024-21235 DESCRIPTION: Vulnerability in Java SE component: Hotspot. Difficult to exploit vulnerability...

5.3CVSS7.8AI score0.01149EPSS
SaveExploits0Affected Software2
Positive Technologies
Positive Technologies
•added 2025/05/02 12:00 a.m.•23 views

PT-2025-18769

Name of the Vulnerable Software and Affected Versions Mydata Informatics Ticket Sales Automation versions prior to 03.04.2025 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for Blind SQL...

9.8CVSS5.7AI score0.00488EPSS
SaveExploits0References15
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/02 12:00 a.m.•3 views

CVE-2025-2812: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mydata Informatics Ticket Sales Automation allows Blind SQL Injection. This issue affects Ticket Sales Automation: before 03.04.2025 DD.MM.YYYY...

9.8CVSS5.8AI score0.00488EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/02 12:00 a.m.•1 views

CVE-2025-1301: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Yordam Informatics Library Automation System allows Reflected XSS. This issue affects Library Automation System: before 21.6...

6.1CVSS5.8AI score0.00242EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/05/02 12:00 a.m.•20 views

PT-2025-18771 · Yordam Informatics · Yordam Informatics Library Automation System

Name of the Vulnerable Software and Affected Versions: Yordam Informatics Library Automation System versions prior to 21.6 Description: The issue affects the Library Automation System, allowing for Reflected XSS due to improper neutralization of input during web page generation. Recommendations:...

7.4CVSS5.8AI score0.00242EPSS
SaveExploits0References11
CNNVD
CNNVD
•added 2025/05/02 12:00 a.m.•20 views

Mydata Ticket Sales Automation SQL注入漏洞

Mydata Ticket Sales Automation is a ticket sales automation system from Mydata. A SQL injection vulnerability exists in Mydata Ticket Sales Automation versions prior to 03.04.2025, which stems from improperly neutralized SQL commands and could lead to blind SQL injection...

9.8CVSS7.8AI score0.00488EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/01 11:12 p.m.•17 views

CVE-2025-46552

KHC-INVITATION-AUTOMATION is a GitHub automation script that automatically invites followers of a bot account to join your organization. In some commits on version 1.2, a vulnerability was identified where user data, including email addresses and Discord usernames, were exposed in API responses...

6.3CVSS6.4AI score0.00377EPSS
SaveExploits0References1
Qualys Blog
Qualys Blog
•added 2025/05/01 7:54 p.m.•19 views

Remediate Risk Without the Roadblocks: Automate with Qualys Flow

Remediation and Workflow Automation, Redefined Still relying on manual steps in your cloud security? It’s outdated, and it’s risky. Manual processes lead to slower threat detection, human errors, increased operational costs, and compliance delays. This isn’t just inefficient—it’s a liability. Ent...

7.2AI score
SaveExploits0
OSV
OSV
•added 2025/04/30 1:15 p.m.•14 views

CVE-2025-3395

Incorrect Permission Assignment for Critical Resource, Cleartext Storage of Sensitive Information vulnerability in ABB Automation Builder.This issue affects Automation Builder: through 2.8.0...

5.5CVSS5.8AI score0.00099EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/30 1:15 p.m.•24 views

CVE-2025-3395

Incorrect Permission Assignment for Critical Resource, Cleartext Storage of Sensitive Information vulnerability in ABB Automation Builder.This issue affects Automation Builder: through 2.8.0...

8.4CVSS0.00099EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/30 1:15 p.m.•28 views

CVE-2025-3394

Incorrect Permission Assignment for Critical Resource vulnerability in ABB Automation Builder.This issue affects Automation Builder: through 2.8.0...

8.5CVSS0.00151EPSS
SaveExploits0References1
Rows per page
Query Builder