CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

81 matches found

Positive Technologies•added 2022/12/08 12:00 a.m.•13 views

PT-2022-26178 · Dhis2 · Dhis2

Name of the Vulnerable Software and Affected Versions: DHIS2 versions prior to 2.36.12.1 DHIS2 versions prior to 2.37.8.1 DHIS2 versions prior to 2.38.2.1 DHIS2 versions prior to 2.39.0.1 Description: DHIS 2 is an open source information system for data capture, management, validation, analytics...

5CVSS4.3AI score0.00419EPSS

SaveExploits0References6

CNVD•added 2022/06/02 12:00 a.m.•74 views

DHIS2 SQL Injection Vulnerability

DHIS2 is an information system for data capture, management, validation, analysis, and visualization. DHIS2 is vulnerable to SQL injection, which can be exploited by attackers to read, edit, and delete data in the DHIS2 instance database...

6.5CVSS3.7AI score0.01119EPSS

SaveExploits0Affected Software1

NVD•added 2022/06/01 6:15 p.m.•42 views

CVE-2022-24848

DHIS2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection security vulnerability affects the /api/programs/orgUnits?programs= API endpoint in DHIS2 versions prior to 2.36.10.1 and 2.37.6.1. The system is vulnerable to attack only from...

8.8CVSS0.01119EPSS

SaveExploits0References4

Prion•added 2022/06/01 6:15 p.m.•24 views

Sql injection

6.5CVSS8.8AI score0.01119EPSS

SaveExploits0References4Affected Software1

Cvelist•added 2022/06/01 5:20 p.m.•47 views

CVE-2022-24848 SQL Injection in DHIS2's in OrgUnit program association

8.8CVSS9.1AI score0.01119EPSS

SaveExploits0References4

CVE•added 2022/06/01 5:20 p.m.•762 views

CVE-2022-24848

DHIS2 SQL Injection (CVE-2022-24848) affects the API endpoint /api/programs/orgUnits?programs= for DHIS2 versions prior to 2.36.10.1 and 2.37.6.1. The vulnerability requires the attacker to be logged in as a DHIS2 user and could allow reading, editing, or deleting data in the instance’s database....

8.8CVSS8.9AI score0.01119EPSS

SaveExploits0References4Affected Software1

Vulnrichment•added 2022/06/01 5:20 p.m.•13 views

CVE-2022-24848 SQL Injection in DHIS2's in OrgUnit program association

8.8CVSS8.9AI score0.01119EPSS

SaveExploits0References4

OSV•added 2022/06/01 5:20 p.m.•37 views

CVE-2022-24848 SQL Injection in DHIS2's in OrgUnit program association

8.8CVSS8.7AI score

SaveExploits0References6

OSV•added 2021/11/01 10:15 p.m.•17 views

CVE-2021-41187

DHIS 2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection security vulnerability has been found in specific versions of DHIS2. This vulnerability affects the API endpoints for /api/trackedEntityInstances and api/events in DHIS2. The...

8.8CVSS7.6AI score

SaveExploits0References1

NVD•added 2021/11/01 10:15 p.m.•24 views

CVE-2021-41187

8.8CVSS0.00854EPSS

SaveExploits0References1

Prion•added 2021/11/01 10:15 p.m.•21 views

Sql injection

6.5CVSS8.9AI score0.00854EPSS

SaveExploits0References1Affected Software1

CVE•added 2021/11/01 9:20 p.m.•60 views

CVE-2021-41187

CVE-2021-41187 concerns DHIS 2. A SQL injection vulnerability exists in specific DHIS2 versions (2.32, 2.33, 2.34, 2.35, 2.36) affecting the REST endpoints for /api/trackedEntityInstances and /api/events . Exploitation requires the attacker to be an authenticated DHIS2 user, and successful exploi...

8.8CVSS8.8AI score0.00854EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2021/11/01 9:20 p.m.•31 views

CVE-2021-41187 SQL Injection in DHIS2 Tracker API

8.1CVSS9.1AI score0.00854EPSS

SaveExploits0References1

NVD•added 2021/10/29 2:15 p.m.•26 views

CVE-2021-39179

DHIS 2 is an information system for data capture, management, validation, analytics and visualization. A SQL Injection vulnerability in the Tracker component in DHIS2 Server allows authenticated remote attackers to execute arbitrary SQL commands via unspecified vectors. This vulnerability affects...

8.8CVSS0.0192EPSS

SaveExploits1References3

OSV•added 2021/10/29 2:15 p.m.•22 views

CVE-2021-39179

8.8CVSS8.3AI score

SaveExploits0References3

Prion•added 2021/10/29 2:15 p.m.•23 views

Sql injection

6.5CVSS8.9AI score0.0192EPSS

SaveExploits1References3Affected Software1

Cvelist•added 2021/10/29 1:20 p.m.•37 views

CVE-2021-39179 SQL Injection in DHIS2 Tracker API

8.8CVSS9.2AI score0.0192EPSS

SaveExploits1References3

OSV•added 2021/06/24 4:15 p.m.•18 views

CVE-2021-32704

DHIS 2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection security vulnerability has been found in specific versions of DHIS2. This vulnerability affects the /api/trackedEntityInstances API endpoint in DHIS2 versions 2.34.4, 2.35.2,...

8.8CVSS7.6AI score

SaveExploits0References1

NVD•added 2021/06/24 4:15 p.m.•25 views

CVE-2021-32704

DHIS 2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection security vulnerability has been found in specific versions of DHIS2. This vulnerability affects the /api/trackedEntityInstances API endpoint in DHIS2 versions 2.34.4, 2.35.2,...

8.8CVSS0.00769EPSS

SaveExploits0References1

Cvelist•added 2021/06/24 4:10 p.m.•34 views

CVE-2021-32704 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in dhis2-core

DHIS 2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection security vulnerability has been found in specific versions of DHIS2. This vulnerability affects the /api/trackedEntityInstances API endpoint in DHIS2 versions 2.34.4, 2.35.2,...

8.5CVSS9.1AI score0.00769EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by