Lucene search
+L

8641 matches found

CNNVD
CNNVD
added 2024/10/24 12:00 a.m.10 views

Code-Projects Hospital Management System SQL注入漏洞

Hospital Management System a hospital management system. Hospital Management System has a SQL injection vulnerability that originates from the parameter docname in the file /admin/add-doctor.php that can lead to SQL injection. No details of the vulnerability are available at this time...

9.8CVSS5.8AI score0.00573EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/10/24 12:00 a.m.8 views

SourceCodeHero Clothes Recommendation System SQL注入漏洞

SourceCodeHero Clothes Recommendation System is a SourceCodeHero open source clothing recommendation system. SourceCodeHero Clothes Recommendation System version 1.0 suffers from a SQL injection vulnerability, which originates from the parameter t1 in the file /admin/index.php of the component...

9.8CVSS7.8AI score0.00633EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/10/23 12:00 a.m.8 views

The vulnerability of the Vinteo video conference software server lies in the lack of protective measures for SQL query structures, allowing attackers to enhance their privileges and execute arbitrary code.

The vulnerability of the Vinteo video conference software server relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code using a specially crafted SQL query...

10CVSS6.1AI score
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2024/10/23 12:00 a.m.7 views

Cisco Secure Firewall Management Center 安全漏洞

Cisco Secure Firewall Management Center is a powerful network security management tool from Cisco USA. A security vulnerability exists in Cisco Secure Firewall Management Center that originates from the web management interface not adequately validating user input. An attacker could exploit this...

6.5CVSS7.6AI score0.00442EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/23 12:00 a.m.9 views

EsafeNet CDG SQL注入漏洞

EsafeNet CDG is a document security management system from EsafeNet. EsafeNet CDG 5 suffers from a SQL injection vulnerability, which originates from the userId parameter of the /com/esafenet/servlet/user/ReUserOrganiseService.java page contains a SQL injection vulnerability...

9.8CVSS7.9AI score0.00599EPSS
SaveExploits1References4
OSV
OSV
added 2024/10/22 10:15 p.m.11 views

CVE-2024-48657

SQL Injection vulnerability in hospital management system in php with source code v.1.0.0 allows a remote attacker to execute arbitrary code...

7.2CVSS6.1AI score0.00871EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/10/22 12:00 a.m.12 views

Red Hat OpenShift 资源管理错误漏洞

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that supports building, testing, deploying and running applications. Red Hat OpenShift suffers from a Resource Management Error vulnerability that stems from the presence of a Denial of Service DoS...

6.5CVSS6.7AI score0.00602EPSS
SaveExploits0References3
OSV
OSV
added 2024/10/21 9:15 p.m.14 views

CVE-2024-30158

A vulnerability in the web conferencing component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative privileges to conduct a SQL Injection attack due to insufficient validation of user input. A successful exploit could allow an attacker to execute...

7.2CVSS6AI score0.00414EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/21 9:15 p.m.9 views

CVE-2024-30157

A vulnerability in the Suite Applications Services component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative privileges to conduct a SQL Injection attack due to insufficient validation of user input. A successful exploit could allow an attacker to...

7.2CVSS6AI score0.00414EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/21 8:15 p.m.9 views

CVE-2024-47223

A vulnerability in the AWV Audio, Web and Video Conferencing component of Mitel MiCollab through 9.8 SP1 FP2 9.8.1.201 could allow an unauthenticated attacker to conduct a SQL injection attack due to insufficient sanitization of user input. A successful exploit could allow an attacker to access...

9.4CVSS7.7AI score0.00477EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/21 11:15 a.m.8 views

CVE-2024-47328

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in FunnelKit Automation By Autonami allows SQL Injection.This issue affects Automation By Autonami: from n/a through 3.1.2...

7.2CVSS5.8AI score0.00494EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/10/21 9:21 a.m.13 views

WordPress WP Sessions Time Monitoring Full Automatic plugin <= 1.0.9 - SQL Injection vulnerability

SQL Injection vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin WP Sessions Time Monitoring Full Automatic versions = 1.0.9...

9.3CVSS8.1AI score0.01091EPSS
SaveExploits1Affected Software1
CNNVD
CNNVD
added 2024/10/21 12:00 a.m.9 views

Mitel MiCollab 安全漏洞

Mitel MiCollab is a mobile application from Mitel Canada that provides voice, video, messaging, audio conferencing and team collaboration for employees. A SQL injection vulnerability exists in Mitel MiCollab version 9.7.1.110 and earlier, which stems from insufficient validation of user input in...

7.2CVSS7.9AI score0.00414EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/10/21 12:00 a.m.6 views

Mitel MiCollab SQL注入漏洞

Mitel MiCollab is a mobile application from Mitel Canada that provides voice, video, messaging, audio conferencing and team collaboration for employees. Mitel MiCollab suffers from an SQL injection vulnerability that can be exploited by attackers to access sensitive information and perform...

9.8CVSS7.7AI score0.65367EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/10/21 12:00 a.m.9 views

Mitel MiCollab SQL注入漏洞

Mitel MiCollab is an enterprise-grade audio, web and video conferencing solution that provides efficient collaboration and communication capabilities. An SQL injection vulnerability exists in Mitel MiCollab, which can be exploited by an attacker to access non-sensitive user configuration...

9.4CVSS8.1AI score0.00477EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/10/21 12:00 a.m.9 views

Mitel MiCollab SQL注入漏洞

Mitel MiCollab is a mobile application from Mitel Canada that provides voice, video, messaging, audio conferencing and team collaboration for employees. A SQL injection vulnerability exists in Mitel MiCollab version 9.7.1.110 and earlier, which stems from insufficient validation of user input in...

7.2CVSS7.9AI score0.00414EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/10/21 12:00 a.m.8 views

Learning with Texts SQL注入漏洞

Learning with Texts LWT is a software application by the individual developer Jon Gauthier. It allows users to import text, read, save, view and test words and expressions in multiple languages. A security vulnerability exists in Learning with Texts LWT version 2.0.3, which stems from...

9.8CVSS8.2AI score0.00543EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/10/21 12:00 a.m.13 views

The vulnerability of the Navidrome media server, related to the lack of protective measures for the SQL query structure, allows attackers to execute arbitrary code and disclose the protected information.

The vulnerability of the Navidrome media server relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and disclose sensitive information by sending specially crafted SQL queries...

9.9CVSS5.8AI score0.04457EPSS
SaveExploits2References6Affected Software1
CNNVD
CNNVD
added 2024/10/21 12:00 a.m.8 views

WordPress plugin TS Poll 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.2CVSS7.7AI score0.02323EPSS
SaveExploits1References1
OSV
OSV
added 2024/10/20 10:15 a.m.18 views

CVE-2024-49613

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Lodel Geraldo Simple Code Insert Shortcode allows SQL Injection.This issue affects Simple Code Insert Shortcode: from n/a through 1.0...

8.8CVSS5.8AI score0.00445EPSS
SaveExploits0References1
Rows per page
Query Builder