SQL Injection

Every one of the 103 is a mark on the map. Named now: 1 to 26, most at risk first.

1. A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by…CVE-2021-33731Siemens · 47% likely

   CWE-89

2. A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by…CVE-2021-33734Siemens · 28% likely

   CWE-89

3. A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by…CVE-2021-33732Siemens · 28% likely

   CWE-89

4. A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by…CVE-2021-33730Siemens · 28% likely

   CWE-89

5. A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by…CVE-2021-33733Siemens · 15% likely

   CWE-89

6. A vulnerability has been identified in SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions). A privileged authenticated attacker could execute arbitrary commands in…CVE-2022-24281Siemens · CVSS 7.2 · 3.5% likely

   CWE-89

7. SQL injection vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to execute arbitrary SQL comm…CVE-2012-3032Siemens · 2.4% likely

   CWE-89

8. A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). An authenticated attacker that is able to import firmware containers to an affected system cou…CVE-2021-33729Siemens · 2.4% likely

   CWE-89

9. A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) contains an SQL injection vulnerability in its XML-base…CVE-2019-19292Siemens · CVSS 8.8 · 2.0% likely

   CWE-89

10. SQL injection vulnerability in the login screen in the Web Navigator in Siemens WinCC before 7.2 Update 1, as used in SIMATIC PCS7 8.0 SP1 and earlier and other products, allows r…CVE-2013-3957Siemens · 1.8% likely

    CWE-89

11. A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All vers…CVE-2019-10916Siemens AG · 1.5% likely

    CWE-89

12. A vulnerability has been identified in Camstar Enterprise Platform (All versions), Opcenter Execution Core (All versions < V8.2). Through the use of several vulnerable fields of t…CVE-2020-7577Siemens · 1.2% likely

    CWE-89

13. A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by…CVE-2021-33736Siemens · 1.2% likely

    CWE-89

14. A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by…CVE-2021-33735Siemens · 1.1% likely

    CWE-89

15. SQL injection vulnerability in Siemens Automation License Manager (ALM) before 5.3 SP3 Update 1 allows remote attackers to execute arbitrary SQL commands via crafted traffic to TC…CVE-2016-8564Siemens · 1.1% likely

    CWE-89

16. A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Aut…CVE-2025-27540Siemens · CVSS 9.8 · 1.0% likely

    CWE-89

17. A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Ver…CVE-2025-27539Siemens · CVSS 9.8 · 1.0% likely

    CWE-89

18. A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Cre…CVE-2025-27495Siemens · CVSS 9.8 · 1.0% likely

    CWE-89

19. A vulnerability has been identified in Desigo Insight (All versions). The web service does not properly apply input validation for some query parameters in a reserved area. This c…CVE-2020-15792Siemens · 1.0% likely

    CWE-89

20. A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerable to SQL injection. This could allow an unauthenticated remo…CVE-2023-37372Siemens · CVSS 9.8 · 0.9% likely

    CWE-89

21. A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Res…CVE-2025-29905Siemens · CVSS 8.8 · 0.9% likely

    CWE-89

22. A vulnerability has been identified in XHQ (All Versions < 6.1). The web interface could allow SQL injection attacks if an attacker is able to modify content of particular web pag…CVE-2019-19286Siemens · 0.9% likely

    CWE-89

23. A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Cre…CVE-2025-31351Siemens · CVSS 8.8 · 0.9% likely

    CWE-89

24. A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Upd…CVE-2025-31350Siemens · CVSS 8.8 · 0.9% likely

    CWE-89

25. A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Upd…CVE-2025-31349Siemens · CVSS 8.8 · 0.9% likely

    CWE-89

26. A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Upd…CVE-2025-31343Siemens · CVSS 8.8 · 0.9% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.