Lucene search
K

9 matches found

CNNVD
CNNVD
added 2026/04/22 12:0 a.m.4 views

aEnrich a+HRD 安全漏洞

aEnrich a+HRD is a comprehensive human resource development solution provided by aEnrich Corporation. aEnrich a+HRD has a security vulnerability; this vulnerability stems from lack of authorization, which may allow authenticated remote attackers to arbitrarily read database content through specif...

7.1CVSS5.8AI score0.00049EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/10 12:0 a.m.3 views

PT-2026-7269

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager versions prior to 2024 SU5 Description A SQL injection issue exists in Ivanti Endpoint Manager. A remote authenticated attacker can potentially read arbitrary data from the database through this flaw. Recommendations...

6.5CVSS6AI score0.00206EPSS
Exploits0References9
Vulnrichment
Vulnrichment
added 2025/12/08 7:41 a.m.1 views

CVE-2025-14254 Galaxy Software Services|Vitals ESP - SQL Injection

Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.1CVSS7.6AI score0.0004EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/11/28 7:40 a.m.4 views

CVE-2025-13770 Uniong|WebITR - SQL Injection

WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.1CVSS0.00038EPSS
Exploits0References2
OSV
OSV
added 2025/10/13 10:15 p.m.0 views

CVE-2025-62385

SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database...

6.5CVSS6AI score
Exploits0References1
CVE
CVE
added 2025/10/13 9:11 p.m.4 views

CVE-2025-62388

CVE-2025-62388 is an SQL injection in Ivanti Endpoint Manager that enables a remote authenticated attacker to read arbitrary data from the database. The Ivanti security advisory bundle lists this CVE among multiple SQL injection issues and indicates that fixes are being rolled into updates; speci...

6.5CVSS6AI score0.00338EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/10/13 12:0 a.m.2 views

PT-2025-41829

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager affected versions not specified Description A SQL injection issue exists in Ivanti Endpoint Manager. A remotely authenticated attacker can potentially read arbitrary data from the database. The issue allows for...

6.5CVSS7.1AI score0.00338EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/08/22 11:25 a.m.3 views

CVE-2025-9255 Uniong|WebITR - SQL Injection

WebITR developed by Uniong has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...

8.7CVSS8.6AI score0.00088EPSS
Exploits0References2
CNVD
CNVD
added 2020/08/08 12:0 a.m.1 views

SQL Injection Vulnerability in Face Recognition Management System of Hanvon Technology Co.

The team is committed to the research and development of face recognition application management system, using face recognition technology as the entry point, combined with Internet technology, cloud computing, big data analysis, cloud storage and other technologies, to develop a series of...

7.9AI score
Exploits0
Rows per page
Query Builder