6518 matches found
UBUNTU-CVE-2021-22145
A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing previously used portions of a data...
CVE-2021-22145
A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing previously used portions of a data...
Elasticsearch Memory Disclosure
This module exploits a memory disclosure vulnerability in Elasticsearch 7.10.0 to 7.13.3 inclusive. A user with the ability to submit arbitrary queries to Elasticsearch can generate an error message containing previously used portions of a data buffer. This buffer could contain sensitive...
PT-2021-14870 · Elastic · Elasticsearch
Name of the Vulnerable Software and Affected Versions: Elasticsearch versions 7.10.0 through 7.13.3 Description: A memory disclosure issue was identified in error reporting, allowing a user who can submit arbitrary queries to potentially retrieve sensitive information, including Elasticsearch...
Centreon SQL注入漏洞
Centreon Merethis Centreon is a set of open source system monitoring tools from Centreon, a French company. Centreon Platform version 20.10.0 is vulnerable to SQL injection, which can be exploited by remote attackers to execute arbitrary SQL commands with additional information parameters...
Elasticsearch Resource Management Error Vulnerability
Elasticsearch is a set of open source distributed RESTful search engine built on Lucene from the Dutch company Elasticsearch. The product is mainly used in cloud computing and supports data indexing using JSON over HTTP.Elasticsearch has a resource management error vulnerability that stems from...
Elastic 资源管理错误漏洞
Elasticsearch is a set of open source distributed RESTful search engine built on Lucene from the Dutch company Elasticsearch. The product is mainly used in cloud computing and supports data indexing using JSON over HTTP.Elasticsearch has a resource management error vulnerability that stems from...
OESA-2021-1252 sqlite security update
SQLite is a C-language library that implements a small, fast, self-contained, high-reliability, full-featured, SQL database engine. SQLite is the most used database engine in the world. SQLite is built into all mobile phones and most computers and comes bundled inside countless other applications...
hibernate-core: SQL injection vulnerability when both hibernate.use_sql_comments and JPQL String literals are used
A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SQL comments of the query. This flaw could allow an attacker to access unauthorized...
The vulnerability of the app/admin/custom-fields/edit.php web application for managing IP addresses in phpipam allows a hacker to execute arbitrary SQL queries.
The vulnerability of the “app/admin/custom-fields/edit.php” web application for managing IP addresses in phpipam relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...
The vulnerability in the plugin/Audit/Objects/AuditTable.php component of the YouPHPTube website allows attackers to execute arbitrary SQL queries.
The vulnerability of the plugin/Audit/Objects/AuditTable.php component of the YouPHPTube website is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries remotely...
The vulnerability of the app/admin/custom-fields/filter.php web application for managing IP addresses in phpipam allows a violator to execute arbitrary SQL queries.
The vulnerability of the app/admin/custom-fields/filter.php web application for managing IP addresses in phpipam relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...
The vulnerability of the DataTables library, related to the lack of measures taken to protect the SQL query structure, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the DataTables library is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the app/admin/custom-fields/edit-result.php web application for managing IP addresses in phpipam allows a violator to execute arbitrary SQL queries.
The vulnerability of the app/admin/custom-fields/edit-result.php web application for managing IP addresses via phpipam is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...
CVS Health Records for 1.1 Billion Customers Exposed
More than 1 billion records for CVS Health customers were left in the database of a third-party, unnamed vendor – exposed, unprotected, online. Researchers said the data points revealed could be strung together to create an extremely personal snapshot of someones’s medical situation. The glitch i...
The vulnerability of the TRUNCATE function implementation in the IBM DB2 database management system allows a hacker to trigger a service failure.
The vulnerability of the TRUNCATE function implementation in the IBM DB2 database management system is related to incorrect validation of input data. Exploiting this vulnerability could allow an attacker to cause service interruptions using the SELECT query operator...
The vulnerability of the IBM DB2 database management system arises from the improper assignment of permissions for critical resources. This allows a perpetrator to gain unauthorized access to protected information or cause service failures.
The vulnerability of the IBM DB2 database management system is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures by sending specially crafted...
JSONP Injection
JSONP JSON with Padding is a JavaScript technique that allows you to query data from a server without worrying about cross-domain issues by using the tag scripts rather than the XMLHttpRequest object and thus not worrying about the browser's same-origin-policy restrictions. Due to the nature of...
SQL Injection in s-cart/core
✍️ Description Searching keyword in/scadmin/currency is vulnerable to SQL injection. This will allow a user to run arbitrary SQL queries and completely delete, edit, export or change all information in the database - potentially rendering the entire platform unusable. 🕵️♂️ Proof of Concept Login...
