2910 matches found
IBM Db2 安全漏洞
IBM Db2 is a relational database management system from International Business Machines IBM. The system executes on UNIX, Linux, IBMi, z/OS, and Windows server versions. A security vulnerability exists in IBM Db2 versions 12.1.0 through 12.1.3, which stems from performing an unnecessarily...
IBM Db2 安全漏洞
IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM Db2, which can be exploited by an attacker to cause a...
CVE-2025-64163
DataEase, an open source data visualization/analysis tool, has a SSRF vulnerability in version 2.10.14 and earlier due to incomplete filtering for the dns:// protocol. The blacklist only filters ldap:// and ldaps://, leaving dns:// unprotected and allowing potential server-side requests to intern...
CVE-2025-55343
Quipux 4.0.1 through e1774ac allows authenticated users to conduct SQL injection attacks via busqueda/busqueda.php txtdepecodi, busqueda/busqueda.php txtusuacodi, anexoslista.php raditemp, Administracion/listas/formAreaajax.php codDepe, Administracion/listas/formDepeHijoajax.php codDepe,...
CVE-2025-12598
A flaw has been found in SourceCodester Best House Rental Management System 1.0. Affected by this issue is the function savetenant of the file /adminclass.php. Executing manipulation of the argument firstname can lead to sql injection. The attack can be launched remotely. The exploit has been...
The vulnerability of the DB2 IBM DB2 High Performance Unload (Db2 HPU) table unloading utility lies in incorrect calculations of the size of the allocated buffer, allowing a malicious actor to cause service interruptions.
The vulnerability of the DB2 IBM DB2 High Performance Unload Db2 HPU table unloading utility is related to incorrect calculations of the size of the buffer allocated. Exploiting this vulnerability allows a malicious actor to cause service interruptions...
The vulnerability of the DB2 IBM DB2 High Performance Unload (Db2 HPU) table unloading utility lies in the copying of buffers without checking the size of the input data. This allows an attacker to trigger a service failure.
The vulnerability of the DB2 IBM DB2 High Performance Unload Db2 HPU table unloading utility is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to cause service interruptions...
EUVD-2025-36445
An unauthenticated user can connect to a publicly accessible database using arbitrary credentials. The system grants full access to the database by leveraging a previously authenticated connection through a "mmBackup" application. This flaw allows attackers to bypass authentication mechanisms and...
EUVD-2025-36385
IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to the incorrect calculation of the size of the data that is being pointed to...
PT-2025-44151
Name of the Vulnerable Software and Affected Versions Asseco mMedica versions prior to 11.9.5 Description An unauthenticated user can connect to a publicly accessible database using arbitrary credentials. The system grants full access to the database by leveraging a previously authenticated...
ROS-20251028-02
The vulnerability of the Pgpool-II database connection pooling management utility is related to disclosure of information. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to the sensitive data...
CVE-2025-12277
CVE-2025-12277 affects Abdullah-Hasan-Sajjad Online-School. The vulnerability is a SQL injection in /studentLogin.php caused by improper handling of the Email parameter, allowing remote exploitation. Affected versions are prior to f09dda77b4c29aa083ff57f4b1eb991b98b68883. Exploitation is possible...
PT-2025-44068
Name of the Vulnerable Software and Affected Versions IBM DB2 High Performance Unload versions 5.1, 6.1, 6.1.0.1, 6.1.0.2, 6.1.0.3, 6.5, and 6.5.0.0 IF1 IBM DB2 High Performance Unload version 5.1.0.1 Description An authenticated user can cause the program to crash due to an incorrect calculation...
Oracle Database Server (October 2025 CPU)
The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2025 CPU advisory. - Vulnerability in the SQLcl jgit component of Oracle Database Server. Supported versions that are affected are 23.4-23.9. Difficult to...
CVE-2025-62179 WeGIA SQL Injection via 'cpf' param at endpoint `/html/funcionario/cadastro_funcionario_pessoa_existente.php`
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.1, a SQL Injection vulnerability was identified in the /html/funcionario/cadastrofuncionariopessoaexistente.php endpoint, specifically in the cpf parameter. This vulnerability allows...
PT-2025-41269
Name of the Vulnerable Software and Affected Versions SourceCodester Simple E-Commerce Bookstore version 1.0 Description A flaw exists that allows for remote manipulation of the register username argument in the /register.php file, leading to SQL injection. The exploit is publicly available...
EUVD-2007-5490
Malware in sbrugna...
EUVD-2010-1003
Malware in sbrugna...