Lucene search
+L

6544 matches found

OSV
OSV
added 2026/02/03 2:16 a.m.13 views

CVE-2025-12774

A vulnerability in the migration script for Brocade SANnav before 3.0 could allow the collection of database sql queries in the SANnav support save file. An attacker with access to Brocade SANnav supportsave file, could open the file and then obtain sensitive information such as details of databa...

7.5CVSS5.8AI score0.00185EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/03 2:16 a.m.25 views

CVE-2025-12774

A vulnerability in the migration script for Brocade SANnav before 3.0 could allow the collection of database sql queries in the SANnav support save file. An attacker with access to Brocade SANnav supportsave file, could open the file and then obtain sensitive information such as details of databa...

7.5CVSS0.00185EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/02/03 1:28 a.m.16 views

EUVD-2025-206759

A vulnerability in the migration script for Brocade SANnav before 3.0 could allow the collection of database sql queries in the SANnav support save file. An attacker with access to Brocade SANnav supportsave file, could open the file and then obtain sensitive information such as details of databa...

4.6CVSS5.3AI score0.00185EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/03 1:28 a.m.39 views

CVE-2025-12774 SQL queries with sensitive information printed in logs with Brocade SANnav before 3.0

A vulnerability in the migration script for Brocade SANnav before 3.0 could allow the collection of database sql queries in the SANnav support save file. An attacker with access to Brocade SANnav supportsave file, could open the file and then obtain sensitive information such as details of databa...

4.6CVSS0.00185EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/02/03 1:28 a.m.6 views

CVE-2025-12774 SQL queries with sensitive information printed in logs with Brocade SANnav before 3.0

A vulnerability in the migration script for Brocade SANnav before 3.0 could allow the collection of database sql queries in the SANnav support save file. An attacker with access to Brocade SANnav supportsave file, could open the file and then obtain sensitive information such as details of databa...

4.6CVSS5.3AI score0.00185EPSS
SaveExploits0References1
CVE
CVE
added 2026/02/03 1:28 a.m.25 views

CVE-2025-12774

The CVE-2025-12774 issue affects Brocade SANnav prior to version 3.0, caused by a vulnerability in the migration script. The flaw can enable collection of database SQL queries from the SANnav support save file, allowing an attacker who has access to that file to open it and extract sensitive info...

7.5CVSS5.3AI score0.00185EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/02/03 1:28 a.m.7 views

CVE-2025-12774

A vulnerability in the migration script for Brocade SANnav before 3.0 could allow the collection of database sql queries in the SANnav support save file. An attacker with access to Brocade SANnav supportsave file, could open the file and then obtain sensitive information such as details of databa...

4.6CVSS8.3AI score0.00185EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/03 12:00 a.m.31 views

PT-2026-5755

A vulnerability in the migration script for Brocade SANnav before 3.0 could allow the collection of database sql queries in the SANnav support save file. An attacker with access to Brocade SANnav supportsave file, could open the file and then obtain sensitive information such as details of databa...

4.6CVSS5.3AI score0.00185EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/02/03 12:00 a.m.18 views

PT-2026-5854

PhpIX 2012 Professional contains a SQL injection vulnerability in the 'id' parameter of product detail.php that allows remote attackers to manipulate database queries. Attackers can inject malicious SQL code through the 'id' parameter to potentially extract or modify database information...

7.1CVSS6AI score0.00283EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/02/03 12:00 a.m.19 views

PT-2026-5857

Name of the Vulnerable Software and Affected Versions GUnet OpenEclass version 1.7.3 Description The software contains multiple SQL injection flaws. Authenticated attackers can manipulate database queries through unvalidated parameters. Attackers can exploit the month parameter in the agenda modu...

7.1CVSS5.6AI score0.00285EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/02/03 12:00 a.m.21 views

PT-2026-6044

Name of the Vulnerable Software and Affected Versions Buroweb version 2505.0.12 Description A SQL injection issue exists in the Buroweb platform, specifically within the 'tablon' component. The problem stems from inadequate sanitization of user-supplied input in multiple parameters. This flaw is...

9.3CVSS5.7AI score0.00326EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/02/03 12:00 a.m.14 views

PT-2026-6285

PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, a SQL injection risk exists in karma queries due to unsafe literal substitution for an IN ... list. This issue has been patched in version 1.33.0...

9.8CVSS5.7AI score0.00271EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/02/03 12:00 a.m.17 views

Brocade SANnav 安全漏洞

Brocade SANnav is a storage area network management software developed by the American company Brocade. Prior to version 3.0 of Brocade SANnav, there were security vulnerabilities. These vulnerabilities stemmed from issues with migration scripts, which could lead to SQL queries from the database...

7.5CVSS5.9AI score0.00185EPSS
SaveExploits0References1
CVE
CVE
added 2026/02/02 11:39 p.m.39 views

CVE-2025-61641

CVE-2025-61641 affects Wikimedia Foundation MediaWiki, tied to program files includes/api/ApiQueryAllPages.Php and impacts MediaWiki versions before 1.39.14, 1.43.4, 1.44.1. Debians and OSV entries describe multiple issues (e.g., XSS, information disclosure, missing rate limiting, denial of servi...

6.3CVSS5.2AI score0.00282EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/02/02 11:39 p.m.46 views

CVE-2025-61641 API list=allpages with maxsize is making really slow queries

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/api/ApiQueryAllPages.Php. This issue affects MediaWiki: from before 1.39.14, 1.43.4, 1.44.1...

6.3CVSS0.00282EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2026/02/02 12:00 a.m.33 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure when processing parameters periodOn and periodToOn. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries...

7.7CVSS6.2AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/02/02 12:00 a.m.20 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the getfilesindir parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries...

7.7CVSS6.2AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/02/02 12:00 a.m.6 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the openmess parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotel...

7.7CVSS6.2AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/02/02 12:00 a.m.11 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the id parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

7.7CVSS6.2AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/02/02 12:00 a.m.11 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the tdat parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

7.7CVSS6.2AI score
SaveExploits0Affected Software1
Rows per page
Query Builder