355 matches found
CVE-2025-25994
SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameters date1, date2, id...
CVE-2025-25992
CVE-2025-25992 corresponds to a SQL injection in FeMiner wms 1.0. Multiple connected sources (CNVD-2025-03952, RH, NVD, CNNVD) describe the issue as arising from the lack of validation of externally entered SQL statements in the iquel_inout_item.php component, enabling an attacker to obtain sensi...
PT-2025-7121 · Unknown · Feminer Wms
Name of the Vulnerable Software and Affected Versions: FeMiner WMS version 1.0 Description: The issue allows a remote attacker to obtain sensitive information. This is achieved via the itemid parameter. Recommendations: For FeMiner WMS version 1.0, avoid using the parameter itemid in the affected...
CVE-2025-25994
SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameters date1, date2, id...
CVE-2025-25997
CVE-2025-25997 describes a Directory Traversal vulnerability in FeMiner wms v1.0, where a remote attacker can obtain sensitive information via the databak.php component. The CVSS v3.1 base metrics indicate NETWORK attack vector, LOW attack complexity, NO privileges required, NO user interaction, ...
CVE-2025-25993
The CVE-2025-25993 entry concerns FeMiner WMS 1.0 with a SQL injection in the itemid parameter that can leak sensitive information. Affected software: FeMiner WMS (v1.0). Root cause: improper handling of the itemid input allowing injection. Impact per sources: confidentiality information disclosu...
CVE-2022-33295
Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length...
CVE-2024-57760
JeeWMS before v2025.01.01 was discovered to contain a SQL injection vulnerability via the ReportId parameter at /core/CGReportDao.java...
PT-2025-3555 · Jeewms · Jeewms
Name of the Vulnerable Software and Affected Versions: JeeWMS versions prior to 2025.01.01 Description: The issue is related to an arbitrary file upload vulnerability in the parserXML method. This allows attackers to execute arbitrary code via uploading a crafted file. There is no information...
JeeWMS 注入漏洞
JeeWMS is a JAVA-based warehouse management system from China Huayi JeeWMS. An injection vulnerability exists in JeeWMS 20241229 and earlier versions, which stems from SQL injection in the saveOrUpdate function...
CVE-2024-49107
WmsRepair Service Elevation of Privilege Vulnerability...
GeoServer < 2.23.4 Multiples Vulnerabilities
According to its banner, the version of GeoServer running on the remote host is prior to 2.23.5 or 2.24.0 prior to 2.24.2. It is, therefore, affected by Multiples Vulnerabilities : - An Arbitrary file upload vulnerability in REST Coverage Store API - A Stored Cross-Site Scripting XSS vulnerabilit...
CVE-2024-52732
Incorrect access control in wms-Warehouse management system-zeqp v2.20.9.1 due to the token value of the zeqp system being reused...
CVE-2024-52732
Incorrect access control in wms-Warehouse management system-zeqp v2.20.9.1 due to the token value of the zeqp system being reused...
CVE-2024-52732
CVE-2024-52732 affects wms-Warehouse management system-zeqp v2.20.9.1. The root cause is incorrect access control caused by reuse of the zeqp system token, enabling unauthorized access. Documented impact indicates high confidentiality and integrity risk with a critical CVSS:3.1 score (AV:N, AC:L,...
Malicious code in wms-printer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a41ff2a05e27682f3bd0effb5750b0d0b26312deafd88f3eff71b6e0d1f5aec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11019 Malicious code in wms-printer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a41ff2a05e27682f3bd0effb5750b0d0b26312deafd88f3eff71b6e0d1f5aec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-49596
Dell Wyse Management Suite, version WMS 4.4 and prior, contain a Missing Authorization vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service and arbitrary file deletion...
CVE-2024-49597
Dell Wyse Management Suite, versions WMS 4.4 and prior, contain an Improper Restriction of Excessive Authentication Attempts vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass...
