Lucene search
+L

6102 matches found

Positive Technologies
Positive Technologies
•added 2025/04/16 12:00 a.m.•9 views

PT-2025-16846

Name of the Vulnerable Software and Affected Versions TeleControl Server Basic versions prior to 3.1.2.2 Description The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

9CVSS7.9AI score0.0082EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/04/16 12:00 a.m.•11 views

PT-2025-16844

Name of the Vulnerable Software and Affected Versions TeleControl Server Basic versions prior to 3.1.2.2 Description A SQL injection vulnerability has been identified, allowing an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, an...

9CVSS7.6AI score0.0082EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/04/16 12:00 a.m.•10 views

PT-2025-16860

Name of the Vulnerable Software and Affected Versions TeleControl Server Basic versions prior to 3.1.2.2 Description The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

9CVSS7.9AI score0.00665EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/04/16 12:00 a.m.•7 views

PT-2025-16631

Name of the Vulnerable Software and Affected Versions WP Map Plugins Basic Interactive World Map versions n/a through 2.7 Description The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations For versions n/a through 2.7, update to a...

4.3CVSS5.7AI score0.00209EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/16 12:00 a.m.•6 views

CVE-2025-31351: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'CreateProject' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and...

8.8CVSS6.9AI score0.0088EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•24 views

Siemens TeleControl Server has a basic SQL injection vulnerability

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method LockSmtpSettings, which can be exploited by an attacker to bypass...

8.8CVSS8.4AI score0.00714EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/04/16 12:00 a.m.•20 views

PT-2025-16849 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

9CVSS7.9AI score0.00714EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•25 views

Veritas Data Insight security vulnerabilities

Veritas Data Insight is a solution from Veritas that classifies, contextualizes, and controls unstructured data. A security vulnerability exists in Veritas Data Insight versions prior to 7.1.2 that stems from the possibility of sending plaintext credentials when configured to use HTTP basic...

4.7CVSS5.8AI score0.0014EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/16 12:00 a.m.•6 views

CVE-2025-32822: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'DeleteProject' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and...

8.8CVSS7.7AI score0.0082EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•23 views

Siemens TeleControl Server has a basic SQL injection vulnerability

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method GetGateways, which can be exploited by an attacker to bypass...

8.8CVSS8.4AI score0.0082EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/04/16 12:00 a.m.•13 views

PT-2025-16840

Name of the Vulnerable Software and Affected Versions TeleControl Server Basic versions prior to 3.1.2.2 Description The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

9CVSS7.9AI score0.0082EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/04/16 12:00 a.m.•24 views

PT-2025-16865 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

9CVSS7.9AI score0.00714EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•24 views

Siemens TeleControl Server has a basic SQL injection vulnerability

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from the internally used 'UpdateProject' method. An attacker could use this vulnerability to bypass authorization...

8.8CVSS7.7AI score0.0082EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/04/16 12:00 a.m.•25 views

PT-2025-16868 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

9CVSS7.9AI score0.00714EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2025/04/16 12:00 a.m.•24 views

PT-2025-16839 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

9CVSS7.9AI score0.0082EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/04/16 12:00 a.m.•28 views

PT-2025-16873 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

9CVSS7.9AI score0.00714EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/04/16 12:00 a.m.•38 views

PT-2025-16832 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

9CVSS7.9AI score0.0082EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/04/16 12:00 a.m.•26 views

PT-2025-16824 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

9CVSS7.9AI score0.0082EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•23 views

Siemens TeleControl Server has a basic SQL injection vulnerability

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an SQL injection in the MigrateDatabase method, which can be exploited by an attacker to bypass authorizatio...

8.8CVSS8.4AI score0.00714EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•29 views

Siemens TeleControl Server has a basic SQL injection vulnerability

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an SQL injection in the GetLogs method, which can be exploited by an attacker to bypass authorization contro...

8.8CVSS8.4AI score0.00714EPSS
SaveExploits0References2
Rows per page
Query Builder