Lucene search
+L

217 matches found

SUSE CVE
SUSE CVE
•added 2023/02/15 5:20 a.m.•16 views

SUSE CVE-2015-2282

Stack-based buffer overflow in the LZC decompression implementation CsObjectInt::CsDecomprLZC function in vpa106cslzc.cpp in SAP MaxDB 7.5 and 7.6, Netweaver Application Server ABAP, Netweaver Application Server Java, Netweaver RFC SDK, GUI, RFC SDK, SAPCAR archive tool, and other products allows...

7.5CVSS8.1AI score0.03518EPSS
SaveExploits1References5
Kitploit
Kitploit
•added 2020/09/07 2:38 a.m.•250 views

SQLMap v1.4.9 - Automatic SQL Injection And Database Takeover Tool

SQLMap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lastin...

8.5AI score
SaveExploits0References9
Kitploit
Kitploit
•added 2019/10/03 12:00 p.m.•128 views

SQLMap v1.3.10 - Automatic SQL Injection And Database Takeover Tool

SQLMap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lastin...

8.5AI score
SaveExploits0References20
n0where
n0where
•added 2018/11/12 5:20 a.m.•102 views

Automatic SQL injection and database takeover tool: sqlmap

sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lastin...

SaveExploits0References2
Kitploit
Kitploit
•added 2018/09/07 12:57 p.m.•105 views

SQLMap v1.2.9 - Automatic SQL Injection And Database Takeover Tool

SQLMap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lastin...

8.5AI score
SaveExploits0References20
CNVD
CNVD
•added 2018/08/28 12:00 a.m.•18 views

SAP MaxDB (liveCache SQL Injection Vulnerability)

SAP MaxDB liveCache is a German SAP SAP company's set of database management system. The system supports running on Windeows, Linux and Unix and other platforms. A SQL injection vulnerability exists in SAP MaxDB liveCache versions 7.8 and 7.9, which can be exploited by an attacker to execute...

7.2CVSS7.5AI score0.01702EPSS
SaveExploits0References1
OSV
OSV
•added 2018/08/14 4:29 p.m.•15 views

CVE-2018-2450

SAP MaxDB liveCache, versions 7.8 and 7.9, allows an attacker who gets DBM operator privileges to execute crafted database queries and therefore read, modify or delete sensitive data from database...

7.2CVSS5.9AI score0.01702EPSS
SaveExploits0References3
NVD
NVD
•added 2018/08/14 4:29 p.m.•33 views

CVE-2018-2450

SAP MaxDB liveCache, versions 7.8 and 7.9, allows an attacker who gets DBM operator privileges to execute crafted database queries and therefore read, modify or delete sensitive data from database...

7.2CVSS7.1AI score0.01702EPSS
SaveExploits0References3
Prion
Prion
•added 2018/08/14 4:29 p.m.•23 views

Code injection

SAP MaxDB liveCache, versions 7.8 and 7.9, allows an attacker who gets DBM operator privileges to execute crafted database queries and therefore read, modify or delete sensitive data from database...

6.5CVSS7AI score0.01702EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2018/08/14 4:00 p.m.•73 views

CVE-2018-2450

CVE-2018-2450 affects SAP MaxDB (liveCache), specifically versions 7.8 and 7.9. The issue allows an attacker who has DBM operator privileges to execute crafted database queries, leading to reading, modification, or deletion of sensitive data from the database. The root cause is described as a SQL...

7.2CVSS7AI score0.01702EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2018/08/14 4:00 p.m.•33 views

CVE-2018-2450

SAP MaxDB liveCache, versions 7.8 and 7.9, allows an attacker who gets DBM operator privileges to execute crafted database queries and therefore read, modify or delete sensitive data from database...

7.1AI score0.01702EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/08/14 12:00 a.m.•3 views

CVE-2018-2450: Improper Neutralization of Special Elements used in an SQL Command

SAP MaxDB liveCache, versions 7.8 and 7.9, allows an attacker who gets DBM operator privileges to execute crafted database queries and therefore read, modify or delete sensitive data from database...

7.2CVSS7.5AI score0.01702EPSS
SaveExploits0References2
CNVD
CNVD
•added 2018/05/22 12:00 a.m.•21 views

SAP MaxDB ODBC Remote Code Injection Vulnerability

SAP MaxDB is Germany SAP SAP company's set of cross-platform, ANSI SQL-92-compatible relational database management system. ODBC driver is one of the ODBC connection driver. A security vulnerability exists in the SAP MaxDB ODBC driver prior to version 7.9.09.07. An attacker can exploit this...

9.8CVSS7.7AI score0.01763EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2018/05/14 12:00 a.m.•25 views

SAP MaxDB Data Link Properties Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP MaxDB. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of UDL fil...

9.8CVSS5.7AI score0.01763EPSS
SaveExploits0References1
Prion
Prion
•added 2018/05/09 8:29 p.m.•22 views

Code injection

SAP MaxDB ODBC driver all versions before 7.9.09.07 allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

7.5CVSS9.4AI score0.01763EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2018/05/09 8:29 p.m.•15 views

CVE-2018-2418

SAP MaxDB ODBC driver all versions before 7.9.09.07 allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

9.8CVSS5.8AI score0.01763EPSS
SaveExploits0References3
NVD
NVD
•added 2018/05/09 8:29 p.m.•24 views

CVE-2018-2418

SAP MaxDB ODBC driver all versions before 7.9.09.07 allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

9.8CVSS6.6AI score0.01763EPSS
SaveExploits0References3
CVE
CVE
•added 2018/05/09 8:00 p.m.•57 views

CVE-2018-2418

SAP MaxDB ODBC driver (all versions before 7.9.09.07) is affected by CVE-2018-2418, enabling an attacker to inject code that can be executed by the application and thereby take control of the vulnerable process. Affected component: SAP MaxDB ODBC driver; root cause is a vulnerability in that driv...

9.8CVSS9.4AI score0.01763EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2018/05/09 8:00 p.m.•35 views

CVE-2018-2418

SAP MaxDB ODBC driver all versions before 7.9.09.07 allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

5.5CVSS9.5AI score0.01763EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/09 12:00 a.m.•2 views

CVE-2018-2418: Improper Control of Generation of Code

SAP MaxDB ODBC driver all versions before 7.9.09.07 allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

9.8CVSS7.2AI score0.01763EPSS
SaveExploits0References2
Rows per page
Query Builder