MAL-2025-16162 Malicious code in bric-gis (npm)

The package bric-gis was found to contain malicious code...

CVE-2024-1100

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Vadi Corporate Information Systems DIGIKENT GIS allows SQL Injection. This issue affects DIGIKENT GIS: through 2.23.5...

Command Execution Vulnerability in SuperMap iServer of Beijing SuperMap Software Co.

SuperMap iServer is a cloud GIS application server based on high-performance cross-platform GIS kernel, providing full-featured GIS service publishing, management and aggregation capabilities, and supporting multi-level extension development. A command execution vulnerability exists in SuperMap...

编号撤回

Esri ArcGIS is a powerful desktop GIS software from Esri. This CVE number has been withdrawn...

PT-2024-31845 · Fujian Kelixin · Fujian Kelixin Communication Command/Dispatch Platform

Name of the Vulnerable Software and Affected Versions: Fujian Kelixin Communication Command and Dispatch Platform versions =7.6.6.4391 Description: The issue is related to SQL Injection, which can be exploited via the "/client/get gis fence.php" API endpoint. There is no information provided abou...

Kelixin Communication Command and Dispatch Platform 安全漏洞

Kelixin Communication Command and Dispatch Platform is a command and dispatch platform from Kelixin, Inc. A security vulnerability exists in Kelixin Communication Command and Dispatch Platform version 7.6.6.4391 and prior versions, which originates from the /client/getgisfence.php page that...

CVE-2024-1100

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Vadi Corporate Information Systems DIGIKENT GIS allows SQL Injection. This issue affects DIGIKENT GIS: through 2.23.5...

CVE-2024-1100

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Vadi Corporate Information Systems DIGIKENT GIS allows SQL Injection. This issue affects DIGIKENT GIS: through 2.23.5...

CVE-2024-1100 SQLi in Vadi Corporate Information Systems' DIGIKENT GIS

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Vadi Corporate Information Systems DIGIKENT GIS allows SQL Injection. This issue affects DIGIKENT GIS: through 2.23.5...

CVE-2024-1100 SQLi in Vadi Corporate Information Systems' DIGIKENT GIS

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Vadi Corporate Information Systems DIGIKENT GIS allows SQL Injection. This issue affects DIGIKENT GIS: through 2.23.5...

CVE-2024-1100

The CVE-2024-1100 entry concerns a SQL injection vulnerability in Vadi Corporate Information Systems DIGIKENT GIS, affecting DIGIKENT GIS versions up to 2.23.5. The issue arises from improper neutralization of special elements in SQL commands (SQL Injection). Documented impact is severe, with hig...

Vadi Corporate Information Systems SQL注入漏洞

Vadi Corporate Information Systems is an information system of Vadi Corporation. Vadi Corporate Information Systems DIGIKENT GIS 2.23.5 and prior versions are vulnerable to a SQL injection vulnerability that stems from the presence of a SQL injection vulnerability...

PT-2024-16692 · Unknown · Digikent Gis

Name of the Vulnerable Software and Affected Versions: DIGIKENT GIS versions through 2.23.5 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For...

BIT-DJANGO-2020-9402

Django 1.11 before 1.11.29, 2.2 before 2.2.11, and 3.0 before 3.0.4 allows SQL Injection if untrusted data is used as a tolerance parameter in GIS functions and aggregates on Oracle. By passing a suitably crafted tolerance to GIS functions and aggregates on Oracle, it was possible to break escapi...

VulnCheck KEV: CVE-2023-7309

A path traversal vulnerability exists in the Dahua Smart Park Integrated Management Platform also referred to as the Dahua Smart Campus Integrated Management Platform, affecting the SOAP-based GIS bitmap upload interface. The flaw allows unauthenticated remote attackers to upload arbitrary...

SUSE CVE-2021-35631

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: GIS. Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...

Unauthorized access vulnerability in SuperMap iServer of Beijing SuperMap Software Co. Ltd (CNVD-2023-61163)

SuperMap iServer is a cloud GIS application server based on high-performance cross-platform GIS kernel. An unauthorized access vulnerability exists in SuperMap iServer of Beijing SuperMap Software Co. Ltd, which can be exploited by attackers to obtain sensitive information...

Important: Red Hat Security Advisory: mysql:8.0 security, bug fix, and enhancement update

An update for the mysql:8.0 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 8 : mysql:8.0 (RHSA-2023:3087)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3087 advisory. MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and...

Important: mysql:8.0 security, bug fix, and enhancement update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. The following packages have been upgraded to a later upstream version: mysql 8.0.32. BZ2177734, BZ2177735, BZ2177736 Security Fixes: mysql: Server:...