MapService.svc in Hexagon GeoMedia WebMap 2020 before Update 2 (aka 16.6.2.66) allows blind SQL Injection via the Id (within sourceItems) parameter to the GetMap...
9.8CVSS
9.7AI Score
0.002EPSS
ERDAS ER Viewer 13.0 has dwmapi.dll and irml.dll libraries arbitrary code execution...
7.8CVSS
8AI Score
0.001EPSS