Missing Authorization

Overview fuxa-server is a Web-based Process Visualization SCADA/HMI/Dashboard software Affected versions of this package are vulnerable to Missing Authorization in the scheduler endpoint. An attacker can gain unauthorized access to create, modify, or delete schedules by sending crafted requests t...

SUSE CVE-2014-9220

SQL injection vulnerability in OpenVAS Manager before 4.0.6 and 5.x before 5.0.7 allows remote attackers to execute arbitrary SQL commands via the timezone parameter in a modifyschedule OMP command...

PT-2014-8885

Name of the Vulnerable Software and Affected Versions OpenVAS Manager versions prior to 4.0.6 OpenVAS Manager versions 5.x prior to 5.0.7 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the timezone parameter in a modify schedule OMP command...