Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 9

Export CSV
CVE-2024-0851

SQLi in Grup Arge Energy and Control Systems's Smartpower

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Grup Arge Energy and Control Systems Smartpower allows SQL Injection. This issue affects Smartpower: through V24.05.27.

CVSS 4.0 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Gruparge
Products
Smartpower
CVE-2022-45086

Cross-site Scripting in Smartpower Web

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Group Arge Energy and Control Systems Smartpower Web allows Cross-Site Scripting (XSS). This issue affects Smartpower Web: before 23.01.01.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Gruparge
Products
Smartpower Web
CVE-2022-45085

Server-Side Request Forgery in Smartpower Web

Server-Side Request Forgery (SSRF) vulnerability in Group Arge Energy and Control Systems Smartpower Web allows : Server Side Request Forgery. This issue affects Smartpower Web: before 23.01.01.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Gruparge
Products
Smartpower Web
CVE-2022-45091

Cross-site Scripting in Smartpower Web

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Group Arge Energy and Control Systems Smartpower Web allows Cross-Site Scripting (XSS). This issue affects Smartpower Web: before 23.01.01.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Gruparge
Products
Smartpower Web
CVE-2022-45090

SQL Injection in Smartpower Web

Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection. This issue affects Smartpower Web: before 23.01.01.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Gruparge
Products
Smartpower Web
CVE-2022-45089

SQL Injection in Smartpower Web

Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection. This issue affects Smartpower Web: before 23.01.01.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Gruparge
Products
Smartpower Web
CVE-2022-45088

Local File Inclusion in Smartpower Web

Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows PHP Local File Inclusion. This issue affects Smartpower Web: before 23.01.01.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Gruparge
Products
Smartpower Web
CVE-2022-45087

Cross-site Scripting in Smartpower Web

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Group Arge Energy and Control Systems Smartpower Web allows Cross-Site Scripting (XSS). This issue affects Smartpower Web: before 23.01.01.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Gruparge
Products
Smartpower Web
CVE-2022-4557

SQL Injection in Smartpower Web

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection. This issue affects Smartpower Web: before 23.01.01.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Gruparge
Products
Smartpower