Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 19:17:09 +0000 EUVD-2026-159490 https://cve.radiocsirt.org/vuln/euvd-2026-159490 EUVD-2026-159490 https://cve.radiocsirt.org/vuln/euvd-2026-159490 fkie_cve-2024-26262 https://cve.radiocsirt.org/vuln/fkie_cve-2024-26262 <p>EBM Technologies Uniweb/SoliPACS WebServer&#39;s query functionality lacks proper restrictions of user input, allowing remote attackers authenticated as regular user to inject SQL commands for reading, modifying, and deleting database records, as well as executing system commands. Attackers may even leverage the dbo privilege in the database for privilege escalation, elevating their privileges to administrator .</p> <p>EBM Technologies Uniweb/SoliPACS WebServer&#39;s query functionality lacks proper restrictions of user input, allowing remote attackers authenticated as regular user to inject SQL commands for reading, modifying, and deleting database records, as well as executing system commands. Attackers may even leverage the dbo privilege in the database for privilege escalation, elevating their privileges to administrator .</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-26262 GHSA-4mrq-7mxx-fw2c https://cve.radiocsirt.org/vuln/ghsa-4mrq-7mxx-fw2c <p>EBM Technologies Uniweb/SoliPACS WebServer&#39;s query functionality lacks proper restrictions of user input, allowing remote attackers authenticated as regular user to inject SQL commands for reading, modifying, and deleting database records, as well as executing system commands. Attackers may even leverage the dbo privilege in the database for privilege escalation, elevating their privileges to administrator .</p> <p>EBM Technologies Uniweb/SoliPACS WebServer&#39;s query functionality lacks proper restrictions of user input, allowing remote attackers authenticated as regular user to inject SQL commands for reading, modifying, and deleting database records, as well as executing system commands. Attackers may even leverage the dbo privilege in the database for privilege escalation, elevating their privileges to administrator .</p> https://cve.radiocsirt.org/vuln/ghsa-4mrq-7mxx-fw2c gsd-2024-26262 https://cve.radiocsirt.org/vuln/gsd-2024-26262 gsd-2024-26262 https://cve.radiocsirt.org/vuln/gsd-2024-26262