398 matches found
Nebula Informatics SecHard 安全漏洞
Nebula Informatics SecHard is a multi-module software for implementing a zero-trust architecture from Nebula Informatics. A security vulnerability exists in versions prior to Nebula Informatics SecHard 3.6.2-20250805, which stems from a user-controllable key bypassing authorization and could lead...
CVE-2024-13174
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in E1 Informatics Web Application allows SQL Injection. This issue affects Web Application: through 20250916. NOTE: The vendor did not inform about the completion of the fixing process within the...
CVE-2024-13174
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in E1 Informatics Web Application allows SQL Injection. This issue affects Web Application: through 20250916. NOTE: The vendor did not inform about the completion of the fixing process within the...
CVE-2024-13174
CVE-2024-13174 is an SQL Injection in the E1 Informatics Web Application caused by improper neutralization of special elements in SQL commands. Affected versions are through 20250916. The CVSS 3.1 base score is 8.6 (High) with NETWORK attack vector, no privileges required, no user interaction. Im...
CVE-2024-13174 SQLi in E1 Informatics' Web Application
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in E1 Informatics Web Application allows SQL Injection. This issue affects Web Application: through 20250916. NOTE: The vendor did not inform about the completion of the fixing process within the...
CVE-2024-13174 SQLi in E1 Informatics' Web Application
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in E1 Informatics Web Application allows SQL Injection. This issue affects Web Application: through 20250916. NOTE: The vendor did not inform about the completion of the fixing process within the...
E1 Informatics Web Application SQL注入漏洞
E1 Informatics Web Application is a web application from E1 Informatics Turkey. A SQL injection vulnerability exists in E1 Informatics Web Application 20250916 and earlier versions, which stems from improper neutralization of special elements in SQL commands, which can lead to SQL injection attac...
PT-2025-37993
Name of the Vulnerable Software and Affected Versions: E1 Informatics Web Application versions through 20250916 Description: The E1 Informatics Web Application contains a SQL Injection issue due to improper neutralization of special elements used in an SQL command. This allows attackers to perfor...
CVE-2025-4411 XSS in Dataprom Informatics' PACS-ACSS
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Dataprom Informatics PACS-ACSS allows Cross-Site Scripting XSS. This issue affects PACS-ACSS: before 16.05.2025...
CVE-2025-4411 XSS in Dataprom Informatics' PACS-ACSS
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Dataprom Informatics PACS-ACSS allows Cross-Site Scripting XSS. This issue affects PACS-ACSS: before 16.05.2025...
CVE-2025-4411
CVE-2025-4411 is an XSS vulnerability in Dataprom Informatics PACS-ACSS. The issue arises from improper neutralization of input during web page generation, allowing cross-site scripting. Affected products are Dataprom PACS-ACSS versions prior to 16.05.2025. The CVSS 3.1 base vector is AV:N/AC:L/P...
Dataprom Informatics PACS-ACSS 跨站脚本漏洞
Dataprom Informatics PACS-ACSS is a system for managing employee attendance records, access rights and security control at Dataprom Informatics in Turkey. A cross-site scripting vulnerability exists in Dataprom Informatics PACS-ACSS versions prior to 16.05.2025 that originates from cross-site...
PT-2025-30573
Name of the Vulnerable Software and Affected Versions Dataprom Informatics PACS-ACSS versions prior to 16.05.2025 Description The software contains an Improper Neutralization of Input During Web Page Generation, leading to a Cross-Site Scripting XSS issue. This allows for the injection of malicio...
CVE-2024-12143 SQLi in Mobilteg Mobile Informatics' Mikro Hand Terminal - MikroDB
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mobilteg Mobile Informatics Mikro Hand Terminal - MikroDB allows SQL Injection.This issue affects Mikro Hand Terminal - MikroDB. NOTE: The vendor did not inform about the completion of the fixing...
CVE-2024-12143 SQLi in Mobilteg Mobile Informatics' Mikro Hand Terminal - MikroDB
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mobilteg Mobile Informatics Mikro Hand Terminal - MikroDB allows SQL Injection. This issue affects Mikro Hand Terminal - MikroDB. NOTE: The vendor did not inform about the completion of the fixing...
CVE-2024-11739
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Case Informatics Case ERP allows SQL Injection. This issue affects Case ERP: before V2.0.1...
CVE-2024-11739
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Case Informatics Case ERP allows SQL Injection. This issue affects Case ERP: before V2.0.1...
CVE-2024-11739 SQLi in Case Informatics' Case ERP
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Case Informatics Case ERP allows SQL Injection. This issue affects Case ERP: before V2.0.1...
CVE-2024-11739
CVE-2024-11739 describes an SQL injection in Case ERP prior to v2.0.1 due to improper neutralization of special elements in SQL commands. Affected product: Case ERP (Case Informatics). Impact per sources: potential for high confidentiality, integrity, and availability impact. The issue is mitigat...
CVE-2024-11739 SQLi in Case Informatics' Case ERP
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Case Informatics Case ERP allows SQL Injection. This issue affects Case ERP: before V2.0.1...