CVE-2023-2044

CVE-2023-2044 affects Control iD iDSecure 4.7.29.1, specifically the Dispositivos Page component. The vulnerability stems from manipulation of the IP-DNS parameter, leading to cross-site scripting that can be triggered remotely. Public details are provided by multiple sources (e.g., Red Hat, PT-S...

CVE-2023-2043

CVE-2023-2043 affects Control iD RHiD 23.3.19.0, specifically the Edit Handler’s file path /v2/customerdb/operator.svc/a. The vulnerability arises from manipulating the email argument, leading to SQL injection, with remote attack possible. Public details confirm the issue but do not provide a fix...

CVE-2023-2043 Control iD RHiD Edit a sql injection

A vulnerability, which was classified as problematic, was found in Control iD RHiD 23.3.19.0. This affects an unknown part of the file /v2/customerdb/operator.svc/a of the component Edit Handler. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack...

Control iD iDSecure SQL注入漏洞

Control iD iDSecure is an ID security program from Control iD. An SQL injection vulnerability exists in Control iD iDSecure version 23.3.19.0, which stems from a problem with the file /v2/customerdb/operator.svc/a, where manipulation of email can result in sql injection...

Control iD iDSecure 跨站脚本漏洞

Control iD iDSecure is an ID security software from Control iD. A cross-site scripting vulnerability exists in Control iD iDSecure version 4.7.29.1, which stems from a problem with the component Dispositivos Page, where manipulation of the parameter IP-DNS can lead to cross-site scripting...

CVE-2023-0125

A vulnerability was found in Control iD Gerencia Web 1.30. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Web Interface. The manipulation of the argument Nome leads to cross site scripting. The attack can be launched remotely. The...

Cross site scripting

A vulnerability was found in Control iD Gerencia Web 1.30. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Web Interface. The manipulation of the argument Nome leads to cross site scripting. The attack can be launched remotely. The...

CVE-2023-0125 Control iD Gerencia Web Web Interface cross site scripting

A vulnerability was found in Control iD Gerencia Web 1.30. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Web Interface. The manipulation of the argument Nome leads to cross site scripting. The attack can be launched remotely. The...

CVE-2023-0125

The CVE-2023-0125 entry relates to Control iD Gerencia Web 1.30, where the Web Interface’s Nome parameter allows cross-site scripting. The vulnerability appears in the Web Interface component and can be triggered remotely, with multiple sources confirming the issue and the exploit being publicly ...

Policy Compliance Library Updates, December 2019

Qualys’ library of built-in policies makes it easy to comply with the security standards and regulations that are most commonly used and adhered to. Qualys provides a wide range of policies, including many that have been certified by CIS as well as the ones based on security guidelines from OS an...