Lucene search
K

14 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2015-8135

Malware in sbrugna...

4.3CVSS6.4AI score0.00254EPSS
Exploits2References5
RedhatCVE
RedhatCVE
added 2025/05/23 2:18 a.m.4 views

CVE-2023-37777

A SQL injection vulnerability exists in Synnefo Internet Management Software IMS version 2023 and earlier. This vulnerability occurs due to improper input validation in a specific API endpoint parameter allowing an attacker to manipulate SQL queries via crafted input. Successful exploitation coul...

9.8CVSS8.3AI score0.00109EPSS
Exploits0References1
NVD
NVD
added 2025/01/22 4:15 p.m.7 views

CVE-2023-37777

A SQL injection vulnerability exists in Synnefo Internet Management Software IMS version 2023 and earlier. This vulnerability occurs due to improper input validation in a specific API endpoint parameter allowing an attacker to manipulate SQL queries via crafted input. Successful exploitation coul...

9.8CVSS0.00109EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/01/22 12:0 a.m.3 views

PT-2025-1435 · Unknown · Synnefo Internet Management

Name of the Vulnerable Software and Affected Versions: Synnefo Internet Management Software versions 2023 and earlier Description: A SQL injection issue exists due to improper input validation in a specific API endpoint parameter, allowing an attacker to manipulate SQL queries via crafted input...

9.8CVSS8.3AI score0.00109EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/01/22 12:0 a.m.6 views

CVE-2023-37777

A SQL injection vulnerability exists in Synnefo Internet Management Software IMS version 2023 and earlier. This vulnerability occurs due to improper input validation in a specific API endpoint parameter allowing an attacker to manipulate SQL queries via crafted input. Successful exploitation coul...

9.7AI score0.00109EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/01/22 12:0 a.m.2 views

Synnefo Internet Management Software 安全漏洞

Synnefo Internet Management Software SynnefoIMS is an Internet management software from Synnefo, Inc. A security vulnerability exists in Synnefo Internet Management Software version 2023 and prior releases that stems from the presence of a SQL injection vulnerability...

9.8CVSS7.8AI score0.00109EPSS
Exploits0References3
CVE
CVE
added 2025/01/22 12:0 a.m.66 views

CVE-2023-37777

CVE-2023-37777 affects Synnefo Internet Management Software (IMS) up to version 2023 and earlier. Root cause: improper input validation in a specific API endpoint parameter enables SQL injection. Exploitation could reveal database records with DB administrator privileges and may enable privilege ...

9.8CVSS9.7AI score0.00109EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/01/22 12:0 a.m.11 views

CVE-2023-37777

A SQL injection vulnerability exists in Synnefo Internet Management Software IMS version 2023 and earlier. This vulnerability occurs due to improper input validation in a specific API endpoint parameter allowing an attacker to manipulate SQL queries via crafted input. Successful exploitation coul...

0.00109EPSS
Exploits0References2
CNVD
CNVD
added 2015/12/18 12:0 a.m.1 views

Synnefo Internet Management Software Cross-Site Scripting Vulnerability

Synnefo Internet Management Software IMS is a suite of network management software from Synnefo India. A cross-site scripting vulnerability exists in Synnefo IMS 2015 version of synnefoclient, which stems from the packagehistory/listusagesdata URI failing to adequately filter the 'planname '...

4.3CVSS6.1AI score0.00254EPSS
Exploits2References1
NVD
NVD
added 2015/12/15 9:59 p.m.10 views

CVE-2015-8247

Cross-site scripting XSS vulnerability in synnefoclient in Synnefo Internet Management Software IMS 2015 allows remote attackers to inject arbitrary web script or HTML via the planname parameter to packagehistory/listusagesdata...

4.3CVSS5.7AI score0.00254EPSS
Exploits2References3
Prion
Prion
added 2015/12/15 9:59 p.m.6 views

Cross site scripting

Cross-site scripting XSS vulnerability in synnefoclient in Synnefo Internet Management Software IMS 2015 allows remote attackers to inject arbitrary web script or HTML via the planname parameter to packagehistory/listusagesdata...

4.3CVSS6.1AI score0.00254EPSS
Exploits2References3Affected Software1
Cvelist
Cvelist
added 2015/12/15 9:0 p.m.16 views

CVE-2015-8247

Cross-site scripting XSS vulnerability in synnefoclient in Synnefo Internet Management Software IMS 2015 allows remote attackers to inject arbitrary web script or HTML via the planname parameter to packagehistory/listusagesdata...

5.7AI score0.00254EPSS
Exploits2References3
CVE
CVE
added 2015/12/15 9:0 p.m.31 views

CVE-2015-8247

CVE-2015-8247 is a reflected Cross‑Site Scripting (XSS) vulnerability in Synnefo Internet Management Software (IMS) 2015 affecting the synnefoclient. The issue arises in the packagehistory/listusagesdata endpoint via the plan_name parameter, enabling remote attackers to inject arbitrary script/HT...

4.3CVSS5.9AI score0.00254EPSS
Exploits2References3Affected Software1
Packet Storm
Packet Storm
added 2015/12/14 12:0 a.m.37 views

Synnefo Client Cross Site Scripting

Information ================================= Vulnerability type: Cross Site Scripting XSS Vendor: http://www.synnefoims.com/ Product: Synnefo Client for Synnefo Internet Management Software IMS 2015 http://www.synnefoims.com/products.html CVE Reference: =================================...

4.3CVSS0.00254EPSS
Exploits2
Rows per page
Query Builder