Sql injection

A vulnerability classified as critical was found in SevOne Network Management System up to 5.7.2.22. This vulnerability affects the Alert Summary. The manipulation leads to sql injection. The attack can be initiated remotely...

SevOne Network Management System 命令注入漏洞

SevOne Network Management System is the most comprehensive, scalable and application-centric network performance monitoring system for modern NetOps from SevOne, Inc. inclusive versions contain a command injection vulnerability that can be exploited by remote attackers to cause privilege escalati...

CVE-2020-36531 SevOne Network Management System Device Manager Page injection

A vulnerability, which was classified as critical, has been found in SevOne Network Management System up to 5.7.2.22. This issue affects the Device Manager Page. An injection leads to privilege escalation. The attack may be initiated remotely...

CVE-2020-36530 SevOne Network Management System Alert Summary sql injection

A vulnerability classified as critical was found in SevOne Network Management System up to 5.7.2.22. This vulnerability affects the Alert Summary. The manipulation leads to sql injection. The attack can be initiated remotely...

CVE-2020-36530

The CVE-2020-36530 entry concerns SevOne Network Management System (vulnerable up to 5.7.2.22) with a SQL injection affecting the Alert Summary. The vulnerability arises from a manipulation that leads to SQL injection, and exploitation is possible remotely. Connected documents indicate a PoC is a...

CVE-2020-36530 SevOne Network Management System Alert Summary sql injection

A vulnerability classified as critical was found in SevOne Network Management System up to 5.7.2.22. This vulnerability affects the Alert Summary. The manipulation leads to sql injection. The attack can be initiated remotely...

CVE-2020-36529 SevOne Network Management System Traceroute traceroute.php command injection

A vulnerability classified as critical has been found in SevOne Network Management System up to 5.7.2.22. This affects the file traceroute.php of the Traceroute Handler. The manipulation leads to privilege escalation with a command injection. It is possible to initiate the attack remotely...

CVE-2020-36529

SevOne Network Management System (up to 5.7.2.22) contains a command-injection vulnerability in traceroute.php of the Traceroute Handler. The issue allows remote attackers to achieve privilege escalation through a crafted input, enabling arbitrary command execution. Public references describe rem...

CVE-2020-36529 SevOne Network Management System Traceroute traceroute.php command injection

A vulnerability classified as critical has been found in SevOne Network Management System up to 5.7.2.22. This affects the file traceroute.php of the Traceroute Handler. The manipulation leads to privilege escalation with a command injection. It is possible to initiate the attack remotely...

CVE-2020-36530: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SevOne Network Management System up to 5.7.2.22. This vulnerability affects the Alert Summary. The manipulation leads to sql injection. The attack can be initiated remotely...

PT-2022-8981

Name of the Vulnerable Software and Affected Versions SevOne Network Management System versions up to 5.7.2.22 Description A critical issue was found in the Alert Summary component, allowing for sql injection through remote manipulation. Recommendations For SevOne Network Management System versio...

PT-2022-8982

Name of the Vulnerable Software and Affected Versions SevOne Network Management System versions up to 5.7.2.22 Description A critical issue has been found in the Device Manager Page, where an injection leads to privilege escalation. The attack may be initiated remotely. Recommendations For versio...

PT-2022-8980

Name of the Vulnerable Software and Affected Versions SevOne Network Management System versions up to 5.7.2.22 Description A critical issue has been discovered that affects the Traceroute Handler, specifically the file traceroute.php. This issue leads to privilege escalation through command...

CVE-2020-36531: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A vulnerability, which was classified as critical, has been found in SevOne Network Management System up to 5.7.2.22. This issue affects the Device Manager Page. An injection leads to privilege escalation. The attack may be initiated remotely...

CVE-2020-36529: Improper Neutralization of Special Elements used in a Command

A vulnerability classified as critical has been found in SevOne Network Management System up to 5.7.2.22. This affects the file traceroute.php of the Traceroute Handler. The manipulation leads to privilege escalation with a command injection. It is possible to initiate the attack remotely...

Siemens SINEC NMS Deserialization Vulnerability

Siemens SINEC NMS is a network management system NMS from Siemens Germany that can be used to centrally monitor, manage, and configure industrial networks with tens of thousands of devices, including safety-related areas, 24 hours a day, 7 days a week. The vulnerability could be exploited to...

Siemens SINEC NMS SQL Injection Vulnerability (CNVD-2022-17792)

Siemens SINEC NMS is a network management system NMS from Siemens Germany that is used to centrally monitor, manage, and configure industrial networks with tens of thousands of devices 24/7, including security-related areas.A SQL injection vulnerability in Siemens SINEC NMS allows a privileged,...

PT-2022-16581 · Siemens · Sinema Server +1

Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V1.0.3 SINEMA Server V14 all versions Description: A security issue allows a privileged authenticated attacker to execute arbitrary commands in the local database. This is achieved by sending specially crafted...

Siemens SINEC NMS 安全漏洞

Siemens SINEC NMS is a network management system NMS from Siemens Germany that can be used to centrally monitor, manage, and configure industrial networks with tens of thousands of devices, including security-related areas, 24 hours a day, 7 days a week. The vulnerability could be exploited to...

The vulnerability of the implementation of proprietary protocols for managing microprogramming software on multi-server platforms Hitachi Energy FOX615 and XCM20 allows a hacker to cause service failures.

The vulnerability of the proprietary protocol used for managing microprogramming software on Hitachi Energy’s multi-server platforms FOX615 and XCM20 is related to data processing deficiencies. Exploiting this vulnerability can allow attackers to cause service failures through Data Communication...