CVE-2024-25658

Cleartext storage of passwords in Infinera TNMS Transcend Network Management System Server 19.10.3 allows attackers with access to the database or exported configuration files to obtain SNMP users' usernames and passwords in cleartext...

CVE-2024-25658

Cleartext storage of passwords in Infinera TNMS Transcend Network Management System Server 19.10.3 allows attackers with access to the database or exported configuration files to obtain SNMP users' usernames and passwords in cleartext...

CVE-2024-25658

Cleartext storage of passwords in Infinera TNMS Transcend Network Management System Server 19.10.3 allows attackers with access to the database or exported configuration files to obtain SNMP users' usernames and passwords in cleartext...

PT-2024-21074 · Infinera · Infinera Tnms Server

Name of the Vulnerable Software and Affected Versions: Infinera TNMS Server version 19.10.3 Description: The issue allows attackers with access to the database or exported configuration files to obtain SNMP users' usernames and passwords in cleartext. This occurs due to the cleartext storage of...

CVE-2024-8630

Alisonic Sibylla devices are vulnerable to SQL injection attacks, which could allow complete access to the database...

CVE-2024-8630

CVE-2024-8630 affects Alisonic Sibylla (tank-gauge device) with an SQL injection vulnerability. Public docs (NVD/NVD-derived and CISA ICS advisory) describe improper neutralization of special elements in SQL commands, potentially allowing an attacker to retrieve database information, dump credent...

CVE-2024-8630 Alisonic Sibylla SQL Injection

Alisonic Sibylla devices are vulnerable to SQL injection attacks, which could allow complete access to the database...

CVE-2024-8630 Alisonic Sibylla SQL Injection

Alisonic Sibylla devices are vulnerable to SQL injection attacks, which could allow complete access to the database...

Alisonic Sibylla SQL注入漏洞

Alisonic Sibylla is an automated fuel tank metering service station from Alisonic. The Alisonic Sibylla suffers from a SQL injection vulnerability that stems from the device's susceptibility to SQL injection attacks, which could allow full access to the database...

Alisonic Sibylla

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Alisonic Equipment: Sibylla Vulnerability: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' 2. RISK EVALUATION Successful exploitation of this vulnerability...

PT-2024-39144 · Unknown · Alisonic Sibylla

Name of the Vulnerable Software and Affected Versions: Alisonic Sibylla affected versions not specified Description: The issue concerns SQL injection attacks, which could allow complete access to the database. Attackers can remotely compromise databases. There is no information provided about the...

SQL Injection Vulnerability in UFIDA U8CRM of UFIDA Network Technology Co. Ltd (CNVD-2024-43219)

UFIDA U8CRM is a professional enterprise-level CRM software designed to help companies efficiently manage customer relationships, improve sales performance and provide quality customer service. A SQL injection vulnerability exists in UFIDA U8CRM, which can be exploited by attackers to obtain...

CVE-2024-42404

SQL injection vulnerability in Welcart e-Commerce prior to 2.11.2 allows an attacker who can login to the product to obtain or alter the information stored in the database...

WordPress plugin Welcart e-Commerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

SQL Injection Vulnerability in UFIDA Nccloud of UFIDA Network Technology Co. Ltd (CNVD-2024-43465)

UFIDA Nccloud is a digitalization platform for large enterprises. A SQL injection vulnerability exists in UFIDA Nccloud, which can be exploited by attackers to gain access to sensitive database information...

CVE-2024-45537

Apache Druid allows users with certain permissions to read data from other database systems using JDBC. This functionality allows trusted users to set up Druid lookups or run ingestion tasks. Druid also allows administrators to configure a list of allowed properties that users are able to provide...

PT-2024-30869 · Unknown · Wpcargo Track & Trace

Name of the Vulnerable Software and Affected Versions: WPCargo Track & Trace versions 7.0.0 through 7.0.6 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows attackers to manipulate the database...

PT-2024-30831 · Unknown · Spiffy Calendar

Name of the Vulnerable Software and Affected Versions: Spiffy Calendar versions through 4.9.12 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For...

SQL Injection Vulnerability in UFIDA U8CRM of UFIDA Network Technology Co. Ltd (CNVD-2024-41602)

UFIDA U8CRM is a professional enterprise-level CRM software designed to help companies efficiently manage customer relationships, improve sales performance and provide quality customer service. A SQL injection vulnerability exists in UFIDA U8CRM, which can be exploited by attackers to obtain...

CVE-2024-27113

An unauthenticated Insecure Direct Object Reference IDOR to the database has been found in the SO Planning tool that occurs when the public view setting is enabled. An attacker could use this vulnerability to gain access to the underlying database by exporting it as a CSV file. The vulnerability...