SQL Injection Vulnerability in FE Business Assistance Platform (CNVD-2020-69477)

Zhuhai Feiqi Software Co., Ltd "Feiqi Software", founded in 1998 formerly Zhuhai UFIDA Software Co., Ltd. was founded in 1998, is a software vendor focusing on the research, development and service of industry collaboration and integration platform. A SQL injection vulnerability exists in FE...

Cisco IoT Field Network Director SQL Injection Vulnerability

Cisco IoT Field Network Director IoT-FND is an end-to-end IoT management system from Cisco USA. The system features device management, asset tracking and smart metering. Cisco IoT Field Network Director suffers from a SQL injection vulnerability that results from insufficient input validation of...

Vmware VMWare SD-WAN Orchestrator SQL注入漏洞

VMware VMWare SD-WAN Orchestrator is a software for orchestrating network data flows in a software-defined network architecture. A SQL injection vulnerability exists in VMware VMWare SD-WAN Orchestrator, which can be exploited by a remote attacker to submit a special SQL request to manipulate a...

Input validation

A vulnerability in the REST API of Cisco IoT Field Network Director FND could allow an authenticated, remote attacker to gain access to the back-end database of an affected device. The vulnerability is due to insufficient input validation of REST API requests that are made to an affected device. ...

CVE-2020-26075 Cisco IoT Field Network REST API Insufficient Input Validation Vulnerability

A vulnerability in the REST API of Cisco IoT Field Network Director FND could allow an authenticated, remote attacker to gain access to the back-end database of an affected device. The vulnerability is due to insufficient input validation of REST API requests that are made to an affected device. ...

Cisco IoT Field Network REST API Insufficient Input Validation Vulnerability

A vulnerability in the REST API of Cisco IoT Field Network Director FND could allow an authenticated, remote attacker to gain access to the back-end database of an affected device. The vulnerability is due to insufficient input validation of REST API requests that are made to an affected device. ...

PT-2020-4910

Name of the Vulnerable Software and Affected Versions: Cisco IoT Field Network Director affected versions not specified Description: A vulnerability in the REST API of Cisco IoT Field Network Director could allow an unauthenticated, remote attacker to access the back-end database of an affected...

PT-2020-4952

Name of the Vulnerable Software and Affected Versions: Cisco IoT Field Network Director FND affected versions not specified Description: A vulnerability in the REST API of Cisco IoT Field Network Director could allow an authenticated, remote attacker to gain access to the back-end database of an...

Cisco IoT Field Network Director SQL注入漏洞

Cisco IoT Field Network Director IoT-FND is an end-to-end IoT management system from Cisco USA. The system features device management, asset tracking and smart metering. Cisco IoT Field Network Director suffers from a SQL injection vulnerability that results from insufficient input validation of...

CVE-2020-26075: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability in the REST API of Cisco IoT Field Network Director FND could allow an authenticated, remote attacker to gain access to the back-end database of an affected device. The vulnerability is due to insufficient input validation of REST API requests that are made to an affected device. ...

CVE-2020-3531: Missing Authentication for Critical Function

A vulnerability in the REST API of Cisco IoT Field Network Director FND could allow an unauthenticated, remote attacker to access the back-end database of an affected system. The vulnerability exists because the affected software does not properly authenticate REST API calls. An attacker could...

PT-2020-18188

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator Standard Edition versions 5.2.0.0 through 5.2.6.5 IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0 through 6.0.3.2 Description The issue allows a remote attacker to send specially crafted SQL statements...

SQL Injection Vulnerability in Website Building System of Nantong Dot Cool Network Technology Co.

Nantong Dot Cool Network Technology Co., Ltd. is a company that provides perfect industry website construction solutions for group enterprises and listed companies. There is a SQL injection vulnerability in the website building system of Nantong Dot Cool Network Technology Co., Ltd, which can be...

SQL Injection Vulnerability in Waychar Enrollment System's Password Retrieval Function

Waychar Registration System is a free race registration system. A SQL injection vulnerability exists in the retrieve password function of the waychar registration system, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in Shield Spirit Commodity Promotion System Frontend us***.php Page

Shield Spirit commodity promotion system can be applied to multiple types of public number, personal or business subscription number and service number can be used, easy to docking all kinds of public number, through the WeChat public number of the relevant interfaces configured to come into effe...

SQL Injection Vulnerability in Shield Spirit Commodity Promotion System Frontend ad***_in***.php Page

Shield Spirit commodity promotion system can be applied to multiple types of public number, personal or business subscription number and service number can be used, easy to docking all kinds of public number, through the WeChat public number of the relevant interfaces configured to come into effe...

SQL injection vulnerability in ad***_ed***.php file of Miku CMS movie and TV system background

Miku CMS Movie & TV System is a movie & TV management system designed for different needs of webmasters. A SQL injection vulnerability exists in the aded.php file in the background of Miku CMS. Attackers can use the vulnerability to obtain sensitive information in the database...

CVE-2020-26805: Improper Neutralization of Special Elements used in an SQL Command

In Sentrifugo 3.2, admin can edit employee's informations via this endpoint -- /sentrifugo/index.php/empadditionaldetails/edit/userid/2. In this POST request, "employeeNumId" parameter is affected by SQLi vulnerability. Attacker can inject SQL commands into query, read data from database or write...

openGauss: Setting user for host Entries in the pg_hba.conf File

If user is set to all for host entries, any users are allowed to access the database. You are advised to set user for host entries to the user who needs to connect to the database. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and ar...

Moderate: Red Hat Security Advisory: unixODBC security update

An update for unixODBC is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...