Lucene search
+L

15253 matches found

CNVD
CNVD
•added 2021/11/25 12:00 a.m.•85 views

Advantech R-SeeNet SQL Injection Vulnerability (CNVD-2021-93824)

Advantech R-SeeNet is an industrial monitoring software from Advantech, Taiwan, China. The software is based on the snmp protocol for monitoring platforms and is available for Linux and Windows platforms.Advantech R-SeeNet is vulnerable to a SQL injection vulnerability due to insufficient cleanin...

7.7CVSS4.3AI score0.01172EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/11/25 12:00 a.m.•70 views

Advantech R-SeeNet SQL Injection Vulnerability (CNVD-2021-92432)

Advantech R-SeeNet is an industrial monitoring software from Advantech Taiwan. The software is based on the snmp protocol for monitoring platforms and is available for Linux and Windows platforms.Advantech R-SeeNet is vulnerable to a SQL injection vulnerability due to insufficient cleaning of...

7.7CVSS4.4AI score0.01181EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/11/25 12:00 a.m.•73 views

Advantech R-SeeNet SQL Injection Vulnerability (CNVD-2021-93825)

Advantech R-SeeNet is an industrial monitoring software from Advantech, Taiwan, China. The software is based on the snmp protocol for monitoring platforms and is available for Linux and Windows platforms.Advantech R-SeeNet is vulnerable to a SQL injection vulnerability due to insufficient cleanin...

7.7CVSS4.3AI score0.01215EPSS
SaveExploits1References1
Check Point Advisories
Check Point Advisories
•added 2021/11/25 12:00 a.m.•87 views

BillQuick Website SQL injection (CVE-2021-42258)

An SQL injection vulnerability exists in BillQuick Website. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

6.8CVSS9.9AI score0.74426EPSS
SaveExploits3
CNVD
CNVD
•added 2021/11/25 12:00 a.m.•60 views

Advantech R-SeeNet SQL Injection Vulnerability (CNVD-2021-93830)

Advantech R-SeeNet is an industrial monitoring software from Advantech Taiwan. The software is based on the snmp protocol for monitoring platforms and is available for Linux and Windows platforms.Advantech R-SeeNet is vulnerable to a SQL injection vulnerability due to insufficient cleaning of...

7.7CVSS4.4AI score0.01181EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/11/25 12:00 a.m.•56 views

Advantech R-SeeNet SQL Injection Vulnerability (CNVD-2021-93827)

Advantech R-SeeNet is an industrial monitoring software from Advantech Taiwan. The software is based on the snmp protocol for monitoring platforms and is available for Linux and Windows platforms.Advantech R-SeeNet is vulnerable to a SQL injection vulnerability due to insufficient cleaning of...

8.8CVSS4.4AI score0.01425EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/11/24 12:00 a.m.•48 views

Advantech R-SeeNet SQL Injection Vulnerability (CNVD-2021-90860)

Advantech R-SeeNet is an industrial monitoring software from Advantech Taiwan, China. The software is based on the snmp protocol for monitoring platforms and is available for Linux and Windows platforms.Advantech R-SeeNet is vulnerable to SQL injection, which can be exploited by remote attackers ...

7.7CVSS7.1AI score0.01181EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/11/24 12:00 a.m.•63 views

Advantech R-SeeNet SQL Injection Vulnerability (CNVD-2021-90863)

Advantech R-SeeNet is an industrial monitoring software from Advantech Taiwan, China. The software is based on the snmp protocol for monitoring platforms and is available for Linux and Windows platforms.Advantech R-SeeNet is vulnerable to SQL injection, which can be exploited by remote attackers ...

8.8CVSS7.1AI score0.01425EPSS
SaveExploits1References1
Mend
Mend
•added 2021/11/22 3:59 p.m.•3 views

CVE-2021-3935

When PgBouncer is configured to use "cert" authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of TLS certificate verification and encryption. This flaw affects PgBouncer versions prior to 1.16.1...

9.2CVSS0.01116EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2021/11/22 12:00 a.m.•22 views

Advantech R-SeeNet SQL注入漏洞

Advantech R-SeeNet is an industrial monitoring software from Advantech Taiwan, China. The software is based on the snmp protocol for monitoring platforms and is available for Linux and Windows platforms.Advantech R-SeeNet is vulnerable to SQL injection, which can be exploited by remote attackers ...

7.7CVSS6.3AI score0.01172EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2021/11/19 8:42 p.m.•40 views

SQL Injection in thinkjs

SQL injection vulnerability in the model.increment and model.decrement function in ThinkJS 3.2.10 allows remote attackers to execute arbitrary SQL commands via the step parameter...

9.8CVSS10.2AI score0.01489EPSS
SaveExploits1References4Affected Software1
Check Point Advisories
Check Point Advisories
•added 2021/11/17 12:00 a.m.•86 views

Stivasoft Fundraising Script SQL Injection (CVE-2020-22223; CVE-2020-22225; CVE-2020-22226)

An SQL injection vulnerability exists in Stivasoft Fundraising Script. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS9.9AI score0.01133EPSS
SaveExploits3
Check Point Advisories
Check Point Advisories
•added 2021/11/17 12:00 a.m.•51 views

Sourcecodester E-Negosyo System SQL Injection (CVE-2021-41674)

An SQL injection vulnerability exists in Sourcecodester E-Negosyo System. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS8.6AI score0.0174EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
•added 2021/11/16 12:00 a.m.•68 views

Sophos XG Firewall SQL Injection (CVE-2020-12271)

An SQL injection vulnerability exists in Sophos XG Firewall. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS9.6AI score0.42434EPSS
SaveExploits1
Mend
Mend
•added 2021/11/15 3:52 p.m.•5 views

CVE-2021-41765

A SQL injection issue in pages/editfields/9ajax/addkeyword.php of ResourceSpace 9.5 and 9.6 rev 18274 allows remote unauthenticated attackers to execute arbitrary SQL commands via the k parameter. This allows attackers to uncover the full contents of the ResourceSpace database, including user...

9.8CVSS0.67845EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/11/15 3:52 p.m.•50 views

CVE-2021-41765

A SQL injection issue in pages/editfields/9ajax/addkeyword.php of ResourceSpace 9.5 and 9.6 rev 18274 allows remote unauthenticated attackers to execute arbitrary SQL commands via the k parameter. This allows attackers to uncover the full contents of the ResourceSpace database, including user...

10AI score0.67845EPSS
SaveExploits1References2
zdt
zdt
•added 2021/11/12 12:00 a.m.•3744 views

Mumara Classic 2.93 - (license) SQL Injection (Unauthenticated) Vulnerability

Exploit Title: Mumara Classic 2.93 - 'license' SQL Injection Unauthenticated Exploit Author: v0yager Shain Lakin Vendor Homepage: https://mumara.com Version: = 2.93 Tested on: CentOS 7 -==== Vulnerability ====- An SQL injection vulnerability in licenseupdate.php in Mumara Classic through 2.93...

7.1AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2021/11/11 12:00 a.m.•50 views

Wuzhi CMS SQL Injection (CVE-2021-40674)

An SQL injection vulnerability exists in Wuzhi CMS. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS10AI score0.01116EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2021/11/08 12:00 a.m.•5 views

PT-2021-20643

Name of the Vulnerable Software and Affected Versions: Hitachi Vantara Pentaho Business Analytics versions through 9.1 Description: The issue allows an unauthenticated user to execute arbitrary SQL queries on any Pentaho data source, thus enabling the retrieval of data from related databases. Thi...

9.8CVSS0.05868EPSS
SaveExploits3References5
zdt
zdt
•added 2021/11/07 12:00 a.m.•596 views

Pentaho Business Analytics / Pentaho Business Server 9.1 SQL Injection Vulnerability

Pentaho allows users to create and manage Data Sources. Users can select a Data Source when creating a Dashboard through the Pentaho User Console. When a Data Source is added, Pentaho makes a HTTP request to the dashboards editor /pentaho/api/repos/dashboards/editor in order to test the connectio...

9.8CVSS9.1AI score0.51653EPSS
SaveExploits7
Rows per page
Query Builder