Lucene search
K

88 matches found

Cvelist
Cvelist
added 2026/05/27 7:54 a.m.21 views

CVE-2026-40830 Authenticated SQLi in UpdateParam function

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the admin.mbnetj.php files UpdateParam function due to improper neutralization of special elements in a SQL UPDATE command allowing for reading the whole database and changing values in a non critical...

7CVSS0.00043EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/05/01 12:0 a.m.3 views

Open5GS 安全漏洞

Open5GS is an open-source implementation of 5G Core and EPC in C language, which serves as the core network for LTE/NR networks. Versions of Open5GS 2.7.7 and earlier contain security vulnerabilities. These vulnerabilities stem from the amfnamfcallbackhandlesdmdatachangenotify function in the AMF...

5.3CVSS5.8AI score0.00017EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2025/10/09 3:31 p.m.3 views

Apache Flink CDC is vulnerable to SQL Injection through maliciously crafted identifiers

Apache Flink CDC version 3.0.0 to before 3.5.0 are vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted database name or crafted table name. Even through only the logged-in database user can trigger the attack, users are recommended to update Flink CDC version to 3.5.0...

8.8CVSS8AI score0.00037EPSS
Exploits0References6Affected Software5
OSV
OSV
added 2025/10/09 3:31 p.m.1 views

GHSA-WQM3-W3P6-XJGM Apache Flink CDC is vulnerable to SQL Injection through maliciously crafted identifiers

Apache Flink CDC version 3.0.0 to before 3.5.0 are vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted database name or crafted table name. Even through only the logged-in database user can trigger the attack, users are recommended to update Flink CDC version to 3.5.0...

5.1CVSS8AI score0.00037EPSS
Exploits0References6
Snyk
Snyk
added 2025/10/09 1:42 p.m.3 views

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the quote function that fails to properly escape special characters. An attacker can execute arbitrary SQL commands by supplying specially crafted input values for database name or table names. Remediation Upgrade...

8.8CVSS8.6AI score0.00037EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/10/09 12:0 a.m.2 views

PT-2025-41380

Name of the Vulnerable Software and Affected Versions Apache Flink CDC version 3.4.0 Description The software is susceptible to a SQL injection due to maliciously crafted identifiers, such as a crafted database name or table name. The attack can only be triggered by a logged-in database user...

8.8CVSS7.4AI score0.00037EPSS
Exploits0References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2005-3437

Malware in sbrugna...

10CVSS6.3AI score0.07741EPSS
Exploits5References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2008-1815

Malware in sbrugna...

5.5CVSS6.4AI score0.0052EPSS
Exploits0References12
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2006-5321

Malware in sbrugna...

9CVSS6.4AI score0.05022EPSS
Exploits0References14
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2007-0271

Malware in sbrugna...

5.5CVSS6.4AI score0.00592EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2006-5320

Malware in sbrugna...

9CVSS6.4AI score0.05022EPSS
Exploits0References14
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2007-2110

Malware in sbrugna...

6.8CVSS6.4AI score0.03575EPSS
Exploits0References12
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2006-0264

Malware in sbrugna...

10CVSS6.4AI score0.01243EPSS
Exploits1References11
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2023-37418

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple out-of-bounds write vulnerabilities exist in the VCD parsevaluechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead...

7.8CVSS7.4AI score0.00068EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/03/17 12:0 a.m.9 views

CVE-2025-25618

Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation allowing the change of Section Name and Room Number by Teachers...

0.00081EPSS
Exploits1References2
OSV
OSV
added 2024/07/10 8:15 a.m.1 views

CVE-2024-6422

An unauthenticated remote attacker can manipulate the device via Telnet, stop processes, read, delete and change data...

9.8CVSS5.8AI score0.01858EPSS
Exploits0References1
NVD
NVD
added 2024/07/10 8:15 a.m.24 views

CVE-2024-6422

An unauthenticated remote attacker can manipulate the device via Telnet, stop processes, read, delete and change data...

9.8CVSS0.01858EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/07/10 12:0 a.m.2 views

PT-2024-37615 · Pepperl+Fuchs · Oit1500-F113-B12-Cb +7

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An unauthenticated remote attacker can manipulate the device via Telnet, stop processes, read, delete and change data. Recommendations: At the moment,...

9.8CVSS7.2AI score0.01858EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/10/25 12:0 a.m.2 views

AliveCor KardiaMobile 授权问题漏洞

AliveCor KardiaMobile is a personal electrocardiograph from AliveCor USA. AliveCor KardiaMobile suffers from a security vulnerability that stems from susceptibility to an intent to manipulate vulnerability that allows an attacker to bypass application authentication and view or change information...

6.1CVSS6.3AI score0.00093EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/09/22 12:0 a.m.0 views

MediaWiki 代码问题漏洞

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. The product can be used to deploy in-house knowledge management and content management systems. A security vulnerability exists in MediaWiki. An attacker can exploit this vulnerability to bypas...

5.3CVSS5.5AI score0.00167EPSS
Exploits0References6
Rows per page
Query Builder