← All credits
Vera Mens from Claroty Research
11 vulnerability records and advisories credit this contributor.
CVE-2022-28816
Reflected XSS in Carlo Gavazzi UWP 3.0
CVE-2022-28815
SQL-Injection in Carlo Gavazzi UWP 3.0 Sentilo Proxy
CVE-2022-28814
Path traversal in Carlo Gavazzi UWP 3.0 could lead to full device access
CVE-2022-28813
SQL-injection in Car Park Server 3.0 allows for full database access.
CVE-2022-28812
Use of Hard-coded Credentials in UWP3.0 allows SuperUser authentication bypass in Car Park Server.
CVE-2022-28811
Possible command injection in Car Park Server in Carlo Gavazzi UWP3.0
CVE-2022-22526
Missing authentication for API in Carlo Gavazzi UWP 3.0 Car Park Server
CVE-2022-22525
Command injection in restore function of Carlo Gavazzi UWP3.0 allows for command injection
CVE-2022-22524
SQL-injection in Carlo Gavazzi UWP 3.0 allows for full database access
CVE-2022-22523
Carlo Gavazzi UWP 3.0 WebApp allows for authentication bypass