Ruvar
Ruvaroa: vulnerabilidades y CVE
Ruvaroa tiene 26 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 21 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE26
Últimos 12 meses0
Críticas21
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2024-25533 | Crítica (9.4) | 0.72% | — | 8 may 2024 | Error messages in RuvarOA v6.01 and v12.01 were discovered to leak the physical path of the website (/WorkFlow/OfficeFileUpdate.aspx). This vulnerability can allow attackers to write files to the server or execute… |
| CVE-2024-25532 | Crítica (9.8) | 0.51% | — | 8 may 2024 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the bt_id parameter at /include/get_dict.aspx. |
| CVE-2024-25528 | Media (5.9) | 0.28% | — | 8 may 2024 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /PersonalAffair/worklog_template_show.aspx. |
| CVE-2024-25531 | Crítica (9.8) | 0.58% | — | 8 may 2024 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the PageID parameter at /WebUtility/SearchCondiction.aspx. |
| CVE-2024-25530 | Crítica (9.8) | 0.58% | — | 8 may 2024 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the PageID parameter at /WebUtility/get_find_condiction.aspx. |
| CVE-2024-25529 | Crítica (9.8) | 0.61% | — | 8 may 2024 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /WorkFlow/wf_office_file_history_show.aspx. |
| CVE-2024-25527 | Crítica (9.4) | 0.51% | — | 8 may 2024 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /PersonalAffair/worklog_template_show.aspx. |
| CVE-2024-25526 | Alta (8.1) | 0.59% | — | 8 may 2024 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the project_id parameter at /ProjectManage/pm_gatt_inc.aspx. |
| CVE-2024-25525 | Crítica (9.8) | 0.63% | — | 8 may 2024 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the filename parameter at /WorkFlow/OfficeFileDownload.aspx. |
| CVE-2024-25524 | Crítica (9.4) | 0.62% | — | 8 may 2024 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sys_file_storage_id parameter at /WorkPlan/WorkPlanAttachDownLoad.aspx. |
| CVE-2024-25523 | Crítica (9.8) | 0.70% | — | 8 may 2024 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the file_id parameter at /filemanage/file_memo.aspx. |
| CVE-2024-25522 | Crítica (9.4) | 0.61% | — | 8 may 2024 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the office_missive_id parameter at /WorkFlow/wf_work_form_save.aspx. |
| CVE-2024-25521 | Crítica (9.4) | 0.62% | — | 8 may 2024 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the txt_keyword parameter at get_company.aspx. |
| CVE-2024-25520 | Crítica (9.8) | 0.63% | — | 8 may 2024 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /SysManage/sys_blogtemplate_new.aspx. |
| CVE-2024-25519 | Crítica (9.8) | 0.70% | — | 8 may 2024 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the idlist parameter at /WorkFlow/wf_work_print.aspx. |
| CVE-2024-25518 | Crítica (9.4) | 0.62% | — | 8 may 2024 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the template_id parameter at /WorkFlow/wf_get_fields_approve.aspx. |
| CVE-2024-25517 | Crítica (9.8) | 0.70% | — | 8 may 2024 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the tbTable argument at /WebUtility/MF.aspx. |
| CVE-2024-25515 | Alta (7.3) | 0.58% | — | 8 may 2024 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sys_file_storage_id parameter at /WorkFlow/wf_work_finish_file_down.aspx. |
| CVE-2024-25514 | Crítica (9.4) | 0.56% | — | 7 may 2024 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the template_id parameter at /SysManage/wf_template_child_field_list.aspx. |
| CVE-2024-25513 | Alta (7.8) | 0.32% | — | 7 may 2024 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the file_id parameter at /CorporateCulture/kaizen_download.aspx. |
| CVE-2024-25511 | Crítica (9.4) | 0.62% | — | 7 may 2024 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /AddressBook/address_public_new.aspx. |
| CVE-2024-25510 | Crítica (9.8) | 0.69% | — | 7 may 2024 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /AddressBook/address_public_show.aspx. |
| CVE-2024-25509 | Crítica (9.4) | 0.62% | — | 7 may 2024 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sys_file_storage_id parameter at /WorkFlow/wf_file_download.aspx. |
| CVE-2024-25512 | Alta (8.1) | 0.53% | — | 7 may 2024 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the attach_id parameter at /Bulletin/AttachDownLoad.aspx. |
| CVE-2024-25508 | Crítica (9.8) | 0.69% | — | 7 may 2024 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /bulletin/bulletin_template_show.aspx. |
| CVE-2024-25507 | Crítica (9.4) | 0.62% | — | 7 may 2024 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the email_attach_id parameter at /LHMail/AttachDown.aspx. |