Lucene search
+L

6982 matches found

Positive Technologies
Positive Technologies
•added 2023/09/18 12:00 a.m.•5 views

PT-2023-28389

Name of the Vulnerable Software and Affected Versions WithSecure Client Security versions 15 WithSecure Server Security versions 15 WithSecure Email and Server Security versions 15 WithSecure Elements Endpoint Protection versions 17 and later WithSecure Client Security for Mac versions 15...

7.5CVSS5.8AI score0.00616EPSS
SaveExploits0References3
NVD
NVD
•added 2023/09/15 9:15 a.m.•24 views

CVE-2023-4835

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CF Software Oil Management Software allows SQL Injection. This issue affects Oil Management Software: before 20230912...

9.8CVSS9.9AI score0.00667EPSS
SaveExploits0References2
NVD
NVD
•added 2023/09/15 9:15 a.m.•33 views

CVE-2023-4661

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Saphira Saphira Connect allows SQL Injection. This issue affects Saphira Connect: before 9...

9.8CVSS9.9AI score0.00912EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/09/15 12:00 a.m.•15 views

Ncode Ncep SQL Injection Vulnerability

Ncode Ncep is an application from Ncode, Inc. A SQL injection vulnerability exists in versions prior to Ncode Ncep 20230914 that stems from improper neutralization of special elements...

9.8CVSS7.9AI score0.00647EPSS
SaveExploits0References3
NVD
NVD
•added 2023/09/14 7:16 p.m.•16 views

CVE-2023-4766

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Movus allows SQL Injection. This issue affects Movus: before 20230913...

9.8CVSS9.9AI score0.00667EPSS
SaveExploits0References2
Prion
Prion
•added 2023/09/14 6:15 p.m.•34 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aceka Company Management allows SQL Injection.This issue affects Company Management: before 3072...

7.5CVSS9.7AI score0.00667EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2023/09/13 1:15 p.m.•38 views

CVE-2022-35849

An improper neutralization of special elements used in an OS command vulnerability CWE-78 in the management interface of FortiADC 7.1.0 through 7.1.1, 7.0.0 through 7.0.3, 6.2.0 through 6.2.5 and 6.1.0 all versions may allow an authenticated attacker to execute unauthorized commands via...

8.8CVSS8.1AI score0.00465EPSS
SaveExploits0References1
Redos
Redos
•added 2023/09/12 12:00 a.m.•37 views

ROS-20230911-05

Vulnerability in the document processing, conversion and generation software suite Ghostscript exists due to failure to take measures to neutralize special elements used in the operating system command. Exploitation of the vulnerability could allow an attacker to execute arbitrary code by using t...

7.8CVSS7.2AI score0.0385EPSS
SaveExploits4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/12 12:00 a.m.•3 views

CVE-2023-36805: Improper Neutralization of Special Elements used in a Command

Windows MSHTML Platform Security Feature Bypass Vulnerability...

7CVSS7AI score0.01762EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2023/09/11 6:49 a.m.•2 views

Malware in ui-elements-icons

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/09/10 7:00 a.m.•12 views

Malicious code in ui-elements-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6568bed59e9443e40fb7b6c1799dfd3b4fa16bb1356a0dbec8a81249a75c59b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2023/09/07 12:00 a.m.•17 views

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications. This vulnerability arises due to the failure to take measures to eliminate special elements within it, allowing attackers to execute arbitrary code.

The vulnerability of the XWiki platform lies in its lack of measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8AI score0.01932EPSS
SaveExploits1References7Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/09/07 12:00 a.m.•12 views

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications. This vulnerability arises due to the failure to take measures to eliminate special elements within it, allowing attackers to execute arbitrary code.

The vulnerability of the XWiki platform lies in its lack of measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS8AI score0.82032EPSS
SaveExploits1References7Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/09/07 12:00 a.m.•17 views

The vulnerability of the Xwiki Commons modules on the XWiki platform, which is used for creating collaborative web applications. This allows a hacker to execute arbitrary code.

The vulnerability of the XWiki Commons modules on the XWiki platform, which is used for creating collaborative web applications, stems from the failure to address the issue of eliminating special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS7AI score0.01029EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2023/09/05 7:15 p.m.•16 views

CVE-2023-4531

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mestav Software E-commerce Software allows SQL Injection.This issue affects E-commerce Software: before 20230901...

9.8CVSS5.8AI score0.00626EPSS
SaveExploits0References1
Prion
Prion
•added 2023/09/05 7:15 p.m.•36 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mestav Software E-commerce Software allows SQL Injection.This issue affects E-commerce Software: before 20230901...

7.5CVSS9.7AI score0.00626EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/09/05 6:15 p.m.•24 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Osoft Paint Production Management allows SQL Injection.This issue affects Paint Production Management: before 2.1...

7.5CVSS9.7AI score0.0062EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/09/04 12:00 a.m.•18 views

The vulnerability of the Zoom video conferencing service, which exists due to the lack of measures to neutralize special elements, allows a violator to increase their privileges.

The vulnerability of the Zoom video conferencing service exists due to the lack of measures taken to neutralize certain elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to enhance their privileges...

10CVSS7.7AI score0.01447EPSS
SaveExploits0References3Affected Software2
CNNVD
CNNVD
•added 2023/09/03 12:00 a.m.•22 views

ForeScout SecureConnector Code Issue Vulnerability

Forescout ForeScout SecureConnector is a network security software from Forescout, Inc. that authenticates machines attempting to join a network. A code issue vulnerability exists in ForeScout SecureConnector version 11.2 that stems from the presence of uncontrolled search path elements...

7.8CVSS7AI score0.00204EPSS
SaveExploits0References2
OSV
OSV
•added 2023/09/02 1:15 p.m.•14 views

CVE-2023-39980

A vulnerability that allows the unauthorized disclosure of authenticated information has been identified in MXsecurity versions prior to v1.0.1. This vulnerability arises when special elements are not neutralized correctly, allowing remote attackers to alter SQL commands...

8.1CVSS5.8AI score0.00691EPSS
SaveExploits0References1
Rows per page
Query Builder