Lucene search
+L

4571 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/21 12:00 a.m.•6 views

CVE-2021-47748: Improper Neutralization of Special Elements used in an OS Command

Hasura GraphQL 1.3.3 contains a remote code execution vulnerability that allows attackers to execute arbitrary shell commands through SQL query manipulation. Attackers can inject commands into the runsql endpoint by crafting malicious GraphQL queries that execute system commands through...

9.8CVSS6.9AI score0.01148EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/01/21 12:00 a.m.•21 views

PT-2026-3794

Name of the Vulnerable Software and Affected Versions Hasura GraphQL version 1.3.3 Description Hasura GraphQL version 1.3.3 contains a remote code execution issue. Attackers can execute arbitrary shell commands through SQL query manipulation. The issue allows command injection into the run sql...

9.8CVSS6.8AI score0.01148EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2026/01/21 12:00 a.m.•25 views

Hasura GraphQL Engine: Operating System Command Injection Vulnerability

Hasura GraphQL Engine is a very fast GraphQL server developed by Hasura as open source. Version 1.3.3 of Hasura GraphQL Engine contains a vulnerability related to operating system command injection. This vulnerability stems from SQL queries that allow remote code execution, potentially enabling t...

9.8CVSS6.5AI score0.01148EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2026/01/21 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2025-11246

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.4 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowe...

5.4CVSS5.9AI score0.00428EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/01/21 12:00 a.m.•2 views

PT-2026-5545

Summary Context race condition when using useGraphQLModules plugin Details Related to: https://github.com/graphql-hive/graphql-modules/security/advisories/GHSA-53wg-r69p-v3r7 When 2 or more parallel requests are made which trigger the same service, the context of the requests is mixed up in the...

8.7CVSS5.8AI score
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/01/21 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2025-12562

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allow...

7.5CVSS7.2AI score0.00864EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/20 9:22 p.m.•20 views

CVE-2026-1175

A vulnerability was identified in birkir prime up to 0.4.0.beta.0. This impacts an unknown function of the file /graphql of the component GraphQL Directive Handler. Such manipulation leads to information exposure through error message. The attack may be performed from remote. The exploit is...

7.5CVSS5.1AI score0.00484EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/20 8:22 p.m.•18 views

CVE-2026-1173

A vulnerability was found in birkir prime up to 0.4.0.beta.0. The impacted element is an unknown function of the file /graphql of the component GraphQL Array Based Query Batch Handler. The manipulation results in denial of service. The attack can be executed remotely. The exploit has been made...

9.8CVSS5.2AI score0.00788EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/20 8:22 p.m.•15 views

CVE-2026-1174

A vulnerability was determined in birkir prime up to 0.4.0.beta.0. This affects an unknown function of the file /graphql of the component GraphQL Alias Handler. This manipulation causes resource consumption. The attack is possible to be carried out remotely. The exploit has been publicly disclose...

7.5CVSS5.2AI score0.00779EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/20 7:20 p.m.•15 views

CVE-2026-1172

A vulnerability has been found in birkir prime up to 0.4.0.beta.0. The affected element is an unknown function of the file /graphql of the component GraphQL Directive Handler. The manipulation leads to denial of service. Remote exploitation of the attack is possible. The exploit has been disclose...

7.5CVSS5AI score0.00573EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/20 7:20 p.m.•16 views

CVE-2026-1171

A flaw has been found in birkir prime up to 0.4.0.beta.0. Impacted is an unknown function of the file /graphql of the component GraphQL Field Handler. Executing a manipulation can lead to denial of service. The attack may be launched remotely. The exploit has been published and may be used. The...

7.5CVSS5.2AI score0.00573EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/20 6:18 p.m.•16 views

CVE-2026-1170

A vulnerability was detected in birkir prime up to 0.4.0.beta.0. This issue affects some unknown processing of the file /graphql of the component GraphQL API. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The exploit is now public and may be...

6.9CVSS5.2AI score0.00426EPSS
SaveExploits1References1
NVD
NVD
•added 2026/01/19 9:15 p.m.•24 views

CVE-2026-1175

A vulnerability was identified in birkir prime up to 0.4.0.beta.0. This impacts an unknown function of the file /graphql of the component GraphQL Directive Handler. Such manipulation leads to information exposure through error message. The attack may be performed from remote. The exploit is...

7.5CVSS0.00484EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/01/19 8:32 p.m.•40 views

CVE-2026-1175 birkir prime GraphQL Directive graphql information exposure

A vulnerability was identified in birkir prime up to 0.4.0.beta.0. This impacts an unknown function of the file /graphql of the component GraphQL Directive Handler. Such manipulation leads to information exposure through error message. The attack may be performed from remote. The exploit is...

6.9CVSS0.00484EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/01/19 8:32 p.m.•16 views

CVE-2026-1175 birkir prime GraphQL Directive graphql information exposure

A vulnerability was identified in birkir prime up to 0.4.0.beta.0. This impacts an unknown function of the file /graphql of the component GraphQL Directive Handler. Such manipulation leads to information exposure through error message. The attack may be performed from remote. The exploit is...

6.9CVSS5.3AI score0.00484EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2026/01/19 8:32 p.m.•21 views

CVE-2026-1175

A vulnerability was identified in birkir prime up to 0.4.0.beta.0. This impacts an unknown function of the file /graphql of the component GraphQL Directive Handler. Such manipulation leads to information exposure through error message. The attack may be performed from remote. The exploit is...

7.5CVSS5AI score0.00484EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2026/01/19 8:32 p.m.•51 views

CVE-2026-1175

In birkir prime up to 0.4.0.beta.0, the GraphQL Directive Handler component’s /graphql function is affected. The issue is a manipulation that exposes information via error messages. Attacker could exploit remotely; a public exploit exists. No remediation details are provided in the supplied docum...

7.5CVSS5.3AI score0.00484EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
•added 2026/01/19 8:32 p.m.•24 views

EUVD-2026-3194

A vulnerability was identified in birkir prime up to 0.4.0.beta.0. This impacts an unknown function of the file /graphql of the component GraphQL Directive Handler. Such manipulation leads to information exposure through error message. The attack may be performed from remote. The exploit is...

6.9CVSS5.1AI score0.00484EPSS
SaveExploits1References5
OSV
OSV
•added 2026/01/19 8:32 p.m.•16 views

CVE-2026-1175 birkir prime GraphQL Directive graphql information exposure

A vulnerability was identified in birkir prime up to 0.4.0.beta.0. This impacts an unknown function of the file /graphql of the component GraphQL Directive Handler. Such manipulation leads to information exposure through error message. The attack may be performed from remote. The exploit is...

6.9CVSS5.7AI score
SaveExploits0References7
NVD
NVD
•added 2026/01/19 8:15 p.m.•23 views

CVE-2026-1174

A vulnerability was determined in birkir prime up to 0.4.0.beta.0. This affects an unknown function of the file /graphql of the component GraphQL Alias Handler. This manipulation causes resource consumption. The attack is possible to be carried out remotely. The exploit has been publicly disclose...

7.5CVSS0.00779EPSS
SaveExploits1References5
Rows per page
Query Builder