17837 matches found
CVE-2023-42240
An issue was discovered in Selesta Visual Access Manager VAM prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /monitor/sscheduledfile.php...
CVE-2023-42248
An issue was discovered in Selesta Visual Access Manager VAM prior to 4.42.2. An authenticated attacker can write arbitrary files by manipulating POST parameters of the page "common/vamSql.php"...
CVE-2023-42242: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in Selesta Visual Access Manager VAM prior to 4.42.2. An authenticated attacker can perform SQL Injection in a GET parameter of /monitor/sterminal.php...
CVE-2024-46479
Venki Supravizio BPM through 18.0.1 was discovered to contain an arbitrary file upload vulnerability. An authenticated attacker may upload a malicious file, leading to remote code execution...
CVE-2023-42239: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in Selesta Visual Access Manager VAM prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /vam/vamep.php...
CVE-2023-42235
An issue was discovered in Selesta Visual Access Manager VAM prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple parameters of /monitor/snormalizedtrans.php...
CVE-2023-42235
Selesta Visual Access Manager (VAM) versions prior to 4.42.2 are vulnerable to an SQL Injection flaw. An authenticated attacker can exploit multiple parameters within the /monitor/s_normalizedtrans.php API endpoint. To remediate this issue, users should update to version 4.42.2 or later. As a tem...
CVE-2023-42244
An SQL Injection vulnerability exists in Selesta Visual Access Manager (VAM) versions prior to 4.42.2 . The flaw stems from a lack of validation of externally entered SQL statements within the application. An authenticated attacker can exploit this by targeting multiple POST parameters of the /va...
CVE-2023-42240
An SQL Injection vulnerability exists in Selesta Visual Access Manager (VAM) versions prior to 4.42.2 . An authenticated attacker can exploit this flaw by targeting multiple POST parameters of the /monitor/s_scheduledfile.php endpoint. While the technical impact is noted as partial , the vulnerab...
CVE-2023-42239
An SQL Injection vulnerability exists in Selesta Visual Access Manager (VAM) versions prior to 4.42.2 . The root cause is a lack of validation for externally entered SQL statements, allowing an authenticated attacker to perform SQL injection via multiple POST parameters of the /vam/vam_ep.php API...
CVE-2023-42244
An issue was discovered in Selesta Visual Access Manager VAM prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /vam/vamvisits.php...
CVE-2023-42244: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in Selesta Visual Access Manager VAM prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /vam/vamvisits.php...
CVE-2023-42238
An SQL Injection vulnerability exists in Selesta Visual Access Manager (VAM) in versions prior to 4.42.2 . An authenticated attacker can exploit this issue by targeting multiple POST parameters within the /vam/vam_eps.php API endpoint. This vulnerability could allow an attacker to execute arbitra...
Venki Supravizio BPM 安全漏洞
Venki Supravizio BPM is a process management solution from Venki Brazil. A security vulnerability exists in Venki Supravizio BPM version 18.0.1 and prior versions, which stems from the presence of an NTLM hash leak that allows an authenticated attacker to elevate privileges on the underlying host...
CVE-2023-42248
An issue was discovered in Selesta Visual Access Manager VAM prior to 4.42.2. An authenticated attacker can write arbitrary files by manipulating POST parameters of the page "common/vamSql.php"...
CVE-2024-46479
CVE-2024-46479 affects Venki Supravizio BPM up to version 18.0.1, which contains an arbitrary file upload vulnerability that could allow an authenticated attacker to upload a malicious file and achieve remote code execution. Connected sources confirm the component and impact; no remediation detai...
CVE-2023-42237
An issue was discovered in Selesta Visual Access Manager VAM prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple GET parameters of /vam/vamicommand.php...
CVE-2023-42241
An issue was discovered in Selesta Visual Access Manager VAM prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /vam/vamanagraphic.php...