MAL-2025-33638 Malicious code in solis-kastra-rollup-io (npm)

The package solis-kastra-rollup-io was found to contain malicious code...

MAL-2025-40883 Malicious code in zenobia-solis-aurora-gatsby (npm)

The package zenobia-solis-aurora-gatsby was found to contain malicious code...

solisgardenshoa.com Cross Site Scripting vulnerability OBB-2372077

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2021-13777

Name of the Vulnerable Software and Affected Versions: Sloan SmartFaucets including Optima EAF, Optima ETF/EBF, BASYS EFX, and Flushometers including SOLIS affected versions not specified Description: The issue concerns an unauthenticated BLE Interface in Sloan SmartFaucets. This allows for...

CVE-2021-20107: Missing Authentication for Critical Function

There exists an unauthenticated BLE Interface in Sloan SmartFaucets including Optima EAF, Optima ETF/EBF, BASYS EFX, and Flushometers including SOLIS. The vulnerability allows for unauthenticated kinetic effects and information disclosure on the faucets. It is possible to use the Bluetooth Low...

Solis Gnuteca SQL Injection Vulnerability

Solis Gnuteca is a library management system from Solis Brazil. The system includes features such as e-mail alerts, automated inventory, location tracking and user registration. A SQL injection vulnerability exists in Solis Gnuteca version 3.8. The vulnerability stems from a database-based...

GNUTeca Path Traversal Vulnerability

Solis Gnuteca is a library management system from Solis Brazil. The system includes features such as e-mail alerts, automated inventory, location tracking and user registration. A path traversal vulnerability exists in Solis GNUTeca version 3.8. The vulnerability stems from the failure of a...

CVE-2020-12765

Solis Miolo 2.0 allows index.php?module=install&action=view&item= Directory Traversal...

CVE-2020-12765

Solis Miolo 2.0 allows index.php?module=install&action=view&item= Directory Traversal...

Directory traversal

Solis Miolo 2.0 allows index.php?module=install&action=view&item= Directory Traversal...

CVE-2020-12765

CVE-2020-12765 affects Solis Miolo 2.0, with a Directory Traversal vulnerability exposed via index.php?module=install&action=view&item=. The connected Red Hat entry corroborates the Solis Miolo 2.0 context and the path traversal behavior, but the available documents do not specify the exact affec...

CVE-2020-12765

Solis Miolo 2.0 allows index.php?module=install&action=view&item= Directory Traversal...

PT-2020-13253

Name of the Vulnerable Software and Affected Versions Solis Miolo version 2.0 Description The issue allows for Directory Traversal via the "index.php?module=install&action=view&item=" endpoint. This could potentially allow an attacker to access sensitive files on the system. Recommendations For...

CVE-2020-12765: Improper Limitation of a Pathname to a Restricted Directory

Solis Miolo 2.0 allows index.php?module=install&action=view&item= Directory Traversal...

CVE-2016-8358

An issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0; 3.0; and 3.1. The affected software does not verify the identities at communication endpoints, which may allow a man-in-the-middle attacker to gain access to the communication channel between...

CVE-2016-8358

An issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0; 3.0; and 3.1. The affected software does not verify the identities at communication endpoints, which may allow a man-in-the-middle attacker to gain access to the communication channel between...

CVE-2016-8355

An issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0; 3.0; and 3.1. CADD-Solis Medication Safety Software grants an authenticated user elevated privileges on the SQL database, which would allow an authenticated user to modify drug libraries, add and...

Design/Logic Flaw

An issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0; 3.0; and 3.1. The affected software does not verify the identities at communication endpoints, which may allow a man-in-the-middle attacker to gain access to the communication channel between...

CVE-2016-8355

An issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0; 3.0; and 3.1. CADD-Solis Medication Safety Software grants an authenticated user elevated privileges on the SQL database, which would allow an authenticated user to modify drug libraries, add and...

CVE-2016-8358

An issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0; 3.0; and 3.1. The affected software does not verify the identities at communication endpoints, which may allow a man-in-the-middle attacker to gain access to the communication channel between...