Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

Lieferantenmanager CRITICAL 9.8

CVE-2022-44015

An issue was discovered in Simmeth Lieferantenmanager before 5.6. An attacker can inject raw SQL queries. By activating MSSQL features, the attacker …

Fix: 5.6+

Fix from $2,300 2022-12-25

Lieferantenmanager CRITICAL 9.1

CVE-2022-44013

An issue was discovered in Simmeth Lieferantenmanager before 5.6. An attacker can make various API calls without authentication because the password …

Fix: 5.6+

Fix from $2,300 2022-12-25

Lieferantenmanager HIGH 7.5

CVE-2022-44016

An issue was discovered in Simmeth Lieferantenmanager before 5.6. An attacker can download arbitrary files from the web server by abusing an API call…

Fix: 5.6+

Fix from $1,950 2022-12-25

Lieferantenmanager HIGH 7.5

CVE-2022-44017

An issue was discovered in Simmeth Lieferantenmanager before 5.6. Due to errors in session management, an attacker can log back into a victim's accou…

Fix: 5.6+

Fix from $1,950 2022-12-25

Lieferantenmanager MEDIUM 6.5

CVE-2022-44014

An issue was discovered in Simmeth Lieferantenmanager before 5.6. In the design of the API, a user is inherently able to fetch arbitrary SQL tables. …

Fix: 5.6+

Fix from $1,600 2022-12-25

Lieferantenmanager MEDIUM 5.4

CVE-2022-44012

An issue was discovered in /DS/LM_API/api/SelectionService/InsertQueryWithActiveRelationsReturnId in Simmeth Lieferantenmanager before 5.6. An attack…

Fix: 5.6+

Fix from $1,600 2022-12-25