EUVD-2024-32891

Malicious code in bioql PyPI...

CVE-2024-10070 ESAFENET CDG PolicyPushControlAction.java actionPolicyPush sql injection

A vulnerability classified as critical has been found in ESAFENET CDG 5. This affects the function actionPolicyPush of the file /com/esafenet/policy/action/PolicyPushControlAction.java. The manipulation of the argument policyId leads to sql injection. It is possible to initiate the attack remotel...

CVE-2024-10070

CVE-2024-10070 affects ESAFENET CDG 5. The vulnerability lives in the function actionPolicyPush of PolicyPushControlAction.java and arises from improper handling of the policyId parameter, enabling SQL injection. It can be exploited remotely and the exploit has been disclosed publicly. The vendor...