PT-2015-5003

Name of the Vulnerable Software and Affected Versions SCADA Engine BACnet OPC Server versions prior to 2.1.371.24 Description The issue allows remote attackers to bypass authentication and read or write to arbitrary database fields. Recommendations For versions prior to 2.1.371.24, update to...

CVE-2014-9249

The default configuration of Zenoss Core before 5 allows remote attackers to read or modify database information by connecting to unspecified open ports, aka ZEN-15408...

PT-2014-6459

Name of the Vulnerable Software and Affected Versions Schneider Electric StruxureWare SCADA Expert ClearSCADA versions 2010 R3 through 2014 R1 Description The issue allows remote attackers to read database records by leveraging access to the guest account. Recommendations For versions 2010 R3...

CVE-2014-1986: Undefined Security Weakness

The Content Provider in the KOKUYO CamiApp application 1.21.1 and earlier for Android allows attackers to bypass intended access restrictions and read database information via a crafted application...

PT-2012-3430

Name of the Vulnerable Software and Affected Versions PHP Grade Book versions prior to 1.9.5 BETA Description The issue allows remote attackers to read the database. This is achieved through the 'admin/index.php' file when a 'SaveSQL' action is performed. Recommendations For versions prior to 1.9...

MySQL Connector/J vulnerable to SQL injection

Overview MySQL Connector/J from Sun Microsystems contains a SQL injection vulnerability. MySQL Connector/J from Sun Microsystems is a software that provides access to a MySQL database for client applications written in Java. MySQL Connector/J contains a SQL injection vulnerability. Masakazu Ikeda...