8 matches found
EUVD-2013-4787
Malware in sbrugna...
CVE-2013-4943
The client application in Siemens COMOS before 9.1 Update 458, 9.2 before 9.2.0.6.37, and 10.0 before 10.0.3.0.19 allows local users to gain privileges and bypass intended database-operation restrictions by leveraging COMOS project access...
PT-2023-3009 · Unknown · Conprosys Hmi System
Name of the Vulnerable Software and Affected Versions: CONPROSYS HMI System CHS versions prior to 3.5.3 Description: A server-side request forgery issue exists, allowing an attacker with administrative privileges to bypass database restrictions and connect to unintended databases. The vulnerabili...
CVE-2022-41223
The Director database component of MiVoice Connect through 19.3 22.22.6100.0 could allow an authenticated attacker to conduct a code-injection attack via crafted data due to insufficient restrictions on the database data type...
CVE-2013-5208
HR Systems Strategies info:HR HRIS 7.9 does not properly protect the database password, which allows local users to bypass intended database restrictions by accessing the USERPW registry key and bypassing an unspecified obfuscation technique...
Design/Logic Flaw
HR Systems Strategies info:HR HRIS 7.9 does not properly protect the database password, which allows local users to bypass intended database restrictions by accessing the USERPW registry key and bypassing an unspecified obfuscation technique...
PT-2013-5445
Name of the Vulnerable Software and Affected Versions HR Systems Strategies info:HR HRIS version 7.9 Description The issue allows local users to bypass intended database restrictions. This is achieved by accessing the USERPW registry key and bypassing an unspecified obfuscation technique, which...
GLSA-201209-24 : PostgreSQL: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201209-24 PostgreSQL: Multiple vulnerabilities Multiple vulnerabilities have been discovered in PostgreSQL. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could spoof SSL connections...