Lucene search
+L

8632 matches found

BDU FSTEC
BDU FSTEC
added 2025/04/23 12:00 a.m.12 views

The vulnerability of the UpdateBufferingSettings method in the software for managing and monitoring removed objects in telemetry and telemechanics systems, such as the TeleControl Server Basic, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the UpdateBufferingSettings method in software for managing and monitoring removed objects in telemetry and telemechanics systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise th...

9CVSS6.7AI score0.00806EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:00 a.m.11 views

The vulnerability of the UpdateSmtpSettings method in the software for managing and monitoring deleted objects in telemetry and telemechanics systems, allowing a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the UpdateSmtpSettings method in software for managing and monitoring deleted objects in telemetry and telemechanics systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the...

9CVSS6.7AI score0.00806EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:00 a.m.12 views

The vulnerability of the CreateTrace method in the software for managing and monitoring deleted objects in telemetry and telemechanics systems, allowing a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the CreateTrace method in software for managing and monitoring deleted objects in telemetry and telemechanics systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality,...

10CVSS7.8AI score0.0099EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:00 a.m.12 views

The vulnerability of the UpdateConnectionVariables method in the software for managing and monitoring deleted objects in telemetry and telemechanics systems, allowing a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the UpdateConnectionVariables method in software for managing and monitoring deleted objects in telemetry and telemechanics systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the...

9CVSS6.7AI score0.00806EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:00 a.m.14 views

The vulnerability of the software for managing and monitoring remote devices in telemetry and telemechanics systems, related to the lack of measures taken to protect the SQL query structure, allows a perpetrator to execute arbitrary SQL queries.

The vulnerability of software for managing and monitoring remote devices in telemetry and telemechanics systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

9CVSS6AI score0.00751EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:00 a.m.21 views

The vulnerability of the software for managing and monitoring remote devices in telemetry and telemechanics systems, related to the lack of measures taken to protect the SQL query structure, allows a perpetrator to execute arbitrary SQL queries.

The vulnerability of software for managing and monitoring remote devices in telemetry and telemechanics systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

9CVSS6AI score0.00751EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:00 a.m.29 views

The vulnerability of the software for managing and monitoring remote devices in telemetry and telemechanics systems, related to the lack of measures taken to protect the SQL query structure, allows a perpetrator to execute arbitrary SQL queries.

The vulnerability of software for managing and monitoring remote devices in telemetry and telemechanics systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

9CVSS6AI score0.00751EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:00 a.m.11 views

The vulnerability of the VerifyUser method in the software for managing and monitoring deleted objects in telemetry and telemechanics systems of the TeleControl Server Basic allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the VerifyUser method in software for managing and monitoring deleted objects in telemetry and telemechanics systems related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality,...

10CVSS7.9AI score0.00982EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2025/04/21 12:00 a.m.7 views

VirtueMart 安全漏洞

VirtueMart is an open source e-commerce application from VirtueMart, Inc. designed to be used as an extension to Mambo or Joomla! A security vulnerability exists in VirtueMart versions 1.0.0 through 4.4.7, which stems from a SQL injection in the product management area that could result in the...

3.8CVSS7.9AI score0.00239EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/04/21 12:00 a.m.9 views

WebServer 注入漏洞

WebServer is a C++ Linux WebServer server by MARK Individual Developers. An injection vulnerability exists in WebServer version 1.0, which originates from SQL injection due to manipulation of username/password parameters by the Login component in the file code/http/httprequest.cpp...

9.8CVSS7.7AI score0.00478EPSS
SaveExploits0References4
OSV
OSV
added 2025/04/17 5:15 p.m.9 views

CVE-2025-29180

In FOXCMS =1.25, the installdb.php file has a time - based blind SQL injection vulnerability. The urlprefix, domain, and mywebsite POST parameters are directly concatenated into SQL statements without filtering...

7.2CVSS5.8AI score0.00372EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/17 12:00 a.m.4 views

WordPress plugin Local Magic SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

9.3CVSS9.1AI score0.00353EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/16 12:00 a.m.7 views

PHPGurukul Men Salon Management System 注入漏洞

PHPGurukul Men Salon Management System is a men's salon management system from PHPGurukul. An injection vulnerability exists in version 1.0 of the PHPGurukul Men Salon Management System, which results from SQL injection due to incorrect manipulation of the editid parameter in the file...

9.8CVSS7.7AI score0.00669EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/04/16 12:00 a.m.11 views

Symfonia Ready_ SQL注入漏洞

Symfonia Ready is an operating system from Symfonia that builds programs for companies to use off-the-shelf modules and business applications. Symfonia Ready has an SQL injection vulnerability that stems from improper input cleanup in the Invoices module file search function, which could lead to ...

9.4CVSS7.6AI score0.01006EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/04/16 12:00 a.m.8 views

Siemens TeleControl Server Basic SQL注入漏洞

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an SQL injection in the CreateLog method, which can be exploited by an attacker to bypass authorization...

8.8CVSS8.4AI score0.00654EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/04/16 12:00 a.m.10 views

Siemens TeleControl Server Basic SQL注入漏洞

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an internal method, UnlockUser, which can be exploited by an attacker to bypass authorization controls and...

8.8CVSS8.5AI score0.00751EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/04/16 12:00 a.m.10 views

Siemens TeleControl Server Basic SQL注入漏洞

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method UpdateUsers, which can be exploited by an attacker to bypass...

8.8CVSS8.4AI score0.00806EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/04/16 12:00 a.m.11 views

Siemens TeleControl Server Basic SQL注入漏洞

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that stems from the lack of proper filtering of input in the internally used 'DeleteProject' method. An attacker could exploit th...

8.8CVSS8.2AI score0.00751EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/04/16 12:00 a.m.9 views

Siemens TeleControl Server Basic SQL注入漏洞

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from the internally used 'UpdateOpcSettings' method. An attacker could exploit the vulnerability to cause bypass o...

8.8CVSS8.2AI score0.00751EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/04/16 12:00 a.m.10 views

Siemens TeleControl Server Basic SQL注入漏洞

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an internal method UpdateProjectUserRights, which can be exploited by an attacker to bypass authorization...

8.8CVSS8.5AI score0.00751EPSS
SaveExploits0References2
Rows per page
Query Builder