Lucene search
+L

70 matches found

CVE
CVE
•added 2025/12/24 7:37 p.m.•34 views

CVE-2025-68914

The CVE-2025-68914 entry describes a SQL injection in Riello UPS NetMan 208 Application before 1.12 via cgi-bin/login.cgi username, enabling manipulation such as deleting LOGINFAILEDTABLE. Affected product: Riello UPS NetMan 208 Application (versions

6.5CVSS5.8AI score0.00223EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/24 7:37 p.m.•8 views

CVE-2025-68914

Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/login.cgi username SQL Injection. For example, an attacker can delete the LOGINFAILEDTABLE table...

6.5CVSS5.8AI score0.00223EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/12/24 12:00 a.m.•25 views

PT-2025-53346

Name of the Vulnerable Software and Affected Versions Riello UPS NetMan 208 Application versions prior to 1.12 Description The Riello UPS NetMan 208 Application, before version 1.12, contains a cross-site scripting XSS issue in the cgi-bin/loginbanner w.cgi component. This allows for the injectio...

5.5CVSS6.1AI score0.00204EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/24 12:00 a.m.•10 views

CVE-2025-68916: Path Traversal: '/../filedir'

Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload with resultant code execution...

9.1CVSS6.1AI score0.02618EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/24 12:00 a.m.•9 views

CVE-2025-68915: Improper Neutralization of Input During Web Page Generation

Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/loginbannerw.cgi XSS via a crafted banner...

5.5CVSS5.8AI score0.00204EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2025/12/24 12:00 a.m.•20 views

PT-2025-53347

Name of the Vulnerable Software and Affected Versions Riello UPS NetMan 208 Application versions prior to 1.12 Description The software contains a directory traversal flaw in the cgi-bin/certsupload.cgi component. This allows for file upload outside the intended path, potentially leading to code...

9.1CVSS7.4AI score0.02618EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/24 12:00 a.m.•12 views

CVE-2025-68914: Improper Neutralization of Special Elements used in an SQL Command

Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/login.cgi username SQL Injection. For example, an attacker can delete the LOGINFAILEDTABLE table...

6.5CVSS5.8AI score0.00223EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2025/12/24 12:00 a.m.•16 views

Riello UPS NetMan 208 安全漏洞

Riello UPS NetMan 208 is a network management card from Riello UPS, Italy. A security vulnerability exists in Riello UPS NetMan 208 versions prior to 1.12, which stems from the presence of directory traversal in cgi-bin/certsupload.cgi, which could lead to file uploads and code execution...

9.1CVSS7.2AI score0.02618EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/12/24 12:00 a.m.•31 views

PT-2025-53345

Name of the Vulnerable Software and Affected Versions Riello UPS NetMan 208 Application versions prior to 1.12 Description The Riello UPS NetMan 208 Application is affected by a SQL injection issue in the cgi-bin/login.cgi script. Specifically, the username parameter is susceptible to SQL injecti...

6.5CVSS7.6AI score0.00223EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2025/12/24 12:00 a.m.•20 views

Riello UPS NetMan 208 SQL注入漏洞

Riello UPS NetMan 208 is a network management card from Riello UPS, Italy. A SQL injection vulnerability exists in Riello UPS NetMan 208 versions prior to 1.12, which originates from the presence of SQL injection in cgi-bin/login.cgi, which may result in table deletion...

6.5CVSS7.8AI score0.00223EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2017-15954

Malware in sbrugna...

10CVSS8.2AI score0.02625EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•26 views

EUVD-2024-49451

Malicious code in bioql PyPI...

10CVSS9.2AI score0.01265EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/05/23 9:05 a.m.•19 views

CVE-2024-8877

Improper neutralization of special elements results in a SQL Injection vulnerability in Riello Netman 204. It is only limited to the SQLite database of measurement data.This issue affects Netman 204: through 4.05...

9.8CVSS7.9AI score0.77265EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
•added 2025/05/23 7:20 a.m.•24 views

CVE-2024-8878

The password recovery mechanism for the forgotten password in Riello Netman 204 allows an attacker to reset the admin password and take over control of the device.This issue affects Netman 204: through 4.05...

10CVSS7.2AI score0.01265EPSS
SaveExploits2References1
VulnCheck KEV
VulnCheck KEV
•added 2024/10/15 12:00 a.m.•4 views

VulnCheck KEV: CVE-2024-8877

Improper neutralization of special elements results in a SQL Injection vulnerability in Riello Netman 204. It is only limited to the SQLite database of measurement data.This issue affects Netman 204: through 4.05...

9.8CVSS8.3AI score0.77265EPSS
SaveIn wildExploits3References309
osv_cve
osv_cve
•added 2024/09/25 1:15 a.m.•20 views

CVE-2024-8877

Improper neutralization of special elements results in a SQL Injection vulnerability in Riello Netman 204. It is only limited to the SQLite database of measurement data.This issue affects Netman 204: through 4.05...

9.8CVSS5.8AI score0.77265EPSS
SaveExploits3References2
osv_cve
osv_cve
•added 2024/09/25 1:15 a.m.•33 views

CVE-2024-8878

The password recovery mechanism for the forgotten password in Riello Netman 204 allows an attacker to reset the admin password and take over control of the device.This issue affects Netman 204: through 4.05...

9.8CVSS5.8AI score0.01265EPSS
SaveExploits2References2
NVD
NVD
•added 2024/09/25 1:15 a.m.•52 views

CVE-2024-8877

Improper neutralization of special elements results in a SQL Injection vulnerability in Riello Netman 204. It is only limited to the SQLite database of measurement data.This issue affects Netman 204: through 4.05...

9.8CVSS0.77265EPSS
SaveExploits3References2
NVD
NVD
•added 2024/09/25 1:15 a.m.•62 views

CVE-2024-8878

The password recovery mechanism for the forgotten password in Riello Netman 204 allows an attacker to reset the admin password and take over control of the device.This issue affects Netman 204: through 4.05...

10CVSS0.01265EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2024/09/25 12:00 a.m.•23 views

RIELLO UPS NetMan SQL注入漏洞

RIELLO UPS NetMan is a network adapter from RIELLO UPS, Italy. A security vulnerability exists in RIELLO UPS NetMan version 204 4.05, which originates from improper neutralization in the presence of a particular element, resulting in a SQL injection vulnerability...

9.8CVSS9.7AI score0.77265EPSS
SaveExploits3References3
Rows per page
Query Builder