Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Setelsa Security Clear all filters
TI-2023-03746 CVE-2023-4037 · GHSA-95qh-rxf5-w7vp

SQL injection in Setelsa Security ConacWin

Priority MEDIUM 43

Blind SQL injection vulnerability in the Conacwin 3.7.1.2 web interface, the exploitation of which could allow a local attacker to obtain sensitive data stored in the database by sending a specially crafted SQL query to…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00383 Published 2023-10-04 No fix listed CWE-89
TI-2023-03278 CVE-2023-3512 · GHSA-v6jm-v768-76h2

Relative path traversal in Setelsa Security ConacWin CB

Priority MEDIUM 40

Relative path traversal vulnerability in Setelsa Security's ConacWin CB, in its 3.8.2.2 version and earlier, the exploitation of which could allow an attacker to perform an arbitrary download of files from the system via…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0069 Published 2023-10-04 No fix listed CWE-23