EUVD-2022-2428

Malicious code in bioql PyPI...

CVE-2024-45450

Permission control vulnerability in the software update module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2020-15887

A SQL injection vulnerability in softwareupdatecontroller.php in the Software Update module before 1.6 for MunkiReport allows attackers to execute arbitrary SQL commands via the last URL parameter of the /module/softwareupdate/gettabdata/ endpoint...

Huawei HarmonyOS and EMUI Privilege Control Vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. A privilege control vulnerability exists in Huawei...

CVE-2024-45450

Permission control vulnerability in the software update module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-45450: Exposure of Sensitive Information to an Unauthorized Actor

Permission control vulnerability in the software update module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2020-15887

A SQL injection vulnerability in softwareupdatecontroller.php in the Software Update module before 1.6 for MunkiReport allows attackers to execute arbitrary SQL commands via the last URL parameter of the /module/softwareupdate/gettabdata/ endpoint...

PT-2020-14688

Name of the Vulnerable Software and Affected Versions MunkiReport Software Update module versions prior to 1.6 Description A SQL injection issue in the softwareupdate controller.php file allows attackers to execute arbitrary SQL commands via the last URL parameter of the "/module/softwareupdate/g...

CVE-2020-15887: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in softwareupdatecontroller.php in the Software Update module before 1.6 for MunkiReport allows attackers to execute arbitrary SQL commands via the last URL parameter of the /module/softwareupdate/gettabdata/ endpoint...