Lucene search
K

82210 matches found

ATTACKERKB
ATTACKERKB
added 2026/01/16 2:57 a.m.4 views

CVE-2026-1020

Police Statistics Database System developed by Gotac has a Absolute Path Traversal vulnerability, allowing unauthenticated remote attackers to enumerate the system file directory...

6.9CVSS5.5AI score0.00461EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/01/16 2:57 a.m.24 views

CVE-2026-1020 Gotac|Police Statistics Database System - Absolute Path Traversal

Police Statistics Database System developed by Gotac has a Absolute Path Traversal vulnerability, allowing unauthenticated remote attackers to enumerate the system file directory...

6.9CVSS0.00461EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/01/16 2:57 a.m.3 views

CVE-2026-1020 Gotac|Police Statistics Database System - Absolute Path Traversal

Police Statistics Database System developed by Gotac has a Absolute Path Traversal vulnerability, allowing unauthenticated remote attackers to enumerate the system file directory...

6.9CVSS6.7AI score0.00461EPSS
Exploits0References2
CVE
CVE
added 2026/01/16 2:57 a.m.12 views

CVE-2026-1020

The CVE-2026-1020 entry concerns the Police Statistics Database System by Gotac, which has an Absolute Path Traversal vulnerability. The vulnerability allows unauthenticated remote attackers to enumerate the system file directory. Connected sources corroborate this description across multiple fee...

6.9CVSS6.7AI score0.00461EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2026/01/16 2:48 a.m.13 views

CVE-2026-1019

Technical details about CVE-2026-1019 are not publicly available in the provided documents; no explicit affected products, versions, or remediation steps are disclosed. Monitor for updates from the referenced sources.

9.8CVSS6.7AI score0.00525EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/16 2:48 a.m.2 views

CVE-2026-1019 Gotac|Police Statistics Database System - Missing Authentication

Police Statistics Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents by using a specific functionality...

9.8CVSS6.7AI score0.00525EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/16 2:48 a.m.3 views

CVE-2026-1019

Police Statistics Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents by using a specific functionality...

9.8CVSS5.5AI score0.00525EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/01/16 2:32 a.m.24 views

CVE-2026-1018 Gotac|Police Statistics Database System - Arbitrary File Read

Police Statistics Database System developed by Gotac has an Arbitrary File Read vulnerability, allowing Unauthenticated remote attacker to exploit Absolute Path Traversal to download arbitrary system files...

8.7CVSS0.00589EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/01/16 2:32 a.m.3 views

CVE-2026-1018 Gotac|Police Statistics Database System - Arbitrary File Read

Police Statistics Database System developed by Gotac has an Arbitrary File Read vulnerability, allowing Unauthenticated remote attacker to exploit Absolute Path Traversal to download arbitrary system files...

8.7CVSS6.8AI score0.00589EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/16 2:32 a.m.3 views

CVE-2026-1018

Police Statistics Database System developed by Gotac has an Arbitrary File Read vulnerability, allowing Unauthenticated remote attacker to exploit Absolute Path Traversal to download arbitrary system files...

8.7CVSS5.7AI score0.00589EPSS
Exploits0References3
CVE
CVE
added 2026/01/16 2:32 a.m.12 views

CVE-2026-1018

CVE-2026-1018 affects the Police Statistics Database System developed by Gotac. The vulnerability is an Arbitrary File Read via Absolute Path Traversal, allowing unauthenticated remote attackers to download arbitrary system files. The available sources consistently describe the impact as read acc...

8.7CVSS6.8AI score0.00589EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2026/01/16 2:16 a.m.5 views

CVE-2025-61943

The vulnerability, if exploited, could allow an authenticated miscreant Process Optimization Standard User to tamper with queries in Captive Historian and achieve code execution under SQL Server administrative privileges, potentially resulting in complete compromise of the SQL Server...

7.8CVSS6.2AI score0.00328EPSS
Exploits0References4
EUVD
EUVD
added 2026/01/16 2:3 a.m.2 views

EUVD-2026-2990

Delta Electronics DIAView has multiple vulnerabilities...

9.8CVSS6.7AI score0.00525EPSS
Exploits0References2
EUVD
EUVD
added 2026/01/16 12:30 a.m.3 views

EUVD-2026-3016

EUVD-2026-3016...

8.5CVSS6.4AI score0.00213EPSS
Exploits1References4
OSV
OSV
added 2026/01/16 12:16 a.m.4 views

CVE-2021-47811

Grocery Crud 1.6.4 contains a SQL injection vulnerability in the orderby parameter that allows remote attackers to manipulate database queries. Attackers can inject malicious SQL code through the orderby parameter in POST requests to the ajaxlist endpoint to potentially extract or modify database...

9.1CVSS5.8AI score
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/01/16 12:0 a.m.8 views

PT-2026-3208

Police Statistics Database System developed by Gotac has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attacker to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

9.8CVSS8.5AI score0.00636EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/01/16 12:0 a.m.4 views

PT-2026-3307

Name of the Vulnerable Software and Affected Versions WeGIA versions prior to 3.6.2 Description WeGIA is a web manager for charitable institutions. A SQL Injection issue exists that allows for full database exfiltration, exposure of sensitive PII, and potential arbitrary file reads in misconfigur...

7.2CVSS7.5AI score0.00377EPSS
Exploits1References8
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.3 views

MiracleLinux 4 : mysql-5.1.67-1.0.1.AXS4 (AXSA:2013-100:02)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-100:02 advisory. MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many...

6.8CVSS5.7AI score0.03177EPSS
Exploits2References10
CNNVD
CNNVD
added 2026/01/16 12:0 a.m.3 views

AVEVA Process Optimization SQL injection vulnerability

AVEVA Process Optimization is a real-time process optimization software developed by the British company AVEVA. AVEVA Process Optimization has a SQL injection vulnerability. This vulnerability arises because authenticated attackers can manipulate queries in Captive Historian and execute code,...

9.3CVSS6.1AI score0.00328EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/01/16 12:0 a.m.3 views

PT-2026-3207

Police Statistics Database System developed by Gotac has a Absolute Path Traversal vulnerability, allowing unauthenticated remote attackers to enumerate the system file directory...

6.9CVSS7.1AI score0.00461EPSS
Exploits0References3
Rows per page
Query Builder