Lucene search
+L

30 matches found

Positive Technologies
Positive Technologies
added 2023/09/22 12:00 a.m.8 views

PT-2023-28894 · Unknown · Taxonworks

Name of the Vulnerable Software and Affected Versions: TaxonWorks versions prior to 0.34.0 Description: A SQL injection issue was found in TaxonWorks, allowing authenticated attackers to extract arbitrary data from the database, including the users table, which may lead to information disclosure...

6.5CVSS6.7AI score0.00453EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2023/06/02 12:00 a.m.18 views

PT-2023-22377 · Unknown · Bt21 X Bts Wallpaper

Name of the Vulnerable Software and Affected Versions: BT21 x BTS Wallpaper app version 12 for Android Description: The issue allows unauthorized applications to request permission to insert data into the database that records user personal preferences. This data is loaded into memory when the...

5.5CVSS7.2AI score0.00366EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2023/06/01 12:00 a.m.10 views

PT-2023-22375 · Google · Android

Name of the Vulnerable Software and Affected Versions: Glitter Unicorn Wallpaper app for Android versions 7.0 through 8.0 Description: The issue allows unauthorized applications to inject data into the database that stores user personal preferences, which can be loaded into memory and used when t...

7.5CVSS7.2AI score0.00845EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/05/23 12:00 a.m.7 views

PT-2023-17043 · Unknown · Mobilmen Terminal

Name of the Vulnerable Software and Affected Versions: Mobilmen Terminal Software versions prior to 3 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

9.8CVSS9.7AI score0.0062EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/04/18 12:00 a.m.17 views

PT-2023-9169 · Unknown · Schuhfried

Name of the Vulnerable Software and Affected Versions: SCHUHFRIED version 8.22.00 Description: The issue is related to the use of hardcoded credentials in the SCHUHFRIED system, which can be exploited by a remote attacker to obtain access to protected information using a specially crafted curl...

9.8CVSS9.1AI score0.00805EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2023/04/03 12:00 a.m.13 views

PT-2023-17225

Name of the Vulnerable Software and Affected Versions Akbim Computer Panon versions prior to 1.0.2 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations F...

9.8CVSS7.4AI score0.00704EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2022/11/08 12:00 a.m.7 views

PT-2022-6952 · Unknown · Qms Automotive

Name of the Vulnerable Software and Affected Versions: QMS Automotive versions prior to V12.39 Description: The issue is related to the storage of critical information in plaintext, which could allow a remote attacker to disclose user credentials. This may enable the attacker to gain access to...

9.1CVSS7.4AI score0.00325EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2022/09/02 12:00 a.m.6 views

PT-2022-8647 · Unknown +1 · Modsecurity +2

Name of the Vulnerable Software and Affected Versions: Modsecurity owasp-modsecurity-crs version 3.2.0 Description: The issue allows attackers to bypass Modsecurity WAF protection using comment characters and variable assignments in SQL syntax, enabling them to implement SQL injection attacks on...

9.8CVSS7.9AI score0.02542EPSS
SaveExploits4References42
Positive Technologies
Positive Technologies
added 2021/11/16 12:00 a.m.10 views

PT-2021-22653 · Unknown · Ipack Scada

Name of the Vulnerable Software and Affected Versions: Ipack SCADA Software versions prior to 1.1.0 Description: The issue is related to improper handling of parameters, allowing Blind SQL Injection. This can potentially be exploited to extract or modify sensitive data from the database...

9.8CVSS7.6AI score0.14501EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2021/07/14 12:00 a.m.23 views

PT-2021-7654

Name of the Vulnerable Software and Affected Versions SonicWall Secure Remote Access SRA appliances versions 8.x through 9.0.0.9-26sv Description The issue is related to improper neutralization of a SQL command, leading to a SQL injection vulnerability. This vulnerability impacts end-of-life Secu...

10CVSS7.2AI score0.29866EPSS
SaveExploits0References13
Rows per page
Query Builder