Thu, Jul 18 · 05:15 PM CDTCVE-2024-5618
9.9/10 · Must read/watchNVDvuln
Summary
Incorrect Permission Assignment for Critical Resource vulnerability in PruvaSoft Informatics Apinizer Management Console allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Apinizer Management Console: before 2024.05.1.
CVECVE-2024-5618
SeverityCRITICAL
TypeUPDATED
PublishedThu, Jul 18 · 05:15 PM CDT
ModifiedWed, Jun 03 · 02:16 PM CDT
CVE-2012-6437
9.8/10 · Must read/watchNVDvuln
Summary
The device does not properly authenticate users and the potential exists for a remote user to upload a new firmware image to the Ethernet card, whether it is a corrupt or legitimate firmware image. Successful exploitation of this vulnerability could cause loss of availability, integrity, and confidentiality and a disru
CVECVE-2012-6437
SeverityCRITICAL
TypeUPDATED
PublishedThu, Jan 24 · 09:55 PM CST
ModifiedWed, Jun 03 · 02:16 PM CDT
CVE-2015-6490
9.8/10 · Must read/watchNVDvuln
Summary
Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN 15.003 allows remote attackers to execute arbitrary code via unspecified vectors.
CVECVE-2015-6490
SeverityCRITICAL
TypeUPDATED
PublishedWed, Oct 28 · 10:59 AM CDT
ModifiedWed, Jun 03 · 02:16 PM CDT
CVE-2017-7898
9.8/10 · Must read/watchNVDvuln
Summary
An Improper Restriction of Excessive Authentication Attempts issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series A and B,
CVECVE-2017-7898
SeverityCRITICAL
TypeUPDATED
PublishedFri, Jun 30 · 03:29 AM CDT
ModifiedWed, Jun 03 · 02:16 PM CDT
CVE-2017-7903
9.8/10 · Must read/watchNVDvuln
Summary
A Weak Password Requirements issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series A and B, Version 16.00 and prior version
CVECVE-2017-7903
SeverityCRITICAL
TypeUPDATED
PublishedFri, Jun 30 · 03:29 AM CDT
ModifiedWed, Jun 03 · 02:16 PM CDT
CVE-2020-6990
9.8/10 · Must read/watchNVDvuln
Summary
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, The cryptographic key utilized to help protect the account password is hard coded into the RSLogix 500 binary file. An attacker could iden
CVECVE-2020-6990
SeverityCRITICAL
TypeUPDATED
PublishedMon, Mar 16 · 04:15 PM CDT
ModifiedWed, Jun 03 · 02:16 PM CDT
CVE-2024-0857
9.8/10 · Must read/watchNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Universal Software Inc. FlexWater Corporate Water Management allows SQL Injection. This issue affects FlexWater Corporate Water Management: before 5.452.0.
CVECVE-2024-0857
SeverityCRITICAL
TypeUPDATED
PublishedThu, Jul 18 · 06:15 PM CDT
ModifiedWed, Jun 03 · 04:16 PM CDT
CVE-2024-0947
9.8/10 · Must read/watchNVDvuln
Summary
Reliance on Cookies without Validation and Integrity Checking vulnerability in Talya Informatics Elektraweb allows Session Credential Falsification through Manipulation, Accessing/Intercepting/Modifying HTTP Cookies, Manipulating Opaque Client-based Data Tokens. This issue affects Elektraweb: before v17.0.68.
CVECVE-2024-0947
SeverityCRITICAL
TypeUPDATED
PublishedThu, Jun 27 · 10:15 AM CDT
ModifiedWed, Jun 03 · 04:16 PM CDT
CVE-2024-0949
9.8/10 · Must read/watchNVDvuln
Summary
Missing Authentication, Files or Directories Accessible to External Parties, Use of Hard-coded Credentials vulnerability in Talya Informatics Elektraweb allows Authentication Bypass. This issue affects Elektraweb: before v17.0.68.
CVECVE-2024-0949
SeverityCRITICAL
TypeUPDATED
PublishedThu, Jun 27 · 10:15 AM CDT
ModifiedWed, Jun 03 · 04:16 PM CDT
CVE-2024-1100
9.8/10 · Must read/watchNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Vadi Corporate Information Systems DIGIKENT GIS allows SQL Injection. This issue affects DIGIKENT GIS: through 2.23.5.
CVECVE-2024-1100
SeverityCRITICAL
TypeUPDATED
PublishedThu, May 30 · 12:15 PM CDT
ModifiedWed, Jun 03 · 04:16 PM CDT
CVE-2024-1107
9.8/10 · Must read/watchNVDvuln
Summary
Authorization Bypass Through User-Controlled Key vulnerability in Talya Informatics Travel APPS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Travel APPS: before v17.0.68.
CVECVE-2024-1107
SeverityCRITICAL
TypeUPDATED
PublishedThu, Jun 27 · 01:15 PM CDT
ModifiedWed, Jun 03 · 04:16 PM CDT
CVE-2024-1202
9.8/10 · Must read/watchNVDvuln
Summary
Authentication Bypass by Primary Weakness vulnerability in XPodas Octopod allows Authentication Bypass. This issue affects Octopod: before v1. NOTE: The vendor was contacted and it was learned that the product is not supported.
CVECVE-2024-1202
SeverityCRITICAL
TypeUPDATED
PublishedThu, Mar 21 · 02:51 AM CDT
ModifiedWed, Jun 03 · 04:16 PM CDT
CVE-2024-2865
9.8/10 · Must read/watchNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mergen Software Quality Management System allows SQL Injection. This issue affects Quality Management System: through 25032024.
CVECVE-2024-2865
SeverityCRITICAL
TypeUPDATED
PublishedMon, Mar 25 · 02:15 PM CDT
ModifiedWed, Jun 03 · 04:16 PM CDT
CVE-2024-4228
9.8/10 · Must read/watchNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 200 - Exposure of Sensitive Information to an Unauthorized Actor, CWE - 522 - Insufficiently Protected Credentials vulnerability in Magarsus Consultancy SSO (Single Sign On) allows SQL Injection. This issue affects SSO (Single S
CVECVE-2024-4228
SeverityCRITICAL
TypeUPDATED
PublishedWed, Jun 26 · 03:15 PM CDT
ModifiedWed, Jun 03 · 04:16 PM CDT
CVE-2024-4259
9.8/10 · Must read/watchNVDvuln
Summary
Missing Authorization vulnerability in SAMPAŞ Holding AKOS (AkosCepVatandasService), SAMPAŞ Holding AKOS (TahsilatService) allows Collect Data as Provided by Users. This issue affects AKOS (AkosCepVatandasService): before V2.0; AKOS (TahsilatService): before V1.0.7.
CVECVE-2024-4259
SeverityCRITICAL
TypeUPDATED
PublishedTue, Sep 03 · 02:15 PM CDT
ModifiedWed, Jun 03 · 04:16 PM CDT
CVE-2024-4428
9.8/10 · Must read/watchNVDvuln
Summary
Missing Authentication for Critical Function, Missing Authorization vulnerability in Menulux Information Technologies Managment Portal allows Collect Data as Provided by Users. This issue affects Managment Portal: through 21.05.2024.
CVECVE-2024-4428
SeverityCRITICAL
TypeUPDATED
PublishedThu, Aug 29 · 11:15 AM CDT
ModifiedWed, Jun 03 · 04:16 PM CDT
CVE-2024-5683
9.8/10 · Must read/watchNVDvuln
Summary
Improper Control of Generation of Code ('Code Injection') vulnerability in Next4Biz CRM & BPM Software Business Process Manangement (BPM) allows Remote Code Inclusion. This issue affects Business Process Manangement (BPM): from 6.6.4.4 before 6.6.4.5.
CVECVE-2024-5683
SeverityCRITICAL
TypeUPDATED
PublishedMon, Jun 24 · 09:15 AM CDT
ModifiedWed, Jun 03 · 02:16 PM CDT
CVE-2024-5960
9.8/10 · Must read/watchNVDvuln
Summary
Plaintext Storage of a Password vulnerability in Eliz Software Panel allows : Use of Known Domain Credentials. This issue affects Panel: before v2.3.24.
CVECVE-2024-5960
SeverityCRITICAL
TypeUPDATED
PublishedWed, Sep 18 · 03:15 PM CDT
ModifiedWed, Jun 03 · 02:16 PM CDT
CVE-2024-6401
9.8/10 · Must read/watchNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SFS Consulting InsureE GL allows SQL Injection. This issue affects InsureE GL: before 4.6.2.
CVECVE-2024-6401
SeverityCRITICAL
TypeUPDATED
PublishedMon, Sep 16 · 03:15 PM CDT
ModifiedWed, Jun 03 · 02:16 PM CDT
CVE-2024-6656
9.8/10 · Must read/watchNVDvuln
Summary
Use of Hard-coded Credentials vulnerability in TNB Mobile Solutions Cockpit Software allows Read Sensitive Strings Within an Executable. This issue affects Cockpit Software: before v2.13.
CVECVE-2024-6656
SeverityCRITICAL
TypeUPDATED
PublishedFri, Sep 13 · 09:15 AM CDT
ModifiedWed, Jun 03 · 02:16 PM CDT
CVE-2024-6917
9.8/10 · Must read/watchNVDvuln
Summary
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Veribilim Software Veribase Order Management allows OS Command Injection. This issue affects Veribase Order Management: before v4.010.2.
CVECVE-2024-6917
SeverityCRITICAL
TypeUPDATED
PublishedMon, Aug 12 · 03:15 PM CDT
ModifiedWed, Jun 03 · 01:16 PM CDT
CVE-2024-6919
9.8/10 · Must read/watchNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Blind SQL Injection. This issue affects NACPremium: through 01082024.
CVECVE-2024-6919
SeverityCRITICAL
TypeUPDATED
PublishedMon, Sep 02 · 06:15 PM CDT
ModifiedWed, Jun 03 · 01:16 PM CDT
CVE-2024-7015
9.8/10 · Must read/watchNVDvuln
Summary
Missing Authentication for Critical Function vulnerability in Profelis Informatics and Consulting PassBox allows Authentication Abuse. This issue affects PassBox: before v1.2.
CVECVE-2024-7015
SeverityCRITICAL
TypeUPDATED
PublishedMon, Sep 09 · 02:15 PM CDT
ModifiedWed, Jun 03 · 01:16 PM CDT
CVE-2024-7071
9.8/10 · Must read/watchNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 564 - SQL Injection: Hibernate vulnerability in Brain Information Technologies Inc. Brain Low-Code allows SQL Injection. This issue affects Brain Low-Code: before 2.1.0.
CVECVE-2024-7071
SeverityCRITICAL
TypeUPDATED
PublishedTue, Aug 27 · 02:15 PM CDT
ModifiedWed, Jun 03 · 01:16 PM CDT
CVE-2024-7076
9.8/10 · Must read/watchNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Semtek Informatics Software Consulting Inc. Semtek Sempos allows Blind SQL Injection. This issue affects Semtek Sempos: through 31072024.
CVECVE-2024-7076
SeverityCRITICAL
TypeUPDATED
PublishedWed, Sep 04 · 03:15 PM CDT
ModifiedWed, Jun 03 · 01:16 PM CDT
