40 matches found
EUVD-2023-52435
Malicious code in bioql PyPI...
EUVD-2024-32348
Malicious code in bioql PyPI...
EUVD-2025-1685
Malicious code in bioql PyPI...
CVE-2023-48383
NetVision Information airPASS has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...
CVE-2025-0457
The airPASS from NetVision Information has an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject and execute arbitrary OS commands...
CVE-2025-0455
The airPASS from NetVision Information has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...
CVE-2025-0456
The airPASS from NetVision Information has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access the specific administrative functionality to retrieve all accounts and passwords...
CVE-2025-0457 NetVision Information airPASS - OS Command Injection
The airPASS from NetVision Information has an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject and execute arbitrary OS commands...
CVE-2025-0457 NetVision Information airPASS - OS Command Injection
The airPASS from NetVision Information has an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject and execute arbitrary OS commands...
CVE-2025-0457
The CVE-2025-0457 entry concerns NetVision Information’s airPASS, which is affected by an OS Command Injection vulnerability. The provided sources indicate that remote attackers with regular privileges can inject and execute arbitrary OS commands, implying a network-facing flaw with high impact o...
CVE-2025-0456 NetVision Information airPASS - Missing Authentication
The airPASS from NetVision Information has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access the specific administrative functionality to retrieve all accounts and passwords...
CVE-2025-0456
The CVE-2025-0456 issue concerns the airPASS product from NetVision Information. The root cause is a Missing Authentication vulnerability that allows unauthenticated remote attackers to access an administrative function and retrieve all accounts and passwords. The connected sources provide high-s...
CVE-2025-0456 NetVision Information airPASS - Missing Authentication
The airPASS from NetVision Information has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access the specific administrative functionality to retrieve all accounts and passwords...
CVE-2025-0455 NetVision Information airPASS - SQL injection
The airPASS from NetVision Information has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...
CVE-2025-0455
The CVE-2025-0455 entry concerns NetVision Information’s airPASS. A SQL injection vulnerability in airPASS allows unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents. Documents provide explicit details on affected software (airPASS), vul...
CVE-2025-0455 NetVision Information airPASS - SQL injection
The airPASS from NetVision Information has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...
CVE-2025-0457: Improper Neutralization of Special Elements used in an OS Command
The airPASS from NetVision Information has an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject and execute arbitrary OS commands...
CVE-2025-0456: Missing Authentication for Critical Function
The airPASS from NetVision Information has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access the specific administrative functionality to retrieve all accounts and passwords...
CVE-2025-0455: Improper Neutralization of Special Elements used in an SQL Command
The airPASS from NetVision Information has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...
PT-2025-3892 · Netvision Information · Airpass
Name of the Vulnerable Software and Affected Versions: airPASS from NetVision Information affected versions not specified Description: The issue allows unauthenticated remote attackers to access specific administrative functionality, enabling them to retrieve all accounts and passwords. This pose...