Vulnerabilities

TI-2024-06557 CVE-2024-7078 · GHSA-gq4v-4f65-pcgf

Unauthenticate SQLi in Semtek Informatics Software's Semtek Sempos

MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Semtek Informatics Software Consulting Inc.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00465 Published 2024-09-04 No fix listed CWE-89

TI-2024-06556 CVE-2024-7077 · GHSA-99ph-h865-m6x2

LOW 24

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Semtek Informatics Software Consulting Inc.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00256 Published 2024-09-04 No fix listed CWE-79

TI-2024-06555 CVE-2024-7076 · GHSA-jrv3-q93v-rr48

MEDIUM 48

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Semtek Informatics Software Consulting Inc.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00465 Published 2024-09-04 No fix listed CWE-89