54 matches found
CVE-2026-9642
Delta Electronics DIAView has a reported vulnerability where unverified remote attackers can access the configured database due to a security flaw in the DIAView software. The available public document describes unauthenticated remote access to the database as the impact. No concrete fix/mitigati...
EUVD-2026-31970
There is a mitigation bypass / incomplete fix for CVE-2025-62582 Unauthenticated Remote Database Access An unauthenticated remote attacker can access configured databases in a DIAView project...
CVE-2026-9642
...
CVE-2026-1497
Incorrect resolving of namespaces in composite databases in Neo4j Enterprise edition prior to versions 2026.02 and 5.26.22 can lead to the following scenario: an admin that intends to give a user an access to a remote database constituent "namespace.name" will inadvertently grant access to any...
CVE-2026-20002
A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this...
Browan Communications PrismX MX100 Trust Management Vulnerability
The Browan Communications PrismX MX100 is a wireless router produced by Browan Communications in Taiwan, China. The PrismX MX100 has a trust management vulnerability, which stems from the use of hard-coded credentials. This vulnerability could allow unverified remote attackers to log into databas...
Advantech WebAccess/SCADA
RISK EVALUATION Successful exploitation of these vulnerabilities could allow an authenticated attacker to read or modify a remote database. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize...
The vulnerability of AndSoft e-TMS software management system for transportation operations lies in the lack of protective measures for the SQL query structure, allowing attackers to gain access to create, update, and delete data in the database.
The vulnerability of the AndSoft e-TMS transportation management software lies in the lack of measures taken to protect the SQL query structure during the processing of the USRMAIL parameter. Exploiting this vulnerability can allow an attacker to remotely gain access to the ability to create,...
EUVD-2004-2349
Malware in sbrugna...
EUVD-2007-3075
Malware in sbrugna...
EUVD-2007-3758
Malware in sbrugna...
EUVD-2019-13754
Malware in sbrugna...
EUVD-2002-1482
Malware in sbrugna...
EUVD-2016-10776
Malware in sbrugna...
EUVD-2024-52697
Malicious code in bioql PyPI...
EUVD-2024-50029
Malicious code in bioql PyPI...
EUVD-2024-27402
Malicious code in bioql PyPI...
CVE-2021-38159
In certain Progress MOVEit Transfer versions before 2021.0.4 aka 13.0.4, SQL injection in the MOVEit Transfer web application could allow an unauthenticated remote attacker to gain access to the database. Depending on the database engine being used MySQL, Microsoft SQL Server, or Azure SQL, an...
CVE-2020-20474
White Shark System WSS 1.3.2 has a SQL injection vulnerability. The vulnerability stems from the defaulttaskedituser.php files failing to filter the csatouser parameter. Remote attackers can exploit the vulnerability to obtain database sensitive information...