CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

RedhatCVE•added 2025/05/23 8:8 a.m.•6 views

CVE-2024-25512

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the attachid parameter at /Bulletin/AttachDownLoad.aspx...

8.1CVSS8.4AI score0.00158EPSS

Exploits1References1

NVD•added 2024/05/07 6:15 p.m.•5 views

CVE-2024-25512

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the attachid parameter at /Bulletin/AttachDownLoad.aspx...

8.1CVSS7.9AI score0.00158EPSS

Exploits1References1

Cvelist•added 2024/05/07 12:0 a.m.•13 views

CVE-2024-25512

RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the attachid parameter at /Bulletin/AttachDownLoad.aspx...

8.2AI score0.00158EPSS

Exploits1References1

CVE•added 2024/05/07 12:0 a.m.•63 views

CVE-2024-25512

CVE-2024-25512 affects RuvarOA v6.01 and v12.01. The vulnerability is a SQL injection in the /Bulletin/AttachDownLoad.aspx endpoint via the attach_id parameter, arising from input validation gaps. Impact described across sources includes the ability to execute arbitrary SQL and exfiltrate sensiti...

8.1CVSS8.3AI score0.00158EPSS

Exploits1References1Affected Software1