Approved changes feed: RSS · Atom

cpe:2.3:a:secom:dr.id_attendance_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSecom (59a3b4d3-1031-56e5-b05a-eeb64f8a1498)
ProductDr.Id Attendance System (7019ceaa-538d-5eee-a363-5182fb1ac496)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-7732 vulnerable 2026-06-08 06:58:23.302678 SECOM Dr.ID Attendance system - Unrestricted File Upload
CRITICAL (9.8)
Dr.ID Access Control System from SECOM does not properly validate a specific page parameter, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents.
Published: 2024-08-14T06:55:59.726Z
Updated: 2024-08-16T17:30:08.971Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3935 vulnerable 2026-06-08 05:25:57.935082 TAIWAN SECOM CO., LTD. – Sensitivity Information Exposure
HIGH (7.5)
TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, stores users’ information by cleartext in the cookie, which divulges password to attackers.
Published: 2020-02-11T08:00:30.076Z
Updated: 2024-09-16T22:19:57.599Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3934 vulnerable 2026-06-08 05:25:57.932892 TAIWAN SECOM CO., LTD. - Pre-auth SQL Injection
CRITICAL (9.8)
TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, contains a vulnerability of Pre-auth SQL Injection, allowing attackers to inject a specific SQL command.
Published: 2020-02-11T08:00:29.639Z
Updated: 2024-09-17T01:45:45.481Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3933 vulnerable 2026-06-08 05:25:57.932341 TAIWAN SECOM CO., LTD. - User Account Enumeration
MEDIUM (5.3)
TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, allows attackers to enumerate and exam user account in the system.
Published: 2020-02-11T08:00:29.196Z
Updated: 2024-09-17T03:23:28.966Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.