Lucene search
+L

25 matches found

NVD
NVD
•added 2026/01/20 6:16 p.m.•16 views

CVE-2025-67261

Abacre Retail Point of Sale 14.0.0.396 is vulnerable to content-based blind SQL injection. The vulnerability exists in the Search function of the Orders page...

6.5CVSS0.00209EPSS
SaveExploits2References2
OSV
OSV
•added 2026/01/20 6:16 p.m.•18 views

CVE-2025-67261

Abacre Retail Point of Sale 14.0.0.396 is vulnerable to content-based blind SQL injection. The vulnerability exists in the Search function of the Orders page...

6.5CVSS5.8AI score0.00209EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2026/01/20 12:00 a.m.•31 views

PT-2026-3640

Abacre Retail Point of Sale 14.0.0.396 is affected by a stored cross-site scripting XSS vulnerability in the Clients module. The application fails to properly sanitize user-supplied input stored in the Name and Surname fields. An attacker can insert malicious HTML or script content into these...

6.1CVSS5.2AI score0.00196EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/20 12:00 a.m.•2 views

CVE-2025-67261: Improper Neutralization of Special Elements used in an SQL Command

Abacre Retail Point of Sale 14.0.0.396 is vulnerable to content-based blind SQL injection. The vulnerability exists in the Search function of the Orders page...

6.5CVSS6AI score0.00209EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/20 12:00 a.m.•2 views

CVE-2025-67263: Improper Neutralization of Input During Web Page Generation

Abacre Retail Point of Sale 14.0.0.396 is affected by a stored cross-site scripting XSS vulnerability in the Clients module. The application fails to properly sanitize user-supplied input stored in the Name and Surname fields. An attacker can insert malicious HTML or script content into these...

6.1CVSS5.7AI score0.00196EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2026/01/20 12:00 a.m.•27 views

PT-2026-3637

Abacre Retail Point of Sale 14.0.0.396 is vulnerable to content-based blind SQL injection. The vulnerability exists in the Search function of the Orders page...

5.7AI score0.00209EPSS
SaveExploits2References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2017-1712

Malware in sbrugna...

8.5CVSS8.6AI score0.01036EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2019-12198

Malware in sbrugna...

7.5CVSS7.7AI score0.01172EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2016-0473

Malware in sbrugna...

1.9CVSS7.3AI score0.00379EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/05/22 10:14 a.m.•16 views

CVE-2019-2558

Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications subcomponent: Infrastructure. Supported versions that are affected are 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

7.5CVSS6.4AI score0.01172EPSS
SaveExploits0References1
NVD
NVD
•added 2019/04/23 7:32 p.m.•32 views

CVE-2019-2558

Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications subcomponent: Infrastructure. Supported versions that are affected are 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

7.5CVSS6.2AI score0.01172EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2019/04/23 6:16 p.m.•7 views

CVE-2019-2558

Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications subcomponent: Infrastructure. Supported versions that are affected are 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

6.4AI score0.01172EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/04/23 12:00 a.m.•5 views

CVE-2019-2558: Undefined Security Weakness

Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications subcomponent: Infrastructure. Supported versions that are affected are 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

7.5CVSS5.8AI score0.01172EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/19 12:00 a.m.•2 views

CVE-2018-2862: Undefined Security Weakness

Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications subcomponent: User Interface. Supported versions that are affected are 13.3.8, 13.4.9, 14.0.4 and 14.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

7.1CVSS6.8AI score0.01056EPSS
SaveExploits0References1
OSV
OSV
•added 2017/10/19 5:29 p.m.•12 views

CVE-2017-10065

Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications subcomponent: Security. Supported versions that are affected are 13.2, 13.3, 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

8.5CVSS7.3AI score0.01036EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/10/19 12:00 a.m.•5 views

CVE-2017-10065: Undefined Security Weakness

Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications subcomponent: Security. Supported versions that are affected are 13.2, 13.3, 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

8.5CVSS7.5AI score0.01036EPSS
SaveExploits0References1
CNVD
CNVD
•added 2016/01/23 12:00 a.m.•18 views

Unspecified Vulnerability in Oracle Retail Point-of-Service Mobile POS Component

Oracle Retail Applications is a suite of retail application store solutions. An unspecified vulnerability exists in the Oracle Retail Point-of-Service component, which could be exploited by remote attackers to gain unauthorized access to and modify data, resulting in the disclosure of information...

3.3CVSS6.8AI score0.00373EPSS
SaveExploits0References1
OSV
OSV
•added 2016/01/21 2:59 a.m.•14 views

CVE-2016-0438

Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile POS, a different vulnerability than CVE-2016-0434, CVE-2016-0436, and CVE-2016-0437...

5.8AI score0.00379EPSS
SaveExploits0References2
OSV
OSV
•added 2016/01/21 2:59 a.m.•17 views

CVE-2016-0435

Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality and integrity via vectors related to Mobile POS...

5.8AI score0.00373EPSS
SaveExploits0References2
Prion
Prion
•added 2016/01/21 2:59 a.m.•23 views

Design/Logic Flaw

Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile POS, a different vulnerability than CVE-2016-0434, CVE-2016-0436, and CVE-2016-0437...

1.9CVSS5.5AI score0.00379EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder