Lucene search
+L

226 matches found

BDU FSTEC
BDU FSTEC
•added 2026/02/20 12:00 a.m.•13 views

The vulnerability of the data processing application Dell Unisphere for PowerMax and the virtualization software Dell Unisphere for PowerMax Virtual Appliance lies in the lack of security measures for the SQL query structure. This allows attackers to execute arbitrary commands.

The vulnerability of the data processing application Dell Unisphere for PowerMax and the virtualization software Dell Unisphere for PowerMax Virtual Appliance is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute...

9CVSS6AI score0.00654EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/02/16 12:00 a.m.•15 views

The vulnerability of the ws_user_gerList() function in the pwg.users.php script of the Piwigo content management system allows a hacker to perform SQL injections.

The vulnerability of the wsusergerList function in the pwg.users.php script of the Piwigo content management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to perform SQL injections...

6.4CVSS5.8AI score0.00283EPSS
SaveExploits3References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/02/02 12:00 a.m.•11 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the fileid parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

7.7CVSS6.2AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/02/02 12:00 a.m.•10 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the gettest parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

7.7CVSS6.2AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/02/02 12:00 a.m.•17 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure when processing parameters like testid and taskid. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries...

7.7CVSS6.2AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/02/02 12:00 a.m.•17 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure when processing the folderid parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

7.7CVSS6.2AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/02/02 12:00 a.m.•25 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures to protect the SQL query structure during the processing of the search parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

7.7CVSS6.1AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/01/30 12:00 a.m.•13 views

The vulnerability of the information system openSIS, related to the failure to protect the SQL query structure, allows a perpetrator to execute arbitrary SQL queries.

The vulnerability of the information system openSIS is related to the failure to implement measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

10CVSS6.2AI score0.01932EPSS
SaveExploits0References3Affected Software1
Redos
Redos
•added 2026/01/29 12:00 a.m.•12 views

ROS-20260129-73-0044

Vulnerability in python-django related to failure to protect sql query structure. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

6.2AI score0.00923EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/01/14 12:00 a.m.•20 views

The vulnerability of the Microsoft SharePoint Server software lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the Microsoft SharePoint Server software relates to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

9CVSS6.1AI score0.18846EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/01/06 12:00 a.m.•12 views

The vulnerability of the searchByPage function in the Novel-Plus content management system allows a hacker to execute malicious code remotely.

The vulnerability of the searchByPage function in the Novel-Plus content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute malicious code remotely...

6.5CVSS6.7AI score0.00586EPSS
SaveExploits1References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/01/06 12:00 a.m.•10 views

The vulnerability of software for collaborative office work, YWOA, arises from the lack of protective measures for SQL query structures, allowing attackers to execute malicious code remotely.

The vulnerability of YWOA Yunwang OA software for collaborative office work is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute malicious code remotely...

6.5CVSS6.8AI score0.00526EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/17 12:00 a.m.•13 views

The vulnerability of the synchronization application for Qsync Central files relates to the lack of security measures for the SQL query structure, allowing a hacker to execute arbitrary code.

The vulnerability of the Qsync Central file synchronization application is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS6.1AI score0.00422EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/17 12:00 a.m.•12 views

The vulnerability of the GET Parameter Handler component of the JoomlaUX JUX Real Estate plugin for the Joomla content management system allows a hacker to execute arbitrary SQL code.

The vulnerability of the GET Parameter Handler component in the JoomlaUX JUX Real Estate plugin for the Joomla content management system is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL code remotely...

9CVSS6.8AI score0.11229EPSS
SaveExploits2References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/05 12:00 a.m.•13 views

The vulnerability of Devolutions Server’s platform for centralized and secure management of passwords, account information, and confidential data arises from the lack of protective measures for SQL query structures. This allows attackers to gain read-only access to data, modify it, and execute arbitrary code.

The vulnerability of the Devolutions Server platform for centralized and secure management of passwords, user accounts, and confidential information is related to the lack of measures taken to protect the SQL query structure when processing the DateSortField parameter. Exploiting this vulnerabili...

9.9CVSS6AI score0.00586EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/11/28 12:00 a.m.•11 views

The vulnerability of the AjaxNetworkController.ajaxAction() function in software for remote monitoring with virtual private network capabilities, such as Advantech WebAccess/VPN, allows a perpetrator to gain access to database-related information.

The vulnerability of the AjaxNetworkController.ajaxAction function in software for remote monitoring with virtual private network capabilities from Advantech WebAccess/VPN is related to the lack of security measures for SQL query structures. Exploiting this vulnerability could allow a malicious...

8.5CVSS5.9AI score0.00291EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/11/20 12:00 a.m.•13 views

The vulnerability of the ExeSQL component in the software-based RAG platform for question-answering interactions with RAGFlow documents allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ExeSQL component in the software-based RAG platform for question-answering interactions with RAGFlow relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity...

10CVSS5.8AI score0.00621EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/11/19 12:00 a.m.•13 views

The vulnerability of the Core Configuration Manager (CCM) interface of the Nagios XI IT infrastructure monitoring tool allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Core Configuration Manager CCM interface of the Nagios XI IT infrastructure monitoring tool is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and...

10CVSS5.8AI score0.01043EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/11/14 12:00 a.m.•15 views

The vulnerability of the Microsoft SQL Server database management system lies in the lack of measures taken to protect SQL query structures, allowing attackers to escalate their privileges.

The vulnerability of the Microsoft SQL Server database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to gain elevated privileges...

9CVSS5.8AI score0.01126EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/11/12 12:00 a.m.•10 views

The vulnerability of the AjaxDeviceController.ajaxActionValidateTable() function in the software for remote monitoring with Advantech WebAccess/VPN virtual private network capabilities allows a perpetrator to gain access to database-related information.

The vulnerability of the AjaxDeviceController.ajaxActionValidateTable function in the software for remote monitoring with Advantech WebAccess/VPN virtual private network capabilities is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability may all...

8.5CVSS5.8AI score0.00291EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder