Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

200 matches found

CNVD
CNVD•added 2022/01/12 12:00 a.m.•53 views

Siemens COMOS Web Component SQL Injection Vulnerability

COMOS is a unified data platform for collaborative plant design, operations and management that supports the collection, processing, storage and distribution of information throughout the plant lifecycle.A SQL injection vulnerability exists in the Siemens COMOS Web component, which can be exploit...

8.8CVSS4.4AI score0.00816EPSS
SaveExploits0References1
attackerkb
attackerkb•added 2022/01/11 12:15 p.m.•8 views

CVE-2021-37196

A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions = V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS unpacks specially crafted archi...

6.5CVSS6.5AI score0.00782EPSS
SaveExploits0References2
OSV
OSV•added 2022/01/11 12:15 p.m.•13 views

CVE-2021-37197

A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS is vulnerable to SQL injections...

8.8CVSS7.5AI score0.00816EPSS
SaveExploits0References1
OSV
OSV•added 2022/01/11 12:15 p.m.•12 views

CVE-2021-37196

A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions = V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS unpacks specially crafted archi...

6.5CVSS5.7AI score0.00782EPSS
SaveExploits0References1
OSV
OSV•added 2022/01/11 12:15 p.m.•10 views

CVE-2021-37198

A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS uses a flawed implementation of...

8.8CVSS5.6AI score0.00361EPSS
SaveExploits0References1
NVD
NVD•added 2022/01/11 12:15 p.m.•32 views

CVE-2021-37195

A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS accepts arbitrary code as...

6.1CVSS0.00509EPSS
SaveExploits0References1
NVD
NVD•added 2022/01/11 12:15 p.m.•24 views

CVE-2021-37198

A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS uses a flawed implementation of...

8.8CVSS0.00361EPSS
SaveExploits0References1
NVD
NVD•added 2022/01/11 12:15 p.m.•32 views

CVE-2021-37196

A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions = V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS unpacks specially crafted archi...

6.5CVSS0.00782EPSS
SaveExploits0References1
NVD
NVD•added 2022/01/11 12:15 p.m.•27 views

CVE-2021-37197

A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS is vulnerable to SQL injections...

8.8CVSS0.00816EPSS
SaveExploits0References1
OSV
OSV•added 2022/01/11 12:15 p.m.•12 views

CVE-2021-37195

A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS accepts arbitrary code as...

6.1CVSS5.9AI score0.00509EPSS
SaveExploits0References1
Prion
Prion•added 2022/01/11 12:15 p.m.•35 views

Design/Logic Flaw

A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions = V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS unpacks specially crafted archi...

3.5CVSS6.8AI score0.00782EPSS
SaveExploits0References1Affected Software1
Prion
Prion•added 2022/01/11 12:15 p.m.•25 views

Cross site request forgery (csrf)

A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS uses a flawed implementation of...

5.1CVSS8.4AI score0.00361EPSS
SaveExploits0References1Affected Software1
Prion
Prion•added 2022/01/11 12:15 p.m.•31 views

Code injection

A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS accepts arbitrary code as...

2.6CVSS7AI score0.00509EPSS
SaveExploits0References1Affected Software1
Prion
Prion•added 2022/01/11 12:15 p.m.•32 views

Sql injection

A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS is vulnerable to SQL injections...

6CVSS8.8AI score0.00816EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment•added 2022/01/11 11:27 a.m.•9 views

CVE-2021-37198

A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS uses a flawed implementation of...

8.6AI score0.00361EPSS
SaveExploits0References1
CVE
CVE•added 2022/01/11 11:27 a.m.•119 views

CVE-2021-37198

Siemens COMOS Web Component CSRF vulnerability (CVE-2021-37198) affects COMOS Web when web components are used: v10.2 all versions; v10.3 all versions before 10.3.3.3; v10.4 all versions before 10.4.1. The issue stems from a flawed CSRF prevention implementation, enabling cross-site request forge...

8.8CVSS8.4AI score0.00361EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist•added 2022/01/11 11:27 a.m.•40 views

CVE-2021-37198

A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS uses a flawed implementation of...

8.6AI score0.00361EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2022/01/11 11:27 a.m.•31 views

CVE-2021-37197

A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS is vulnerable to SQL injections...

9AI score0.00816EPSS
SaveExploits0References1
CVE
CVE•added 2022/01/11 11:27 a.m.•99 views

CVE-2021-37197

Siemens COMOS Web component is affected by SQL injection (CVE-2021-37197). Affected: COMOS V10.2 (all versions when web components are used), V10.3 (all versions before 10.3.3.3 when web components are used), V10.4 (all versions before 10.4.1 when web components are used). Root cause: SQL injecti...

8.8CVSS8.8AI score0.00816EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist•added 2022/01/11 11:27 a.m.•40 views

CVE-2021-37196

A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions = V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS unpacks specially crafted archi...

6.4AI score0.00782EPSS
SaveExploits0References1
Rows per page
Query Builder