Lucene search
K

38 matches found

EUVD
EUVD
added 3 days ago4 views

EUVD-2018-21951

Paroiciel 11.20 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the eGeqIdEquipe parameter. Attackers can send GET requests to the egeq.php endpoint with crafted SQL payloads to extract sensitive...

7.1CVSS6.1AI score0.00026EPSS
Exploits0References5
NVD
NVD
added 4 days ago4 views

CVE-2018-25430

Paroiciel 11.20 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the eGeqIdEquipe parameter. Attackers can send GET requests to the egeq.php endpoint with crafted SQL payloads to extract sensitive...

7.1CVSS0.00026EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 4 days ago6 views

CVE-2018-25430 Paroiciel 11.20 SQL Injection via eGeqIdEquipe Parameter

Paroiciel 11.20 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the eGeqIdEquipe parameter. Attackers can send GET requests to the egeq.php endpoint with crafted SQL payloads to extract sensitive...

7.1CVSS6.1AI score0.00026EPSS
Exploits0References4
Cvelist
Cvelist
added 4 days ago22 views

CVE-2018-25429 Paroiciel 11.20 SQL Injection via zProIdPro Parameter

Paroiciel 11.20 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the zProIdPro parameter. Attackers can send GET requests to zpro.php with crafted SQL payloads in the zProIdPro parameter to extract...

7.1CVSS0.00026EPSS
Exploits0References4
Cvelist
Cvelist
added 4 days ago22 views

CVE-2018-25428 Paroiciel 11.20 SQL Injection via tRecIdListe Parameter

Paroiciel 11.20 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the tRecIdListe parameter. Attackers can send GET requests to the trec.php endpoint with crafted SQL payloads to extract database...

8.8CVSS0.00068EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 4 days ago9 views

PT-2026-45620

Paroiciel 11.20 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the zProIdPro parameter. Attackers can send GET requests to zpro.php with crafted SQL payloads in the zProIdPro parameter to extract...

7.1CVSS6.1AI score0.00026EPSS
Exploits0References5
CNNVD
CNNVD
added 4 days ago5 views

Paraiciel SQL injection vulnerability

Paroiciel is an parish management information system developed by the French company Paroiciel. Version 11.20 of Paroiciel contains a SQL injection vulnerability. This vulnerability stems from the zProIdPro parameter, which allows for SQL injections. This could enable authenticated attackers to...

7.1CVSS6.1AI score0.00026EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/01/22 3:27 p.m.9 views

CVE-2026-1290

Authentication Bypass by Primary Weakness vulnerability in Jamf Jamf Pro allows unspecified impact.This issue affects Jamf Pro: from 11.20 through 11.24...

5.3CVSS5.4AI score0.00116EPSS
Exploits0References1
CVE
CVE
added 2026/01/21 3:25 p.m.10 views

CVE-2026-1290

CVE-2026-1290 affects Jamf Pro 11.20–11.24. The issue is described as Authentication Bypass by Primary Weakness with a CVSS v4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/SC:L/VI:N/SI:N/VA:N/SA:N) and a base score of 5.3 (Medium). The Red Hat, CIRCL, NVD, and CVE List entries reiterate the same affec...

5.3CVSS5.4AI score0.00116EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/21 3:25 p.m.1 views

CVE-2026-1290

Authentication Bypass by Primary Weakness vulnerability in Jamf Jamf Pro allows unspecified impact.This issue affects Jamf Pro: from 11.20 through 11.24...

5.3CVSS5.4AI score0.00116EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2026/01/21 3:25 p.m.17 views

CVE-2026-1290 [PI141230] Fixed A broken access control issue.

Authentication Bypass by Primary Weakness vulnerability in Jamf Jamf Pro allows unspecified impact.This issue affects Jamf Pro: from 11.20 through 11.24...

5.3CVSS0.00116EPSS
Exploits0References1
EUVD
EUVD
added 2026/01/21 3:25 p.m.3 views

EUVD-2026-3663

Authentication Bypass by Primary Weakness vulnerability in Jamf Jamf Pro allows unspecified impact.This issue affects Jamf Pro: from 11.20 through 11.24...

5.3CVSS5.4AI score0.00116EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/01/21 12:0 a.m.4 views

PT-2026-3775

Authentication Bypass by Primary Weakness vulnerability in Jamf Jamf Pro allows unspecified impact.This issue affects Jamf Pro: from 11.20 through 11.24...

5.3CVSS5.4AI score0.00116EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2001-1486

Malware in sbrugna...

4.6CVSS6.4AI score0.00103EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/01/27 12:0 a.m.2 views

PT-2025-4025 · Postman · Postman

Name of the Vulnerable Software and Affected Versions: Postman versions up to 11.20 Description: A problematic issue has been found in Postman on Windows, affecting an unknown part of the library file profapi.dll. The manipulation leads to an untrusted search path. The attack must be approached...

4.5CVSS6.8AI score0.00213EPSS
Exploits0References8
OSV
OSV
added 2024/06/15 12:0 a.m.15 views

OPENSUSE-SU-2024:12929-1 postgresql11-11.20-1.1 on GA media

These are all security issues fixed in the postgresql11-11.20-1.1 package on the GA media of openSUSE Tumbleweed...

7.2CVSS6.3AI score0.00276EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2023/09/27 12:0 a.m.34 views

Amazon Linux 2 : postgresql (ALASPOSTGRESQL11-2023-001)

The version of postgresql installed on the remote host is prior to 11.20-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2POSTGRESQL11-2023-001 advisory. This enabled an attacker having database-level CREATE privilege to execute arbitrary code as the bootstrap...

7.5CVSS7.1AI score0.01526EPSS
Exploits0References6
CNNVD
CNNVD
added 2023/05/10 12:0 a.m.1 views

WordPress Plugin WPMobile.App 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

5.9CVSS6.3AI score0.00207EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2020/06/17 12:0 a.m.22 views

Intel Active Management Technology Information Disclosure Vulnerability (INTEL-SA-00295)

Intel Active Management Technology AMT is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

5.3CVSS5.3AI score0.00859EPSS
Exploits0References1
exploitpack
exploitpack
added 2018/11/12 12:0 a.m.14 views

Paroiciel 11.20 - tRecIdListe SQL Injection

Paroiciel 11.20 - tRecIdListe SQL Injection Exploit Title: Paroiciel 11.20 - 'tRecIdListe' SQL Injection Dork: N/A Date: 2018-11-09 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.paroiciel.com/ Software Link:...

0.9AI score
Exploits0
Rows per page
Query Builder