CVE-2026-31825: Improper Neutralization of Special Elements used in an SQL Command

Sylius is an Open Source eCommerce Framework on Symfony. Sylius API filters ProductPriceOrderFilter and TranslationOrderNameAndLocaleFilter pass user-supplied order direction values directly to Doctrine's orderBy without validation. An attacker can inject arbitrary DQL. The issue is fixed in...

EUVD-2014-2539

Malware in sbrugna...

EUVD-2014-2544

Malware in sbrugna...

EUVD-2014-2556

Malware in sbrugna...

EUVD-2015-0561

Malware in sbrugna...

EUVD-2015-0560

Malware in sbrugna...

EUVD-2016-10664

Malware in sbrugna...

EUVD-2017-14686

Malware in sbrugna...

EUVD-2016-0892

Malware in sbrugna...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a reset of dql statistics on a NONFATAL error, which could result in an incorrect byte queue limit algorithm...

CVE-2024-50297

CVE-2024-50297 concerns the Linux kernel Xilinx axienet driver (net/xilinx) where a synchronization race between enqueueing Tx packets in the dql and starting the dmaengine can trigger a crash (BUG: lib/dynamic_queue_limits.c) during iperf stress tests. The evidence across connected documents tie...

CVE-2024-50297: Concurrent Execution using Shared Resource with Improper Synchronization

In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts Enqueue packets in dql after dma engine starts causes race condition. Tx transfer starts once dma engine is started and may execute dql dequeue in completion...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the fact that placing packets into a dql queue after the dma engine has been started can result in a...

PT-2025-40170

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The ibmvnic driver in the Linux kernel contains an issue where dql stats are incorrectly reset during a NON FATAL reset. This can lead to a discrepancy between the number of queued and...

GHSA-2XMM-G482-4439 DQL injection through sorting parameters blocked

Impact Values added at the end of query sorting were passed directly to the DB. We don't know, if it could lead to direct SQL injections, however, we should not allow for easy injection of values there anyway. Patches The issue is fixed in version 1.10.1 and in 1.11-rc.1 Workarounds You have to...

DQL injection through sorting parameters blocked

Impact Values added at the end of query sorting were passed directly to the DB. We don't know, if it could lead to direct SQL injections, however, we should not allow for easy injection of values there anyway. Patches The issue is fixed in version 1.10.1 and in 1.11-rc.1 Workarounds You have to...

CVE-2017-5585

OpenText Documentum Content Server formerly EMC Documentum Content Server 7.3, when PostgreSQL Database is used and returntopresultsrowbased config option is false, does not properly restrict DQL hints, which allows remote authenticated users to conduct DQL injection attacks and execute arbitrary...

Design/Logic Flaw

OpenText Documentum Content Server formerly EMC Documentum Content Server 7.3, when PostgreSQL Database is used and returntopresultsrowbased config option is false, does not properly restrict DQL hints, which allows remote authenticated users to conduct DQL injection attacks and execute arbitrary...

CVE-2017-5585

OpenText Documentum Content Server formerly EMC Documentum Content Server 7.3, when PostgreSQL Database is used and returntopresultsrowbased config option is false, does not properly restrict DQL hints, which allows remote authenticated users to conduct DQL injection attacks and execute arbitrary...

CVE-2017-5585

OpenText Documentum Content Server formerly EMC Documentum Content Server 7.3, when PostgreSQL Database is used and returntopresultsrowbased config option is false, does not properly restrict DQL hints, which allows remote authenticated users to conduct DQL injection attacks and execute arbitrary...