Lucene search
+L

87 matches found

Zero Day Initiative
Zero Day Initiative
•added 2025/06/16 12:00 a.m.•16 views

Siemens TeleControl Server Basic CreateProject SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens TeleControl Server Basic. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

6.5CVSS6.8AI score0.0088EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/06/16 12:00 a.m.•15 views

Siemens TeleControl Server Basic UpdateGateways SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens TeleControl Server Basic. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

6.5CVSS6.8AI score0.0082EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/06/16 12:00 a.m.•14 views

Siemens TeleControl Server Basic UpdateOpcSettings SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens TeleControl Server Basic. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

6.5CVSS6.8AI score0.0082EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/06/16 12:00 a.m.•13 views

Siemens TeleControl Server Basic UpdateUsers SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens TeleControl Server Basic. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

6.5CVSS6.8AI score0.0088EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/06/16 12:00 a.m.•21 views

Siemens TeleControl Server Basic UpdateDatabaseSettings SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens TeleControl Server Basic. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

6.5CVSS6.8AI score0.0088EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/06/16 12:00 a.m.•13 views

Siemens TeleControl Server Basic UpdateTcmSettings SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens TeleControl Server Basic. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

6.5CVSS6.8AI score0.0088EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/06/16 12:00 a.m.•14 views

Siemens TeleControl Server Basic UpdateBufferingSettings SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens TeleControl Server Basic. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

6.5CVSS6.8AI score0.0088EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/06/16 12:00 a.m.•18 views

Siemens TeleControl Server Basic UpdateSmtpSettings SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens TeleControl Server Basic. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

6.5CVSS6.8AI score0.0088EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/06/16 12:00 a.m.•15 views

Siemens TeleControl Server Basic Authenticate SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens TeleControl Server Basic. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the Authenticate method. The issue results from t...

9.8CVSS8.1AI score0.01033EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/06/16 12:00 a.m.•23 views

Siemens TeleControl Server Basic RestoreFromBackup SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens TeleControl Server Basic. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS8.2AI score0.00901EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/06/16 12:00 a.m.•13 views

Siemens TeleControl Server Basic ImportDatabase SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens TeleControl Server Basic. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

6.5CVSS6.8AI score0.0088EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/06/16 12:00 a.m.•19 views

Siemens TeleControl Server Basic UpdateConnectionVariables SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens TeleControl Server Basic. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

6.5CVSS6.8AI score0.0088EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/06/16 12:00 a.m.•16 views

Siemens TeleControl Server Basic UpdateProjectConnections SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens TeleControl Server Basic. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

6.5CVSS6.8AI score0.0088EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/06/16 12:00 a.m.•15 views

Siemens TeleControl Server Basic VerifyUser SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens TeleControl Server Basic. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the VerifyUser method. The issue results from the...

9.8CVSS8.1AI score0.01033EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/06/16 12:00 a.m.•16 views

Siemens TeleControl Server Basic UpdateProject SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens TeleControl Server Basic. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

6.5CVSS6.8AI score0.0082EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/06/16 12:00 a.m.•14 views

Siemens TeleControl Server Basic CreateTrace SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens TeleControl Server Basic. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the CreateTrace method. The issue results from th...

9.8CVSS8.1AI score0.01042EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/04/22 12:00 a.m.•21 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08367)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an SQL injection in the GetLogs method, which can be exploited by an attacker to bypass authorization contro...

8.8CVSS8.2AI score0.00714EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/04/22 12:00 a.m.•20 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-09144)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from the internally used 'UpdateProject' method. An attacker could use this vulnerability to bypass authorization...

8.8CVSS8.1AI score0.0082EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/04/22 12:00 a.m.•17 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08369)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an SQL injection in the GetSettings method, which can be exploited by an attacker to bypass authorization...

8.8CVSS8.2AI score0.00714EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/04/22 12:00 a.m.•39 views

Siemens TeleControl Server Basic SQL Injection Vulnerability (CNVD-2025-08371)

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an SQL injection in the UnlockTraceLevelSettings method, which can be exploited by an attacker to bypass...

8.8CVSS8.2AI score0.00665EPSS
SaveExploits0References1
Rows per page
Query Builder