Lucene search
K

165 matches found

NVD
NVD
added 2025/10/14 1:15 p.m.3 views

CVE-2025-10610

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SFS Consulting Information Processing Industry and Foreign Trade Inc. Winsure allows Blind SQL Injection. This issue affects Winsure: through Version dated 21.08.2025...

9.8CVSS0.00339EPSS
Exploits0References2
CVE
CVE
added 2025/10/14 12:43 p.m.17 views

CVE-2025-10610

CVE-2025-10610 corresponds to an SQL injection vulnerability in Winsure (SFS Winsure) caused by improper neutralization of special elements in SQL commands, enabling blind SQL injection. Affected: Winsure versions up to 21.08.2025. Public documentation consistently describes the flaw and its impa...

9.8CVSS5.6AI score0.00339EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.1 views

SFS Winsure SQL注入漏洞

SFS Winsure is an insurance solution suite from SFS Turkey. SFS Winsure versions 21.08.2025 and earlier suffer from a SQL injection vulnerability that stems from improper neutralization of special elements, which could lead to a blind SQL injection attack...

9.8CVSS7.8AI score0.00339EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-2365

Malware in sbrugna...

5.5CVSS6.4AI score0.0042EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-48085

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00507EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2024-48081

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00485EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2022-24578

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GPAC 1.0.1 is affected by a heap-based buffer overflow in SFSAddString at bifs/scriptdec.c. CVE-2022-24578 Note that Nessus relies on the presence of the packag...

7.8CVSS7.9AI score0.0095EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2024-26475

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in radareorg radare2 v.0.9.7 through v.5.8.6 and fixed in v.5.8.8 allows a local attacker to cause a denial of service via the grubsfsreadextent...

5.5CVSS5.5AI score0.00275EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/05/23 10:34 a.m.14 views

CVE-2024-7098

Improper Restriction of XML External Entity Reference vulnerability in SFS Consulting ww.Winsure allows XML Injection. This issue affects ww.Winsure: before 4.6.2...

9.8CVSS5.8AI score0.00485EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:34 a.m.4 views

CVE-2024-6401

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SFS Consulting InsureE GL allows SQL Injection. This issue affects InsureE GL: before 4.6.2...

9.8CVSS5.8AI score0.0042EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:49 a.m.9 views

CVE-2024-7104

Improper Control of Generation of Code 'Code Injection' vulnerability in SFS Consulting ww.Winsure allows Code Injection. This issue affects ww.Winsure: before 4.6.2...

9.8CVSS5.8AI score0.00507EPSS
Exploits0References1
NVD
NVD
added 2024/09/16 3:15 p.m.29 views

CVE-2024-7098

Improper Restriction of XML External Entity Reference vulnerability in SFS Consulting ww.Winsure allows XML Injection. This issue affects ww.Winsure: before 4.6.2...

9.8CVSS0.00485EPSS
Exploits0References2
NVD
NVD
added 2024/09/16 3:15 p.m.18 views

CVE-2024-7104

Improper Control of Generation of Code 'Code Injection' vulnerability in SFS Consulting ww.Winsure allows Code Injection. This issue affects ww.Winsure: before 4.6.2...

9.8CVSS0.00507EPSS
Exploits0References2
NVD
NVD
added 2024/09/16 3:15 p.m.17 views

CVE-2024-6401

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SFS Consulting InsureE GL allows SQL Injection. This issue affects InsureE GL: before 4.6.2...

9.8CVSS0.0042EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2024/09/16 3:15 p.m.4 views

CVE-2024-7104

Improper Control of Generation of Code 'Code Injection' vulnerability in SFS Consulting ww.Winsure allows Code Injection. This issue affects ww.Winsure: before 4.6.2...

9.8CVSS5.8AI score0.00507EPSS
Exploits0References3
OSV
OSV
added 2024/09/16 3:15 p.m.2 views

CVE-2024-7104

Improper Control of Generation of Code 'Code Injection' vulnerability in SFS Consulting ww.Winsure allows Code Injection.This issue affects ww.Winsure: before 4.6.2...

9.8CVSS5.8AI score0.00507EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/09/16 2:55 p.m.31 views

CVE-2024-6401 SQLi in SFS Consulting's InsureE GL

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SFS Consulting InsureE GL allows SQL Injection. This issue affects InsureE GL: before 4.6.2...

9.2CVSS0.0042EPSS
Exploits0References2
CVE
CVE
added 2024/09/16 2:55 p.m.33 views

CVE-2024-6401

CVE-2024-6401 is an SQL Injection vulnerability in SFS Consulting InsureE GL, caused by improper neutralization of special elements in SQL commands. Affected versions are InsureE GL prior to 4.6.2. The issue, documented across multiple feeds (NVD, Red Hat, CVE listing, and related advisories), in...

9.8CVSS5.8AI score0.0042EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/16 2:55 p.m.11 views

CVE-2024-6401 SQLi in SFS Consulting's InsureE GL

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SFS Consulting InsureE GL allows SQL Injection. This issue affects InsureE GL: before 4.6.2...

9.2CVSS5.8AI score0.0042EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/09/16 2:52 p.m.29 views

CVE-2024-7104 Remote Code Execution in SFS Consulting's ww.Winsure

Improper Control of Generation of Code 'Code Injection' vulnerability in SFS Consulting ww.Winsure allows Code Injection. This issue affects ww.Winsure: before 4.6.2...

9.2CVSS0.00507EPSS
Exploits0References2
Rows per page
Query Builder