Lucene search
+L

365 matches found

OSV
OSV
added 2023/07/10 4:15 p.m.11 views

CVE-2023-30447

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253436...

7.5CVSS7.4AI score0.01337EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/07/07 12:00 a.m.8 views

PT-2023-5539 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 10.5, 11.1, and 11.5 Description: The issue is related to insufficient input validation in the database management system, which can be exploited by a remote attacker to...

7.8CVSS7.3AI score0.01369EPSS
SaveExploits0References7
OSV
OSV
added 2023/07/06 2:15 p.m.6 views

CVE-2023-36968

A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter...

7.2CVSS5.9AI score0.00897EPSS
SaveExploits1References2
Prion
Prion
added 2023/07/06 2:15 p.m.24 views

Sql injection

A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter...

5.8CVSS7.3AI score0.00897EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2023/07/06 12:00 a.m.44 views

CVE-2023-36968

A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter...

7.7AI score0.00897EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2023/06/22 2:15 p.m.9 views

CVE-2023-36371

An issue in the GDKfree component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.2AI score0.0074EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2023/06/22 2:15 p.m.11 views

CVE-2023-36363

An issue in the nssdatabaselookup component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.2AI score0.008EPSS
SaveExploits1References2
OSV
OSV
added 2023/05/15 3:15 p.m.4 views

DEBIAN-CVE-2023-31623

An issue in the mpboxcopy component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.5AI score0.00905EPSS
SaveExploits1References1
OSV
OSV
added 2023/05/15 3:15 p.m.2 views

DEBIAN-CVE-2023-31624

An issue in the sinvcheckexp component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.5AI score0.00863EPSS
SaveExploits1References1
OSV
OSV
added 2023/05/15 3:15 p.m.4 views

DEBIAN-CVE-2023-31607

An issue in the libcmalloc component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.5AI score0.00905EPSS
SaveExploits1References1
OSV
OSV
added 2023/05/15 3:15 p.m.14 views

UBUNTU-CVE-2023-31620

An issue in the dvcompare component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS5.9AI score0.00905EPSS
SaveExploits1References5
OSV
OSV
added 2023/05/15 3:15 p.m.11 views

UBUNTU-CVE-2023-31627

An issue in the strhash component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS5.9AI score0.00905EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2023/04/12 12:00 a.m.7 views

PT-2023-9510 · Openlink +4 · Openlink Virtuoso-Opensource +4

Name of the Vulnerable Software and Affected Versions: openlink virtuoso-opensource version 7.2.9 Description: The issue in the strhash component of openlink virtuoso-opensource allows attackers to cause a Denial of Service DoS via crafted SQL statements. This is due to the incorrect neutralizati...

8.8CVSS7.4AI score0.00905EPSS
SaveExploits13References67
Positive Technologies
Positive Technologies
added 2023/04/08 12:00 a.m.7 views

PT-2023-4016 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 10.5, 11.1, and 11.5 Description: The issue is related to insufficient input validation in the database management system, which can be exploited by a remote attacker to...

7.5CVSS7.4AI score0.01337EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2023/04/04 12:00 a.m.14 views

The vulnerability of HMI/SCADA CONPROSYS HMI lies in the lack of protective measures for SQL query structures, allowing attackers to gain unauthorized access to protected information.

The vulnerability of HMI/SCADA CONPROSYS HMI lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by sending specially crafted SQL queries to the databas...

7.8CVSS7.3AI score
SaveExploits0References3Affected Software1
Prion
Prion
added 2023/03/27 1:15 a.m.33 views

Design/Logic Flaw

In GraphQL Java aka graphql-java before 20.1, an attacker can send a crafted GraphQL query that causes stack consumption. The fixed versions are 20.1, 19.4, 18.4, 17.5, and 0.0.0-2023-03-20T01-49-44-80e3135...

5CVSS7.3AI score0.01051EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/27 12:00 a.m.14 views

CVE-2023-28867

In GraphQL Java aka graphql-java before 20.1, an attacker can send a crafted GraphQL query that causes stack consumption. The fixed versions are 20.1, 19.4, 18.4, 17.5, and 0.0.0-2023-03-20T01-49-44-80e3135...

7.4AI score0.01051EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/03/26 12:00 a.m.10 views

GraphQL Java 安全漏洞

GraphQL Java is GraphQL Java open source a GraphQL Java implementation . Query language and server-side runtime for application programming interfaces APIs. A security vulnerability exists in versions of GraphQL Java prior to 20.1 that stems from an attacker's ability to send crafted GraphQL...

7.5CVSS6.6AI score0.01051EPSS
SaveExploits0References11
SUSE CVE
SUSE CVE
added 2023/02/15 5:00 a.m.7 views

SUSE CVE-2016-5427

PowerDNS aka pdns Authoritative Server before 3.4.10 does not properly handle a . dot inside labels, which allows remote attackers to cause a denial of service backend CPU consumption via a crafted DNS query...

7.5CVSS6.8AI score0.62982EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:58 a.m.8 views

SUSE CVE-2016-7068

An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 3.7.4 and 4.0.4, allowing a remote, unauthenticated attacker to cause an abnormal CPU usage load on the PowerDNS server by sending crafted DNS queries, which might result in a partial denial of service if th...

7.5CVSS6.7AI score0.07294EPSS
SaveExploits0References3
Rows per page
Query Builder