https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 23:47:40 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-03951 bdu:2024-03951 https://cve.radiocsirt.org/vuln/bdu:2024-03951 https://cve.radiocsirt.org/vuln/cnvd-2024-26044 cnvd-2024-26044 https://cve.radiocsirt.org/vuln/cnvd-2024-26044 https://cve.radiocsirt.org/vuln/euvd-2026-2607 EUVD-2026-2607 https://cve.radiocsirt.org/vuln/euvd-2026-2607 https://cve.radiocsirt.org/vuln/fkie_cve-2024-4609 <p>A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has no authentication in place or if legitimate credentials were stolen. If exploited, the attack could result in information exposure, revealing sensitive information. Additionally, a threat actor could potentially modify and delete the data in a remote database. An attack would only affect the HMI design time, not runtime.</p> <p>A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has no authentication in place or if legitimate credentials were stolen. If exploited, the attack could result in information exposure, revealing sensitive information. Additionally, a threat actor could potentially modify and delete the data in a remote database. An attack would only affect the HMI design time, not runtime.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-4609 https://cve.radiocsirt.org/vuln/ghsa-qwjm-p7qm-cgm9 <p>A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has no authentication in place or if legitimate credentials were stolen. If exploited, the attack could result in information exposure, revealing sensitive information. Additionally, a threat actor could potentially modify and delete the data in a remote database. An attack would only affect the HMI design time, not runtime.</p> <p>A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has no authentication in place or if legitimate credentials were stolen. If exploited, the attack could result in information exposure, revealing sensitive information. Additionally, a threat actor could potentially modify and delete the data in a remote database. An attack would only affect the HMI design time, not runtime.</p> https://cve.radiocsirt.org/vuln/ghsa-qwjm-p7qm-cgm9 https://cve.radiocsirt.org/vuln/icsa-24-137-14 <p>A vulnerability exists in the FactoryTalk View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has no authentication in place or if legitimate credentials were stolen. If exploited, the attack could result in information exposure, revealing sensitive information. Additionally, a threat actor could potentially modify and delete the data in a remote database. An attack would only affect the HMI design time, not runtime.</p> <p>A vulnerability exists in the FactoryTalk View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has no authentication in place or if legitimate credentials were stolen. If exploited, the attack could result in information exposure, revealing sensitive information. Additionally, a threat actor could potentially modify and delete the data in a remote database. An attack would only affect the HMI design time, not runtime.</p> https://cve.radiocsirt.org/vuln/icsa-24-137-14 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1119 <p>Ein authentifizierter Angreifer kann mehrere Schwachstellen in Rockwell Automation FactoryTalk ausnutzen, um beliebigen Code auszuführen, Dateien zu manipulieren oder vertrauliche Informationen offenzulegen.</p> <p>Ein authentifizierter Angreifer kann mehrere Schwachstellen in Rockwell Automation FactoryTalk ausnutzen, um beliebigen Code auszuführen, Dateien zu manipulieren oder vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1119