Export limit exceeded: 12053 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2024-26264

EBM Technologies RISWEB - SQL Injection

EBM Technologies RISWEB's specific query function parameter does not properly restrict user input, and this feature page is accessible without login. This allows remote attackers to inject SQL commands without authentication, enabling them to read, modify, and delete database records.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Ebmtech
Products
Risweb
CVE-2024-26263

EBM Technologies RISWEB - Improper Access Control

EBM Technologies RISWEB's specific URL path is not properly controlled by permission, allowing attackers to browse specific pages and query sensitive data without login.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Ebm Technologies Ebmtech
Products
Risweb Risweb