Lucene search
+L

173 matches found

Positive Technologies
Positive Technologies
added 2026/01/16 12:0 a.m.18 views

PT-2026-3210

Statistics Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly exploit a specific functionality to query database contents...

8.7CVSS7.1AI score0.00478EPSS
SaveExploits0References3
OSV
OSV
added 2025/12/18 7:16 p.m.6 views

CVE-2025-14885

A flaw has been found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /userleads.php of the component Leads Generation Module. Executing manipulation can lead to unrestricted upload. The attack can be launched remotely. The exploit has been...

8.8CVSS5.5AI score0.00304EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/11/17 4:2 p.m.6 views

CVE-2025-13289 1000projects Design & Development of Student Database Management System SubjectDetails.php sql injection

A vulnerability was detected in 1000projects Design & Development of Student Database Management System 1.0. Affected is an unknown function of the file /TeacherLogin/Academics/SubjectDetails.php. The manipulation of the argument SubCode results in sql injection. The attack may be performed from...

6.5CVSS6.7AI score0.00299EPSS
SaveExploits1References4
CVE
CVE
added 2025/11/17 4:2 p.m.35 views

CVE-2025-13289

CVE-2025-13289 concerns 1000projects Design & Development of Student Database Management System 1.0. The vulnerability exists in an unknown function that processes SubCode in /TeacherLogin/Academics/SubjectDetails.php, where input manipulation enables SQL injection. Exploitation is possible remot...

8.8CVSS6.4AI score0.00299EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2025/11/07 6:57 p.m.14 views

CVE-2025-36008 IBM Db2 denial of service

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows includes Db2 Connect Server could allow an authenticated user to cause a denial of service due to improper allocation of resources...

6.5CVSS0.00285EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/11/07 6:40 p.m.5 views

CVE-2025-36185 IBM Db2 denial of service

IBM Db2 12.1.0 through 12.1.2 for Linux, UNIX and Windows includes Db2 Connect Server could allow a local user to cause a denial of service due to improper neutralization of special elements in data query logic...

6.2CVSS5.8AI score0.00127EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2025-29146

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00604EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2023-30697

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00752EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2024-54994

Malicious code in bioql PyPI...

4.4CVSS6.6AI score0.00186EPSS
SaveExploits1References1
NVD
NVD
added 2025/09/15 3:15 a.m.8 views

CVE-2025-10452

Statistical Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents with high-level privileges...

9.8CVSS0.00604EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/09/15 2:47 a.m.2 views

CVE-2025-10452 Gotac|Statistical Database System - Missing Authentication

Statistical Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents with high-level privileges...

9.8CVSS6.8AI score0.00604EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/09/15 2:47 a.m.12 views

CVE-2025-10452 Gotac|Statistical Database System - Missing Authentication

Statistical Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents with high-level privileges...

9.8CVSS0.00604EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/09/15 12:0 a.m.7 views

PT-2025-37444

Name of the Vulnerable Software and Affected Versions: Gotac Statistical Database System affected versions not specified Description: The Gotac Statistical Database System has a Missing Authentication vulnerability. This allows unauthenticated remote attackers to read, modify, and delete database...

9.8CVSS6.5AI score0.00604EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
added 2025/07/30 12:0 a.m.9 views

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to buffer overflow in the stack, allows a attacker to cause service interruptions.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending specially crafted requests...

6.8CVSS5.8AI score0.00291EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/07/30 12:0 a.m.9 views

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to uncontrolled memory distribution, allows a attacker to cause service interruptions.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specially crafted requests...

5.3CVSS5.5AI score0.00283EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/06/09 12:0 a.m.10 views

The vulnerability of IBM DB2 database management systems and IBM DB2 Connect Servers lies in their uncontrolled memory distribution, which allows attackers to cause service interruptions.

The vulnerability of IBM DB2 database management systems, including IBM DB2 Connect Server, is related to uncontrolled memory allocation. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted requests...

5.3CVSS5.4AI score0.00283EPSS
SaveExploits0References2Affected Software2
CNNVD
CNNVD
added 2025/05/26 12:0 a.m.6 views

SourceCodester Client Database Management System 注入漏洞

SourceCodester Client Database Management System is SourceCodester open source a client database management system . An injection vulnerability exists in SourceCodester Client Database Management System version 1.0, which originates from SQL injection due to incorrect operation of the parameter...

9.8CVSS5.7AI score0.00371EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/05/22 8:39 p.m.5 views

CVE-2021-26595

In Directus 8.x through 8.8.1, an attacker can learn sensitive information such as the version of the CMS, the PHP version used by the site, and the name of the DBMS, simply by view the result of the api-aa, called automatically upon a connection. NOTE: This vulnerability only affects products th...

5.3CVSS6.1AI score0.00702EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:36 p.m.6 views

CVE-2021-39377

A SQL Injection vulnerability exists in openSIS 8.0 when MySQL MariaDB is being used as the application database. A malicious attacker can issue SQL commands to the MySQL MariaDB database through the index.php username parameter...

9.8CVSS7.3AI score0.03604EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/05/09 12:0 a.m.7 views

SourceCodester Client Database Management System 安全漏洞

SourceCodester Client Database Management System is a SourceCodester open source client database management system. A security vulnerability exists in SourceCodester Client Database Management System version 1.0, which originates from a misbehavior of the parameter uploadedfilecancelled in...

9.8CVSS6.9AI score0.01054EPSS
SaveExploits0References3
Rows per page
Query Builder