Lucene search
+L

6526 matches found

Prion
Prion
added 2022/03/29 5:15 p.m.18 views

Sql injection

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in HandlerTagKID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

10CVSS9.7AI score0.01219EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2022/03/29 5:15 p.m.24 views

Sql injection

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in GetLatestDemandNode. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

10CVSS9.7AI score0.01219EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/03/29 4:37 p.m.31 views

CVE-2022-27175 Delta Electronics DIAEnergie SQL Injection in GetCalcTagList

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in GetCalcTagList. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

9.8CVSS9.9AI score0.01219EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/03/29 4:37 p.m.23 views

CVE-2022-26666 Delta Electronics DIAEnergie SQL Injection in HandlerDialogECC.ashx

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in HandlerECC.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

9.8CVSS9.9AI score0.01219EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/03/29 4:37 p.m.8 views

CVE-2022-26836 Delta Electronics DIAEnergie SQL Injection in HandlerExport.ashx/Calendar.ashx

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in HandlerExport.ashx/Calendar. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

9.8CVSS7.9AI score0.01219EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/03/29 4:37 p.m.30 views

CVE-2022-26065 Delta Electronics DIAEnergie SQL Injection in GetLatestDemandNode and GetDemandAnalysisData

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in GetLatestDemandNode. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

9.8CVSS9.9AI score0.01219EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/03/29 4:37 p.m.31 views

CVE-2022-26069 Delta Electronics DIAEnergie SQL Injection in HandlerPage_KID.ashx

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in HandlerPageKID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

9.8CVSS9.9AI score0.01219EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/03/29 4:37 p.m.8 views

CVE-2022-0923 Delta Electronics DIAEnergie SQL Injection in HandlerDialog_KID.ashx

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in HandlerDialogKID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

9.8CVSS9.8AI score0.01045EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/03/29 4:37 p.m.31 views

CVE-2022-25980 Delta Electronics DIAEnergie SQL Injection in HandlerCommon.ashx

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in HandlerCommon.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

9.8CVSS9.9AI score0.01219EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/03/29 4:37 p.m.9 views

CVE-2022-26059 Delta Electronics DIAEnergie SQL Injection in GetQueryData

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in GetQueryData. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

9.8CVSS9.8AI score0.01219EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/03/29 4:37 p.m.38 views

CVE-2022-26059 Delta Electronics DIAEnergie SQL Injection in GetQueryData

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in GetQueryData. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

9.8CVSS9.9AI score0.01219EPSS
SaveExploits0References1
Veracode
Veracode
added 2022/03/25 9:42 a.m.19 views

SQL Injection

forkcms/forkcms is vulnerable to SQL Injection attacks. The vulnerability exists in deleteData function in Model.php due to lack of validations which allows a malicious user to inject and execute arbitrary SQL queries on the server...

7.5CVSS4AI score0.01128EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/25 12:00 a.m.11 views

The vulnerability of the Cyrus SASL authentication mechanism lies in the lack of protection for the structure of SQL queries, allowing attackers to execute arbitrary SQL queries.

The vulnerability of the Cyrus SASL authentication mechanism lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

9.4CVSS7.4AI score0.04123EPSS
SaveExploits0References13Affected Software6
Veracode
Veracode
added 2022/03/24 11:56 p.m.31 views

Denial Of Service (DoS)

bind9 is vulnerable to denial of service. The vulnerability exists due to a failed assertion check leading to a system crash when a vulnerable version of named receives a series of specific queries...

7.5CVSS3.9AI score0.01348EPSS
SaveExploits0References3Affected Software1
RedhatCVE
RedhatCVE
added 2022/03/24 6:04 p.m.71 views

CVE-2022-24051

MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...

7.8CVSS3.1AI score0.00657EPSS
SaveExploits0References3
CNVD
CNVD
added 2022/03/24 12:00 a.m.26 views

Delta Electronics DIAEnergie SQL Injection Vulnerability (CNVD-2022-27555)

Delta Electronics DIAEnergie is an industrial energy management system used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximize energy efficiency.Delta Electronics...

10CVSS3.6AI score0.01219EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/03/24 12:00 a.m.35 views

ImpressCMS SQL Injection Vulnerability (CNVD-2022-30802)

ImpressCMS is a MySQL-based, modular content management system CMS. The system includes modules for press releases, forums, and photo albums. ImpressCMS is vulnerable to a SQL injection vulnerability that stems from insufficient cleaning of user data passed in the groupps parameter of the...

9.8CVSS3.7AI score0.20968EPSS
SaveExploits6References1
OSV
OSV
added 2022/03/23 1:15 p.m.12 views

AZL-9118 CVE-2021-25220 affecting package bind for versions less than 9.16.29-1

BIND 9.11.0 - 9.11.36 9.12.0 - 9.16.26 9.17.0 - 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 - 9.11.36-S1 9.16.8-S1 - 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to be affected but have not been tested as th...

6.8CVSS6.7AI score0.03357EPSS
SaveExploits0References1
OSV
OSV
added 2022/03/23 12:15 p.m.4 views

DEBIAN-CVE-2022-0635

Versions affected: BIND 9.18.0 When a vulnerable version of named receives a series of specific queries, the named process will eventually terminate due to a failed assertion check...

7.5CVSS7.6AI score0.01348EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/03/22 12:00 a.m.10 views

Delta Electronics DIAEnergie SQL注入漏洞

Delta Electronics DIAEnergie is an industrial energy management system used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximize energy efficiency.Delta Electronics...

10CVSS6.2AI score0.01219EPSS
SaveExploits0References5
Rows per page
Query Builder