Lucene search
+L

513 matches found

Cvelist
Cvelist
•added 2024/10/31 9:00 p.m.•50 views

CVE-2024-10596 ESAFENET CDG EncryptPolicyTypeService.java delEntryptPolicySort sql injection

A vulnerability was found in ESAFENET CDG 5. It has been rated as critical. Affected by this issue is the function delEntryptPolicySort of the file /com/esafenet/servlet/system/EncryptPolicyTypeService.java. The manipulation of the argument id leads to sql injection. The attack may be launched...

6.5CVSS0.00572EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/10/31 8:31 p.m.•20 views

CVE-2024-10595 ESAFENET CDG PublicDocInfoAjax.java delDifferCourseList sql injection

A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. Affected by this vulnerability is the function delFile/delDifferCourseList of the file /com/esafenet/servlet/ajax/PublicDocInfoAjax.java. The manipulation leads to sql injection. The attack can be launched remotely. Th...

6.5CVSS9.7AI score0.0056EPSS
SaveExploits1References4
CVE
CVE
•added 2024/10/31 8:31 p.m.•62 views

CVE-2024-10595

CVE-2024-10595 affects ESAFENET CDG 5. The vulnerability is in the function delFile/delDifferCourseList of /com/esafenet/servlet/ajax/PublicDocInfoAjax.java, leading to SQL injection. It can be exploited remotely; the exploit has been disclosed publicly. Multiple sources describe this as a critic...

9.8CVSS7AI score0.0056EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2024/10/31 8:31 p.m.•18 views

CVE-2024-10594 ESAFENET CDG FileDirectoryService.java docHistory sql injection

A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. Affected is the function docHistory of the file /com/esafenet/servlet/fileManagement/FileDirectoryService.java. The manipulation of the argument fileId leads to sql injection. It is possible to launch the attack...

6.5CVSS7.2AI score0.00572EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/10/31 8:31 p.m.•44 views

CVE-2024-10594 ESAFENET CDG FileDirectoryService.java docHistory sql injection

A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. Affected is the function docHistory of the file /com/esafenet/servlet/fileManagement/FileDirectoryService.java. The manipulation of the argument fileId leads to sql injection. It is possible to launch the attack...

6.5CVSS0.00572EPSS
SaveExploits1References4
CVE
CVE
•added 2024/10/31 8:31 p.m.•76 views

CVE-2024-10594

ESAFENET CDG 5 vulnerability CVE-2024-10594 affects the docHistory function in /com/esafenet/servlet/fileManagement/FileDirectoryService.java. Manipulation of the fileId parameter results in SQL injection, enabling remote exploitation. Public exploit details exist per disclosures, and vendor resp...

8.8CVSS7AI score0.00572EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
•added 2024/10/31 12:00 a.m.•22 views

ESAFENET CDG SQL注入漏洞

EsafeNet CDG is a document security management system from EsafeNet. A SQL injection vulnerability exists in ESAFENET CDG, which stems from an incorrect manipulation of the parameter id that can lead to SQL injection...

9.8CVSS7AI score0.00599EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/10/31 12:00 a.m.•16 views

EsafeNet CDG SQL注入漏洞

EsafeNet CDG is a document security management system from EsafeNet China. A SQL injection vulnerability exists in ESAFENET CDG. An attacker can exploit this vulnerability to perform SQL injection attacks...

9.8CVSS7AI score0.0056EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/10/31 12:00 a.m.•31 views

PT-2024-16394 · Safenet · Esafenet Cdg 5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG 5 Description: A critical vulnerability has been found in ESAFENET CDG 5, affecting the function delPolicyAction of the file /com/esafenet/servlet/system/PolicyActionService.java. The manipulation of the argument id leads to SQL...

9.8CVSS7.4AI score0.00599EPSS
SaveExploits1References15
Positive Technologies
Positive Technologies
•added 2024/10/31 12:00 a.m.•17 views

PT-2024-16392 · Safenet · Esafenet Cdg 5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG 5 Description: A critical vulnerability was found in ESAFENET CDG 5, affecting the function delFile/delDifferCourseList of the file /com/esafenet/servlet/ajax/PublicDocInfoAjax.java. This vulnerability leads to SQL injection and...

9.8CVSS7.1AI score0.0056EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
•added 2024/10/31 12:00 a.m.•18 views

PT-2024-16391 · Safenet · Esafenet Cdg 5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG 5 Description: A critical issue has been found in ESAFENET CDG 5, affecting the docHistory function of the file /com/esafenet/servlet/fileManagement/FileDirectoryService.java. The manipulation of the fileId argument leads to SQL...

8.8CVSS7.2AI score0.00572EPSS
SaveExploits1References15
Positive Technologies
Positive Technologies
•added 2024/10/31 12:00 a.m.•18 views

PT-2024-16408 · Safenet · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version 5 Description: A critical issue has been found in ESAFENET CDG, affecting the removeHookInvalidCourse function in the file /com/esafenet/servlet/system/HookInvalidCourseService.java. The manipulation of the id argument...

8.8CVSS7.1AI score0.00572EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2024/10/31 12:00 a.m.•14 views

EsafeNet CDG SQL注入漏洞

EsafeNet CDG is a document security management system from EsafeNet. EsafeNet CDG suffers from a SQL injection vulnerability, which originates from the parameter id of the file /com/esafenet/servlet/system/EncryptPolicyTypeService.java that can lead to SQL injection...

8.8CVSS7AI score0.00572EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/10/31 12:00 a.m.•21 views

PT-2024-16393 · Safenet · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG 5 Description: A critical issue was found in ESAFENET CDG, affecting the function delEntryptPolicySort of the file /com/esafenet/servlet/system/EncryptPolicyTypeService.java. The manipulation of the argument id leads to SQL...

8.8CVSS7.3AI score0.00572EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2024/10/31 12:00 a.m.•14 views

EsafeNet CDG SQL注入漏洞

EsafeNet CDG is a document security management system from EsafeNet. A SQL injection vulnerability exists in EsafeNet CDG, which stems from an incorrect manipulation of the parameter fileId that can lead to sql injection...

8.8CVSS7.2AI score0.00572EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/10/31 12:00 a.m.•26 views

PT-2024-16409 · Safenet · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version 5 Description: A critical issue has been identified, affecting the function delSystemEncryptPolicy in the file /com/esafenet/servlet/system/SystemEncryptPolicyService.java. The manipulation of the argument id leads to SQL...

8.8CVSS7.2AI score0.00572EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/31 12:00 a.m.•7 views

CVE-2024-10596: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in ESAFENET CDG 5. It has been rated as critical. Affected by this issue is the function delEntryptPolicySort of the file /com/esafenet/servlet/system/EncryptPolicyTypeService.java. The manipulation of the argument id leads to sql injection. The attack may be launched...

8.8CVSS6.4AI score0.00572EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/31 12:00 a.m.•6 views

CVE-2024-10597: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in ESAFENET CDG 5. This affects the function delPolicyAction of the file /com/esafenet/servlet/system/PolicyActionService.java. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS6.4AI score0.00599EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/31 12:00 a.m.•6 views

CVE-2024-10594: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. Affected is the function docHistory of the file /com/esafenet/servlet/fileManagement/FileDirectoryService.java. The manipulation of the argument fileId leads to sql injection. It is possible to launch the attack...

8.8CVSS6.4AI score0.00572EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/31 12:00 a.m.•5 views

CVE-2024-10595: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. Affected by this vulnerability is the function delFile/delDifferCourseList of the file /com/esafenet/servlet/ajax/PublicDocInfoAjax.java. The manipulation leads to sql injection. The attack can be launched remotely. Th...

9.8CVSS6.3AI score0.0056EPSS
SaveExploits1References1
Rows per page
Query Builder