Lucene search
+L

499 matches found

Cvelist
Cvelist
•added 2024/10/23 1:00 p.m.•37 views

CVE-2024-10279 ESAFENET CDG PrintPolicyService.java sql injection

A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. This vulnerability affects unknown code of the file /com/esafenet/servlet/policy/PrintPolicyService.java. The manipulation of the argument policyId leads to sql injection. The attack can be initiated remotely. The...

6.5CVSS0.00599EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/10/23 1:00 p.m.•41 views

CVE-2024-10278 ESAFENET CDG ReUserOrganiseService.java sql injection

A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. This affects an unknown part of the file /com/esafenet/servlet/user/ReUserOrganiseService.java. The manipulation of the argument userId leads to sql injection. It is possible to initiate the attack remotely. The...

6.5CVSS0.00599EPSS
SaveExploits1References4
CVE
CVE
•added 2024/10/23 1:00 p.m.•69 views

CVE-2024-10278

CVE-2024-10278 affects ESAFENET CDG 5, specifically the ReUserOrganiseService.java path (/com/esafenet/servlet/user/ReUserOrganiseService.java). The vulnerability is a SQL injection triggered by manipulating the userId parameter, allowing remote initiation. Multiple sources confirm exploitation/p...

9.8CVSS7AI score0.00599EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2024/10/23 12:15 p.m.•21 views

CVE-2024-10277

A vulnerability was found in ESAFENET CDG 5 and classified as critical. Affected by this issue is some unknown functionality of the file /com/esafenet/servlet/ajax/UsbKeyAjax.java. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has bee...

9.8CVSS0.00599EPSS
SaveExploits1References4
OSV
OSV
•added 2024/10/23 12:15 p.m.•10 views

CVE-2024-10277

A vulnerability was found in ESAFENET CDG 5 and classified as critical. Affected by this issue is some unknown functionality of the file /com/esafenet/servlet/ajax/UsbKeyAjax.java. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has bee...

9.8CVSS5.7AI score0.00599EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/10/23 11:31 a.m.•36 views

CVE-2024-10277 ESAFENET CDG UsbKeyAjax.java sql injection

A vulnerability was found in ESAFENET CDG 5 and classified as critical. Affected by this issue is some unknown functionality of the file /com/esafenet/servlet/ajax/UsbKeyAjax.java. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has bee...

6.5CVSS0.00599EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/10/23 11:31 a.m.•25 views

CVE-2024-10277 ESAFENET CDG UsbKeyAjax.java sql injection

A vulnerability was found in ESAFENET CDG 5 and classified as critical. Affected by this issue is some unknown functionality of the file /com/esafenet/servlet/ajax/UsbKeyAjax.java. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has bee...

6.5CVSS7.1AI score0.00599EPSS
SaveExploits1References4
CVE
CVE
•added 2024/10/23 11:31 a.m.•82 views

CVE-2024-10277

CVE-2024-10277 affects ESAFENET CDG 5, specifically the USBKeyAjax.java component. The vulnerability arises from improper handling of the id parameter, enabling SQL injection. Reported as exploitable remotely and described as critical, with public disclosure of an exploit. Connected documents con...

9.8CVSS6.9AI score0.00599EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/23 12:00 a.m.•0 views

CVE-2024-10278: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. This affects an unknown part of the file /com/esafenet/servlet/user/ReUserOrganiseService.java. The manipulation of the argument userId leads to sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS6.4AI score0.00599EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/10/23 12:00 a.m.•10 views

EsafeNet CDG SQL注入漏洞

EsafeNet CDG is a document security management system from EsafeNet. EsafeNet CDG 5 suffers from a SQL injection vulnerability, which originates from the id parameter of the /com/esafenet/servlet/ajax/UsbKeyAjax.java page contains a SQL injection vulnerability...

9.8CVSS7.9AI score0.00599EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/23 12:00 a.m.•1 views

CVE-2024-10279: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. This vulnerability affects unknown code of the file /com/esafenet/servlet/policy/PrintPolicyService.java. The manipulation of the argument policyId leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS6.4AI score0.00599EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/10/23 12:00 a.m.•14 views

EsafeNet CDG SQL注入漏洞

EsafeNet CDG is a document security management system from EsafeNet. EsafeNet CDG 5 suffers from a SQL injection vulnerability, which originates from a SQL injection vulnerability in the policyId parameter of the /com/esafenet/servlet/policy/PrintPolicyService.java page...

9.8CVSS8AI score0.00599EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/10/23 12:00 a.m.•20 views

PT-2024-16152 · Unknown · Esafenet Cdg 5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG 5 Description: A critical issue was found in ESAFENET CDG 5, affecting some unknown functionality of the file /com/esafenet/servlet/ajax/UsbKeyAjax.java. The manipulation of the id argument leads to SQL injection. This issue can ...

9.8CVSS7AI score0.00599EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/23 12:00 a.m.•0 views

CVE-2024-10277: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in ESAFENET CDG 5 and classified as critical. Affected by this issue is some unknown functionality of the file /com/esafenet/servlet/ajax/UsbKeyAjax.java. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has bee...

9.8CVSS6.4AI score0.00599EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/10/23 12:00 a.m.•10 views

EsafeNet CDG SQL注入漏洞

EsafeNet CDG is a document security management system from EsafeNet. EsafeNet CDG 5 suffers from a SQL injection vulnerability, which originates from the userId parameter of the /com/esafenet/servlet/user/ReUserOrganiseService.java page contains a SQL injection vulnerability...

9.8CVSS7.9AI score0.00599EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/10/23 12:00 a.m.•15 views

PT-2024-16154 · Unknown · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version 5 Description: A critical issue has been identified, affecting the /com/esafenet/servlet/policy/PrintPolicyService.java file. The manipulation of the policyId argument leads to SQL injection. This issue can be exploited...

9.8CVSS7.1AI score0.00599EPSS
SaveExploits1References7
OSV
OSV
•added 2024/10/19 12:15 p.m.•11 views

CVE-2024-10135

A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. This affects the function actionDelNetSecConfig of the file /com/esafenet/servlet/netSec/NetSecConfigService.java. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack...

8.8CVSS5.7AI score0.00572EPSS
SaveExploits1References4
NVD
NVD
•added 2024/10/19 12:15 p.m.•34 views

CVE-2024-10135

A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. This affects the function actionDelNetSecConfig of the file /com/esafenet/servlet/netSec/NetSecConfigService.java. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack...

8.8CVSS0.00572EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/10/19 11:31 a.m.•47 views

CVE-2024-10135 ESAFENET CDG NetSecConfigService.java actionDelNetSecConfig sql injection

A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. This affects the function actionDelNetSecConfig of the file /com/esafenet/servlet/netSec/NetSecConfigService.java. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack...

6.5CVSS0.00572EPSS
SaveExploits1References4
CVE
CVE
•added 2024/10/19 11:31 a.m.•68 views

CVE-2024-10135

The CVE-2024-10135 issue affects ESAFENET CDG 5, specifically the NetSecConfigService.java function actionDelNetSecConfig. The root cause is improper handling/manipulation of the id argument, leading to an SQL injection vulnerability. The vulnerability is exploitable remotely and has public explo...

8.8CVSS7AI score0.00572EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder