Lucene search
+L

8050 matches found

Microsoft Secure
Microsoft Secure
•added 2025/04/09 5:00 p.m.•66 views

Stopping attacks against on-premises Exchange Server and SharePoint Server with AMSI

Exchange Server and SharePoint Server are business-critical assets and considered crown jewels for many organizations, making them attractive targets for attacks. To help customers protect their environments and respond to these attacks, Exchange Server and SharePoint Server now integrate with th...

9.8CVSS8.7AI score0.99999EPSS
SaveExploits121
RedhatCVE
RedhatCVE
•added 2025/04/09 9:45 a.m.•41 views

CVE-2025-30473

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Airflow Common SQL Provider. When using the partition clause in SQLTableCheckOperator as parameter which was a recommended pattern, Authenticated UI User could inject arbitrary SQL command...

8.8CVSS8.2AI score0.00934EPSS
SaveExploits0References1
SUSE Linux
SUSE Linux
•added 2025/04/09 7:02 a.m.•11 views

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2023-52927: netfilter: allow exp not to be removed in nfctfindexpectation bsc1239644. CVE-2024-35910: tcp: properly terminate timers for kernel sockets bsc1224489...

8.5CVSS8.5AI score0.37997EPSS
SaveExploits7References846
osv_suse
osv_suse
•added 2025/04/09 7:02 a.m.•33 views

SUSE-SU-2025:1180-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52927: netfilter: allow exp not to be removed in nfctfindexpectation bsc1239644. - CVE-2024-35910: tcp: properly terminate timers for kernel sockets...

10CVSS9.1AI score0.37997EPSS
SaveExploits7References421
IBM Security Bulletins
IBM Security Bulletins
•added 2025/04/09 6:30 a.m.•66 views

Security Bulletin: IBM Security Verify Governance has multiple vulnerabilities

Summary Multiple security vulnerabilities in the dependent components have been addressed in the latest update to IBM Security Verify Governance. Vulnerability Details CVEID:CVE-2022-40609 DESCRIPTION: IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to execute...

9.8CVSS9.1AI score0.01761EPSS
SaveExploits1Affected Software1
Packet Storm
Packet Storm
•added 2025/04/09 12:00 a.m.•2552 views

📄 Vasion Print / PrinterLogic 83 Vulnerabilities

Vasion Print / PrinterLogic suffers from authentication bypass, remote code execution, cross site scripting, XML injection, server-side request forgery, secret disclosure, and so many other vulnerabilities. The magnitude of this report is quite impressive and it is rare to see such a thorough...

9.8CVSS7.6AI score0.0169EPSS
SaveExploits1
SUSE Linux
SUSE Linux
•added 2025/04/08 4:32 p.m.•10 views

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2023-52927: netfilter: allow exp not to be removed in nfctfindexpectation bsc1239644. CVE-2024-35910: tcp: properly terminate timers for kernel sockets...

8.5CVSS8.4AI score0.37997EPSS
SaveExploits7References846
osv_suse
osv_suse
•added 2025/04/08 4:32 p.m.•16 views

SUSE-SU-2025:1178-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52927: netfilter: allow exp not to be removed in nfctfindexpectation bsc1239644. - CVE-2024-35910: tcp: properly terminate timers for kernel sockets...

10CVSS8.8AI score0.37997EPSS
SaveExploits7References421
SUSE Linux
SUSE Linux
•added 2025/04/08 3:36 p.m.•21 views

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2023-52927: netfilter: allow exp not to be removed in nfctfindexpectation bsc1239644. CVE-2024-35910: tcp: properly terminate timers for kernel sockets...

8.5CVSS8.4AI score0.37997EPSS
SaveExploits7References834
osv_suse
osv_suse
•added 2025/04/08 3:36 p.m.•32 views

SUSE-SU-2025:1177-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52927: netfilter: allow exp not to be removed in nfctfindexpectation bsc1239644. - CVE-2024-35910: tcp: properly terminate timers for kernel sockets...

10CVSS8.8AI score0.37997EPSS
SaveExploits7References415
osv_ghsa
osv_ghsa
•added 2025/04/07 9:30 a.m.•24 views

GHSA-5R62-MJF5-XWHJ Apache Airflow Common SQL Provider Vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Airflow Common SQL Provider. When using the partition clause in SQLTableCheckOperator as parameter which was a recommended pattern, Authenticated UI User could inject arbitrary SQL command...

8.8CVSS8.5AI score0.00934EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
•added 2025/04/07 9:30 a.m.•35 views

Apache Airflow Common SQL Provider Vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Airflow Common SQL Provider. When using the partition clause in SQLTableCheckOperator as parameter which was a recommended pattern, Authenticated UI User could inject arbitrary SQL command...

8.8CVSS8.5AI score0.00934EPSS
SaveExploits0References8Affected Software1
attackerkb
attackerkb
•added 2025/04/07 9:15 a.m.•8 views

CVE-2025-30473

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Airflow Common SQL Provider. When using the partition clause in SQLTableCheckOperator as parameter which was a recommended pattern, Authenticated UI User could inject arbitrary SQL command...

8.8CVSS6.1AI score0.00934EPSS
SaveExploits0References3
NVD
NVD
•added 2025/04/07 9:15 a.m.•38 views

CVE-2025-30473

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Airflow Common SQL Provider. When using the partition clause in SQLTableCheckOperator as parameter which was a recommended pattern, Authenticated UI User could inject arbitrary SQL command...

8.8CVSS0.00934EPSS
SaveExploits0References6
CVE
CVE
•added 2025/04/07 8:31 a.m.•335 views

CVE-2025-30473

The Apache Airflow Common SQL Provider (versions before 1.24.1 ) is vulnerable to an SQL Injection flaw. When the SQLTableCheckOperator uses the partition clause as a parameter—a recommended pattern—an authenticated UI user can inject arbitrary SQL commands. This occurs because the partition_clau...

8.8CVSS8.3AI score0.00934EPSS
SaveExploits0References6Affected Software1
Mend
Mend
•added 2025/04/07 8:31 a.m.•13 views

CVE-2025-30473

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Airflow Common SQL Provider. When using the partition clause in SQLTableCheckOperator as parameter which was a recommended pattern, Authenticated UI User could inject arbitrary SQL command...

8.8CVSS0.00934EPSS
SaveExploits0References13
Cvelist
Cvelist
•added 2025/04/07 8:31 a.m.•57 views

CVE-2025-30473 Apache Airflow Common SQL Provider: Remote Code Execution via Sql Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Airflow Common SQL Provider. When using the partition clause in SQLTableCheckOperator as parameter which was a recommended pattern, Authenticated UI User could inject arbitrary SQL command...

0.00934EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/04/07 8:31 a.m.•21 views

CVE-2025-30473 Apache Airflow Common SQL Provider: Remote Code Execution via Sql Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Airflow Common SQL Provider. When using the partition clause in SQLTableCheckOperator as parameter which was a recommended pattern, Authenticated UI User could inject arbitrary SQL command...

8.3AI score0.00934EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/04/07 8:31 a.m.•31 views

CVE-2025-30473 Apache Airflow Common SQL Provider: Remote Code Execution via Sql Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Airflow Common SQL Provider. When using the partition clause in SQLTableCheckOperator as parameter which was a recommended pattern, Authenticated UI User could inject arbitrary SQL command...

8.8CVSS7.4AI score
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/07 12:00 a.m.•7 views

CVE-2025-30473: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Airflow Common SQL Provider. When using the partition clause in SQLTableCheckOperator as parameter which was a recommended pattern, Authenticated UI User could inject arbitrary SQL command...

8.8CVSS8AI score0.00934EPSS
SaveExploits0References1
Rows per page
Query Builder