Lucene search
K

161 matches found

BDU FSTEC
BDU FSTEC
added 2022/03/04 12:0 a.m.2 views

The vulnerability of the Microsoft Defender for IoT’s threat detection mechanism, related to the lack of protection measures for the SQL query structure, allows attackers to execute arbitrary code.

The vulnerability of the Microsoft Defender for IoT’s threat detection mechanism is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a attacker to execute arbitrary code...

9CVSS8.2AI score0.03825EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:0 a.m.2 views

The vulnerability of the Roundcube webmail client, related to the lack of measures taken to protect the SQL query structure, allows attackers to execute arbitrary SQL code.

The vulnerability of the Roundcube webmail client stems from the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL code using the search or searchparams parameters...

9.8CVSS8.6AI score0.42908EPSS
Exploits1References12Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:0 a.m.2 views

The vulnerability of the host_alt_filter2 parameter in the device_list.php script of the Advantech R-SeeNet router monitoring software allows a hacker to disclose protected information.

The vulnerability of the hostaltfilter2 parameter in the devicelist.php script of the Advantech R-SeeNet monitoring software relates to the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially...

6.8CVSS7AI score0.01144EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/17 12:0 a.m.1 views

The vulnerability of the AADI GeoView Webservice, a software tool for meteorological observations, lies in the lack of protection for the SQL query structure, allowing attackers to execute arbitrary SQL commands.

The vulnerability of the AADI GeoView Webservice software for meteorological observations lies in the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

10CVSS8.2AI score0.01984EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:0 a.m.1 views

The vulnerability of the username_filter parameter in the user_list.php script of the Advantech R-SeeNet monitoring software allows a hacker to disclose protected information.

The vulnerability of the usernamefilter parameter in the userlist.php script of the Advantech R-SeeNet monitoring software relates to the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially...

6.8CVSS7AI score0.01144EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.1 views

The vulnerability of the information system openSIS, related to the failure to protect the SQL query structure, allows a perpetrator to execute arbitrary SQL queries.

The vulnerability of the information system openSIS is related to the failure to implement measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using the NamesList.php parameter...

10CVSS8.2AI score0.22669EPSS
Exploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/09/17 12:0 a.m.2 views

The vulnerability of the software used to implement the hypertext environment in the Centreon IT infrastructure monitoring software allows a hacker to execute arbitrary SQL commands.

The vulnerability of the software for implementing the hypertext environment in the Centreon IT infrastructure monitoring software is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands...

9.3CVSS8.2AI score0.02115EPSS
Exploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/08/25 12:0 a.m.1 views

The vulnerability of the empViewUpdate.php implementation of the online e-commerce sales system allows attackers to perform cross-site scripting attacks.

The vulnerability of the empViewUpdate.php implementation of the online e-commerce sales system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

9.8CVSS7.5AI score0.01476EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/08/10 12:0 a.m.1 views

The vulnerability of the CASAP Automated Enrollment System software lies in its lack of measures to protect the SQL query structure, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the CASAP Automated Enrollment System lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information through the parameter “id...

10CVSS7.9AI score0.01517EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/29 12:0 a.m.4 views

The vulnerability of the get_topic_info() function (sys/CODOF/Forum/Topic.php) in the Codoforum forum creation software allows a violator to execute arbitrary code.

The vulnerability of the gettopicinfo function sys/CODOF/Forum/Topic.php in the Codoforum forum creation software relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code on the target system remotely...

10CVSS8.3AI score0.04915EPSS
Exploits1References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/23 12:0 a.m.2 views

The vulnerability of the DataTables library, related to the lack of measures taken to protect the SQL query structure, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the DataTables library is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.9AI score0.01407EPSS
Exploits1References5
BDU FSTEC
BDU FSTEC
added 2021/06/23 12:0 a.m.1 views

The vulnerability of the DataTables library, related to the lack of measures taken to protect the SQL query structure, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of DataTables libraries is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

9.8CVSS7.9AI score0.01407EPSS
Exploits1References5
BDU FSTEC
BDU FSTEC
added 2021/06/23 12:0 a.m.1 views

The vulnerability in the plugin/Audit/Objects/AuditTable.php component of the YouPHPTube website allows attackers to execute arbitrary SQL queries.

The vulnerability of the plugin/Audit/Objects/AuditTable.php component of the YouPHPTube website is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries remotely...

5.3CVSS6.3AI score0.02984EPSS
Exploits5References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/03/02 12:0 a.m.4 views

The vulnerability of Dollibarr’s software lies in its lack of protection for SQL query structures, allowing attackers to execute arbitrary SQL commands.

The vulnerability of Dollibarr’s software lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

10CVSS8.2AI score0.03959EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/01/26 12:0 a.m.1 views

The vulnerability of the VMware SD-WAN Orchestrator management platform, related to the failure to implement security measures for SQL query structures, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the VMware SD-WAN Orchestrator management platform is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

6.8CVSS7AI score0.0114EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/07 12:0 a.m.1 views

The vulnerability of the KTS web interface “Mayak,” related to the failure to protect the SQL query structure, allows attackers to execute arbitrary SQL commands.

The vulnerability of the KTS “Lighthouse” web interface is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands using a specially crafted HTTP POST request...

10CVSS6.1AI score
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/07 12:0 a.m.2 views

The vulnerability of the KTS web interface “Mayak,” related to the failure to protect the SQL query structure, allows attackers to execute arbitrary SQL commands.

The vulnerability of the KTS “Lighthouse” web interface is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands using a specially crafted HTTP POST request...

10CVSS6.1AI score
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/10/01 12:0 a.m.2 views

The vulnerability of the VeloCloud Orchestrator component of the VMware SD-WAN programmable network management platform lies in the lack of security measures for the SQL query structure. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the VeloCloud Orchestrator component of the VMware SD-WAN programmable network management platform relates to the lack of security measures for the SQL query structure. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and...

10CVSS7.8AI score0.01119EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/04/06 12:0 a.m.1 views

The vulnerability of the Redmine project and task management web application relates to the failure to protect the SQL query structure, allowing an attacker to gain unauthorized access to protected information.

The vulnerability of the Redmine project and task management web application relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information from a remote location...

6.8CVSS6.7AI score0.04338EPSS
Exploits2References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/01/13 12:0 a.m.1 views

The vulnerability of the Web interface of the Cisco Unified Communications Manager allows a perpetrator to execute arbitrary SQL queries.

The vulnerability of the Cisco Unified Communications Manager web interface relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

6.5CVSS6.7AI score0.01605EPSS
Exploits0References3
Rows per page
Query Builder