Lucene search
+L

434 matches found

Cvelist
Cvelist
added 2025/01/28 9:31 p.m.25 views

CVE-2025-0785 ESAFENET CDG SysConfig.jsp cross site scripting

A vulnerability was found in ESAFENET CDG V5 and classified as problematic. This issue affects some unknown processing of the file /SysConfig.jsp. The manipulation of the argument help leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the publi...

5.3CVSS0.00319EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/01/28 9:31 p.m.8 views

CVE-2025-0785 ESAFENET CDG SysConfig.jsp cross site scripting

A vulnerability was found in ESAFENET CDG V5 and classified as problematic. This issue affects some unknown processing of the file /SysConfig.jsp. The manipulation of the argument help leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the publi...

5.3CVSS3.7AI score0.00319EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/01/28 12:0 a.m.6 views

PT-2025-4046 · Unknown · Esafenet Cdg V5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A critical issue has been found in ESAFENET CDG V5, affecting an unknown function of the file /appDetail.jsp. The manipulation of the flowId argument leads to SQL injection. It is possible to launch the attack...

8.8CVSS6.8AI score0.00399EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2025/01/28 12:0 a.m.4 views

PT-2025-4048 · Unknown · Esafenet Cdg V5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A critical issue affects some unknown functionality of the file /content top.jsp. The manipulation of the id argument leads to SQL injection. The attack may be launched remotely. The exploit has been disclosed to...

8.8CVSS6.9AI score0.00399EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2025/01/28 12:0 a.m.6 views

PT-2025-4051 · Unknown · Esafenet Cdg V5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A critical issue has been found in ESAFENET CDG V5, affecting some unknown processing of the file /sdDoneDetail.jsp. The manipulation of the flowId argument leads to SQL injection. The attack may be initiated...

9.8CVSS6.8AI score0.00513EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2025/01/28 12:0 a.m.12 views

PT-2025-4049 · Unknown · Esafenet Cdg V5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A critical vulnerability has been found in ESAFENET CDG V5, affecting an unknown part of the file /doneDetail.jsp. The manipulation of the flowId argument leads to SQL injection. It is possible to initiate the...

8.8CVSS6.9AI score0.00489EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2025/01/28 12:0 a.m.5 views

EsafeNet CDG 安全漏洞

EsafeNet CDG is a document security management system from China EsafeNet. A security vulnerability exists in EsafeNet CDG version V5, which originates from the parameter curpage in the file /appDetail.jsp that can lead to cross-site scripting...

5.4CVSS4.4AI score0.00295EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/01/28 12:0 a.m.5 views

PT-2025-4045 · Unknown · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version V5 Description: A vulnerability was found in ESAFENET CDG V5, classified as problematic. This issue affects some unknown processing of the file /SysConfig.jsp. The manipulation of the argument help leads to cross-site...

6.1CVSS3.7AI score0.00319EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2025/01/28 12:0 a.m.7 views

EsafeNet CDG 安全漏洞

EsafeNet CDG is a document security management system from EsafeNet. A security vulnerability exists in EsafeNet CDG version V5, which originates from the parameter flowId in the file /doneDetail.jsp that can lead to SQL injection...

8.8CVSS6.8AI score0.00489EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/01/28 12:0 a.m.10 views

PT-2025-4047 · Unknown · Esafenet Cdg V5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A vulnerability was found in an unknown functionality of the file /appDetail.jsp. The manipulation of the curpage argument leads to cross site scripting. The attack can be launched remotely. The vendor was contact...

5.4CVSS3.5AI score0.00295EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2025/01/28 12:0 a.m.9 views

PT-2025-4050 · Unknown · Esafenet Cdg V5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A problematic issue was found in ESAFENET CDG V5, affecting unknown code of the file "doneDetail.jsp". The manipulation of the curpage argument leads to cross site scripting. The attack can be initiated remotely...

6.1CVSS3.6AI score0.00366EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2025/01/28 12:0 a.m.5 views

EsafeNet CDG 安全漏洞

EsafeNet CDG is a document security management system from EsafeNet. A security vulnerability exists in EsafeNet CDG version V5, which originates from the parameter flowId in the file /appDetail.jsp that can lead to SQL injection...

8.8CVSS6.8AI score0.00399EPSS
SaveExploits0References4
OSV
OSV
added 2024/11/01 4:15 p.m.8 views

CVE-2024-10660

A vulnerability, which was classified as critical, was found in ESAFENET CDG 5. This affects the function deleteHook of the file /com/esafenet/servlet/policy/HookService.java. The manipulation of the argument hookId leads to sql injection. It is possible to initiate the attack remotely. The explo...

9.8CVSS5.7AI score0.05006EPSS
SaveExploits1References4
NVD
NVD
added 2024/11/01 4:15 p.m.13 views

CVE-2024-10660

A vulnerability, which was classified as critical, was found in ESAFENET CDG 5. This affects the function deleteHook of the file /com/esafenet/servlet/policy/HookService.java. The manipulation of the argument hookId leads to sql injection. It is possible to initiate the attack remotely. The explo...

9.8CVSS0.05006EPSS
SaveExploits1References4
NVD
NVD
added 2024/11/01 4:15 p.m.12 views

CVE-2024-10659

A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5. Affected by this issue is the function delSystemEncryptPolicy of the file /com/esafenet/servlet/document/CDGAuthoriseTempletService.java. The manipulation of the argument id leads to sql injection. The attack may...

9.8CVSS0.0055EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/11/01 3:31 p.m.24 views

CVE-2024-10660 ESAFENET CDG HookService.java deleteHook sql injection

A vulnerability, which was classified as critical, was found in ESAFENET CDG 5. This affects the function deleteHook of the file /com/esafenet/servlet/policy/HookService.java. The manipulation of the argument hookId leads to sql injection. It is possible to initiate the attack remotely. The explo...

6.5CVSS0.05006EPSS
SaveExploits1References4
CVE
CVE
added 2024/11/01 3:31 p.m.72 views

CVE-2024-10660

CVE-2024-10660 affects ESAFENET CDG 5, specifically the deleteHook function in HookService.java. The vulnerability arises from improper handling of the hookId argument, enabling SQL injection. The issue can be exploited remotely, and public disclosures exist. Supported details from connected docs...

9.8CVSS7AI score0.05006EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/01 3:31 p.m.14 views

CVE-2024-10659 ESAFENET CDG CDGAuthoriseTempletService.java delSystemEncryptPolicy sql injection

A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5. Affected by this issue is the function delSystemEncryptPolicy of the file /com/esafenet/servlet/document/CDGAuthoriseTempletService.java. The manipulation of the argument id leads to sql injection. The attack may...

6.5CVSS6.8AI score0.0055EPSS
SaveExploits1References4
CVE
CVE
added 2024/11/01 3:31 p.m.51 views

CVE-2024-10659

CVE-2024-10659 affects ESAFENET CDG 5. The vulnerability lies in the delSystemEncryptPolicy function of /com/esafenet/servlet/document/CDGAuthoriseTempletService.java, where manipulation of the id argument enables SQL injection. The issue can be exploited remotely and, per the initial records, th...

9.8CVSS7AI score0.0055EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2024/11/01 3:31 p.m.24 views

CVE-2024-10659 ESAFENET CDG CDGAuthoriseTempletService.java delSystemEncryptPolicy sql injection

A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5. Affected by this issue is the function delSystemEncryptPolicy of the file /com/esafenet/servlet/document/CDGAuthoriseTempletService.java. The manipulation of the argument id leads to sql injection. The attack may...

6.5CVSS0.0055EPSS
SaveExploits1References4
Rows per page
Query Builder