Lucene search
K

270 matches found

CNNVD
CNNVD
added 2023/08/09 12:0 a.m.2 views

ScienceLogic SL1 SQL注入漏洞

ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A SQL injection vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from a lack of validation of externally entered SQL...

8.8CVSS8.1AI score0.00608EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/08/09 12:0 a.m.3 views

ScienceLogic SL1 SQL注入漏洞

ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A SQL injection vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from a lack of validation of externally entered SQL...

8.8CVSS8.1AI score0.00608EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/08/09 12:0 a.m.2 views

ScienceLogic SL1 SQL注入漏洞

ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A SQL injection vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from a lack of validation of externally entered SQL...

8.8CVSS8.1AI score0.00608EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/08/09 12:0 a.m.4 views

ScienceLogic SL1 SQL注入漏洞

ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A SQL injection vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from a lack of validation of externally entered SQL...

8.8CVSS8.1AI score0.00608EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/08/09 12:0 a.m.3 views

ScienceLogic SL1 SQL注入漏洞

ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A SQL injection vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from a lack of validation of externally entered SQL...

8.8CVSS8.1AI score0.00608EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/08/09 12:0 a.m.2 views

ScienceLogic SL1 SQL注入漏洞

ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A SQL injection vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from a lack of validation of externally entered SQL...

8.8CVSS8.1AI score0.00608EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/08/09 12:0 a.m.2 views

ScienceLogic SL1 SQL Injection Vulnerability

ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A security vulnerability exists in ScienceLogic SL1 version 11.1.2 and prior versions that stems from the logging export feature not filtering user inp...

8.8CVSS6.8AI score0.00608EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/08/09 12:0 a.m.3 views

ScienceLogic SL1 操作系统命令注入漏洞

ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A command execution vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from a failure of the Ticket Report Generation...

8.8CVSS7.7AI score0.01322EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/08/09 12:0 a.m.2 views

PT-2023-15861 · Sciencelogic · Sciencelogic Sl1

Name of the Vulnerable Software and Affected Versions: ScienceLogic SL1 affected versions not specified Description: A SQL injection issue exists in the “reporting job editor” feature of the ScienceLogic SL1. This feature takes unsanitized user-controlled input and passes it directly to a SQL...

8.8CVSS8.8AI score0.00608EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/08/09 12:0 a.m.3 views

PT-2023-15864 · Sciencelogic · Sciencelogic Sl1

Name of the Vulnerable Software and Affected Versions: ScienceLogic SL1 affected versions not specified Description: A SQL injection issue exists in the vendor country parameter of the "vendor print report" feature. This feature takes unsanitized user-controlled input and passes it directly to a...

8.8CVSS8.8AI score0.00608EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2023/08/09 12:0 a.m.2 views

PT-2023-15859 · Sciencelogic · Sciencelogic Sl1

Name of the Vulnerable Software and Affected Versions: ScienceLogic SL1 affected versions not specified Description: A SQL injection issue exists in the "schedule editor" feature of the ScienceLogic SL1. This feature takes unsanitized user-controlled input and passes it directly to a SQL query,...

8.8CVSS8.8AI score0.00608EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/08/09 12:0 a.m.2 views

PT-2023-15853 · Sciencelogic · Sciencelogic Sl1

Name of the Vulnerable Software and Affected Versions: ScienceLogic SL1 affected versions not specified Description: A command injection issue exists in the "dash export" feature, where unsanitized user-controlled input is passed directly to a shell command, allowing the injection of arbitrary...

8.8CVSS9AI score0.01343EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/08/09 12:0 a.m.2 views

PT-2023-15869 · Sciencelogic · Sciencelogic Sl1

Name of the Vulnerable Software and Affected Versions: ScienceLogic SL1 affected versions not specified Description: A SQL injection issue exists in the "ticket event report" feature, where unsanitized user-controlled input is passed directly to a SQL query, allowing the injection of arbitrary SQ...

8.8CVSS8.9AI score0.00608EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/08/09 12:0 a.m.2 views

PT-2023-15876 · Sciencelogic · Sciencelogic Sl1

Name of the Vulnerable Software and Affected Versions: ScienceLogic SL1 affected versions not specified Description: A SQL injection issue exists in the “logging export” feature, where unsanitized user-controlled input is passed directly to a SQL query, allowing the injection of arbitrary SQL...

8.8CVSS8.8AI score0.00608EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2023/08/09 12:0 a.m.3 views

PT-2023-15866 · Sciencelogic · Sciencelogic Sl1

Name of the Vulnerable Software and Affected Versions: ScienceLogic SL1 affected versions not specified Description: A SQL injection issue exists in the "ticket watchers email" feature, where unsanitized user-controlled input is passed directly to a SQL query, allowing the injection of arbitrary...

8.8CVSS8.9AI score0.00608EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/08/09 12:0 a.m.2 views

PT-2023-15865 · Sciencelogic · Sciencelogic Sl1

Name of the Vulnerable Software and Affected Versions: ScienceLogic SL1 affected versions not specified Description: A SQL injection issue exists in the “topology data service” feature, where unsanitized user-controlled input is passed directly to a SQL query, allowing the injection of arbitrary...

8.8CVSS8.9AI score0.00596EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/08/09 12:0 a.m.2 views

PT-2023-15854 · Sciencelogic · Sciencelogic Sl1

Name of the Vulnerable Software and Affected Versions: ScienceLogic SL1 affected versions not specified Description: A command injection issue exists in the ticket report generate feature, allowing arbitrary commands to be injected into the underlying operating system due to unsanitized...

8.8CVSS8.9AI score0.01322EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/08/09 12:0 a.m.4 views

PT-2023-15871 · Sciencelogic · Sciencelogic Sl1

Name of the Vulnerable Software and Affected Versions: ScienceLogic SL1 affected versions not specified Description: A SQL injection issue exists in the “reporter events type” feature of the ScienceLogic SL1. This feature takes unsanitized user-controlled input and passes it directly to a SQL...

8.8CVSS8.8AI score0.00608EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2023/08/09 12:0 a.m.2 views

PT-2023-15874 · Sciencelogic · Sciencelogic Sl1

Name of the Vulnerable Software and Affected Versions: ScienceLogic SL1 affected versions not specified Description: A SQL injection issue exists in the "message viewer print" feature, where unsanitized user-controlled input is passed directly to a SQL query, allowing the injection of arbitrary S...

8.8CVSS8.9AI score0.00608EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/08/09 12:0 a.m.2 views

PT-2023-15852 · Sciencelogic · Sciencelogic Sl1

Name of the Vulnerable Software and Affected Versions: ScienceLogic SL1 affected versions not specified Description: A command injection issue exists in the ARP ping device tool feature of the ScienceLogic SL1. This feature takes unsanitized user-controlled input and passes it directly to a shell...

8.8CVSS8.9AI score0.0131EPSS
Exploits0References6
Rows per page
Query Builder