Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2024-32739

CyberPower PowerPanel Enterprise SQL Injection

A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via the "query_ptask_verbose" function within MCUDBHelper.

CVSS 3.1 · 7.5 High EPSS 5.4% KEV · Not listed
Vendors
Cyberpower
Products
Powerpanel Powerpanel Enterprise
CVE-2024-32737

CyberPower PowerPanel Enterprise SQL Injection

A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via the "query_contract_result" function within MCUDBHelper.

CVSS 3.1 · 7.5 High EPSS 5.4% KEV · Not listed
Vendors
Cyberpower
Products
Powerpanel Powerpanel Enterprise
CVE-2024-32736

CyberPower PowerPanel Enterprise SQL Injection

A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via the "query_utask_verbose" function within MCUDBHelper.

CVSS 3.1 · 7.5 High EPSS 5.4% KEV · Not listed
Vendors
Cyberpower
Products
Powerpanel Powerpanel Enterprise
CVE-2024-32735

CyberPower PowerPanel Enterprise Missing Authentication

An issue regarding missing authentication for certain utilities exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can access the PDNU REST APIs, which may result in compromise of the application.

CVSS 3.1 · 9.8 Critical EPSS 6.8% KEV · Not listed
Vendors
Cyberpower
Products
Powerpanel Powerpanel Enterprise