Threat database

18 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	9.8	EPSS 0.6%	CVE-2024-25531RuvarOA · n/a Critical9.8EPSS 0.6%2024-05-08CVE Database V5CVE-2024-25531 RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the PageID parameter at /WebUtility/SearchCondiction.aspx. EPSS 0.6%Vulnerability	CVE Database V5	2024-05-08
Critical	9.8	EPSS 0.6%	CVE-2024-25529RuvarOA · n/a Critical9.8EPSS 0.6%2024-05-08CVE Database V5CVE-2024-25529 RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /WorkFlow/wf_office_file_history_show.aspx. EPSS 0.6%Vulnerability	CVE Database V5	2024-05-08
Medium	5.9	EPSS 0.3%	CVE-2024-25528RuvarOA · n/a Medium5.9EPSS 0.3%2024-05-08CVE Database V5CVE-2024-25528 RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /PersonalAffair/worklog_template_show.aspx. EPSS 0.3%Vulnerability	CVE Database V5	2024-05-08
High	8.1	EPSS 0.6%	CVE-2024-25526RuvarOA · n/a High8.1EPSS 0.6%2024-05-08CVE Database V5CVE-2024-25526 RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the project_id parameter at /ProjectManage/pm_gatt_inc.aspx. EPSS 0.6%Vulnerability	CVE Database V5	2024-05-08
Critical	9.8	EPSS 0.6%	CVE-2024-25525RuvarOA · n/a Critical9.8EPSS 0.6%2024-05-08CVE Database V5CVE-2024-25525 RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the filename parameter at /WorkFlow/OfficeFileDownload.aspx. EPSS 0.6%Vulnerability	CVE Database V5	2024-05-08
Critical	9.4	EPSS 0.6%	CVE-2024-25524RuvarOA · n/a Critical9.4EPSS 0.6%2024-05-08CVE Database V5CVE-2024-25524 RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sys_file_storage_id parameter at /WorkPlan/WorkPlanAttachDownLoad.aspx. EPSS 0.6%Vulnerability	CVE Database V5	2024-05-08
Critical	9.8	EPSS 0.7%	CVE-2024-25523RuvarOA · n/a Critical9.8EPSS 0.7%2024-05-08CVE Database V5CVE-2024-25523 RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the file_id parameter at /filemanage/file_memo.aspx. EPSS 0.7%Vulnerability	CVE Database V5	2024-05-08
Critical	9.4	EPSS 0.6%	CVE-2024-25522RuvarOA · n/a Critical9.4EPSS 0.6%2024-05-08CVE Database V5CVE-2024-25522 RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the office_missive_id parameter at /WorkFlow/wf_work_form_save.aspx. EPSS 0.6%Vulnerability	CVE Database V5	2024-05-08
Critical	9.4	EPSS 0.6%	CVE-2024-25521RuvarOA · n/a Critical9.4EPSS 0.6%2024-05-08CVE Database V5CVE-2024-25521 RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the txt_keyword parameter at get_company.aspx. EPSS 0.6%Vulnerability	CVE Database V5	2024-05-08
Critical	9.8	EPSS 0.6%	CVE-2024-25520RuvarOA · n/a Critical9.8EPSS 0.6%2024-05-08CVE Database V5CVE-2024-25520 RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /SysManage/sys_blogtemplate_new.aspx. EPSS 0.6%Vulnerability	CVE Database V5	2024-05-08
Critical	9.8	EPSS 0.7%	CVE-2024-25519RuvarOA · n/a Critical9.8EPSS 0.7%2024-05-08CVE Database V5CVE-2024-25519 RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the idlist parameter at /WorkFlow/wf_work_print.aspx. EPSS 0.7%Vulnerability	CVE Database V5	2024-05-08
Critical	9.8	EPSS 0.7%	CVE-2024-25517RuvarOA · n/a Critical9.8EPSS 0.7%2024-05-08CVE Database V5CVE-2024-25517 RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the tbTable argument at /WebUtility/MF.aspx. EPSS 0.7%Vulnerability	CVE Database V5	2024-05-08
Critical	9.4	EPSS 0.6%	CVE-2024-25514RuvarOA · n/a Critical9.4EPSS 0.6%2024-05-07CVE Database V5CVE-2024-25514 RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the template_id parameter at /SysManage/wf_template_child_field_list.aspx. EPSS 0.6%Vulnerability	CVE Database V5	2024-05-07
High	7.8	EPSS 0.3%	CVE-2024-25513RuvarOA · n/a High7.8EPSS 0.3%2024-05-07CVE Database V5CVE-2024-25513 RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the file_id parameter at /CorporateCulture/kaizen_download.aspx. EPSS 0.3%Vulnerability	CVE Database V5	2024-05-07
High	8.1	EPSS 0.5%	CVE-2024-25512RuvarOA · n/a High8.1EPSS 0.5%2024-05-07CVE Database V5CVE-2024-25512 RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the attach_id parameter at /Bulletin/AttachDownLoad.aspx. EPSS 0.5%Vulnerability	CVE Database V5	2024-05-07
Critical	9.8	EPSS 0.7%	CVE-2024-25510RuvarOA · n/a Critical9.8EPSS 0.7%2024-05-07CVE Database V5CVE-2024-25510 RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /AddressBook/address_public_show.aspx. EPSS 0.7%Vulnerability	CVE Database V5	2024-05-07
Critical	9.4	EPSS 0.6%	CVE-2024-25509RuvarOA · n/a Critical9.4EPSS 0.6%2024-05-07CVE Database V5CVE-2024-25509 RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sys_file_storage_id parameter at /WorkFlow/wf_file_download.aspx. EPSS 0.6%Vulnerability	CVE Database V5	2024-05-07
Critical	9.4	EPSS 0.6%	CVE-2024-25507RuvarOA · n/a Critical9.4EPSS 0.6%2024-05-07CVE Database V5CVE-2024-25507 RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the email_attach_id parameter at /LHMail/AttachDown.aspx. EPSS 0.6%Vulnerability	CVE Database V5	2024-05-07

Page 1 of 1