Lucene search
+L

8641 matches found

CNNVD
CNNVD
added 2022/04/28 12:00 a.m.12 views

Delta Electronics DIAEnergie SQL注入漏洞

Delta Electronics DIAEnergie is an industrial energy management system for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and maximizing energy efficiency. Delta...

10CVSS6.2AI score0.012EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/04/28 12:00 a.m.9 views

Delta Electronics DIAEnergie SQL注入漏洞

Delta Electronics DIAEnergie is an industrial energy management system for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and maximizing energy efficiency. Delta...

10CVSS6.2AI score0.012EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/04/28 12:00 a.m.12 views

Delta Electronics DIAEnergie SQL注入漏洞

Delta Electronics DIAEnergie is an industrial energy management system for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and maximizing energy efficiency. Delta...

10CVSS6AI score0.012EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/04/27 12:00 a.m.16 views

The vulnerability of the implementations of the QuerySet.annotate(), aggregate(), and extra() methods in the Django web application framework allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the implementation of the QuerySet.annotate, aggregate, and extra methods in the Django software platform is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality,...

10CVSS6.6AI score0.18661EPSS
SaveExploits3References10Affected Software6
OSV
OSV
added 2022/04/26 2:15 p.m.8 views

CVE-2022-27299

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the component room.php...

9.8CVSS7.3AI score0.01551EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/04/26 12:00 a.m.8 views

CuppaCMS SQL注入漏洞

CuppaCMS is a content management system CMS. SQL injection vulnerability exists in CuppaCMS v1.0, which originates from the missing validation of external input in the menufilter parameter in /administrator/templates/default/html/windows/right.php. SQL statement validation. An attacker could use...

9.8CVSS6.1AI score0.0678EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/04/26 12:00 a.m.14 views

HealthNode Hospital Management System SQL注入漏洞

Hospital Management System is a hospital management system. The system includes patient information management, ward management, surgery schedule management and financial management, etc. A SQL injection vulnerability exists in Hospital Management System v1.0, which stems from the lack of...

9.8CVSS6.1AI score0.01551EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/04/26 12:00 a.m.9 views

TYPO3 SQL注入漏洞

TYPO3 is a content management system framework CMS/CMF from the Swiss TYPO3 Association.TYPO3 One is Enough Library 4.1.5 and earlier versions are vulnerable to SQL injection, which stems from inadequate cleaning of user-supplied data. A remote attacker could use this vulnerability to send a...

9.8CVSS6.3AI score0.01027EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2022/04/25 12:00 a.m.11 views

The vulnerability of the Used_tables_and_const_cache::used_tables_and_const_cache_join component of the MariaDB database management system allows a hacker to cause a service failure.

The vulnerability of the Usedtablesandconstcache::usedtablesandconstcachejoin component of the MariaDB database management system is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to trigger service failures using...

7.5CVSS7.5AI score0.01644EPSS
SaveExploits1References6Affected Software3
CNNVD
CNNVD
added 2022/04/22 12:00 a.m.7 views

Link Group Link-Admin SQL注入漏洞

Link Group Link-Admin is a pension fund system administration service from Link Group Australia. v0.0.1 of Link-Admin is vulnerable to SQL injection, which stems from the lack of SQL data filtering in DictRest.ResponseResult. An attacker could exploit this vulnerability to cause SQL injection...

9.8CVSS5.9AI score0.01079EPSS
SaveExploits1References2
OSV
OSV
added 2022/04/21 8:15 p.m.10 views

CVE-2022-28421

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=posts&action=display&value=1&postid=...

9.8CVSS7.3AI score0.0122EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/04/21 8:15 p.m.6 views

CVE-2022-28410

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Users.php?f=deleteagent...

9.8CVSS5.9AI score0.01504EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/04/21 8:15 p.m.4 views

CVE-2022-28030

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deleteestate...

9.8CVSS7.3AI score0.01269EPSS
SaveExploits1References2
OSV
OSV
added 2022/04/21 8:15 p.m.9 views

CVE-2022-28020

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\positionedit.php...

8.8CVSS7.3AI score0.01095EPSS
SaveExploits1References1
OSV
OSV
added 2022/04/21 7:15 p.m.12 views

CVE-2021-35229

Cross-site scripting vulnerability is present in Database Performance Monitor 2022.1.7779 and previous versions when using a complex SQL query...

6.1CVSS6.4AI score0.03144EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/04/21 12:00 a.m.11 views

Simple Real Estate Portal System SQL注入漏洞

Simple Real Estate Portal System is a real estate portal system from Carlo Montero's personal developer. Simple Real Estate Portal System v1.0 is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

9.8CVSS6AI score0.01269EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/04/21 12:00 a.m.11 views

Sourcecodester Baby Care System SQL注入漏洞

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 is vulnerable to SQL injection, which originates from /admin/uesrs.php & action=type & userrole=User & userid= in the userid parameter missing validation of...

9.8CVSS6.1AI score0.0122EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/04/21 12:00 a.m.10 views

Sourcecodester Baby Care System SQL注入漏洞

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 is vulnerable to SQL injection, which originates from /admin.php?id=posts...

9.8CVSS5.8AI score0.01269EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/04/21 12:00 a.m.13 views

Sourcecodester Baby Care System SQL注入漏洞

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability that originates in /admin/inbox.php & action=read & msgid= where the msgid parameter lacks validation for external...

9.8CVSS6AI score0.0122EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/04/21 12:00 a.m.10 views

Student Grading System SQL注入漏洞

Student Grading System is a student grading system from Carlo Montero's personal developer. v1.0 of Student Grading System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

9.8CVSS6AI score0.0122EPSS
SaveExploits1References2
Rows per page
Query Builder