Lucene search
+L

258 matches found

Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•8 views

PT-2026-84057

Уязвимость системы управления содержимым сайта DIAFAN.CMS связана с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

8.7CVSS5.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•8 views

PT-2026-84058

Уязвимость системы управления содержимым сайта DIAFAN.CMS связана с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

9.7CVSS5.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•10 views

PT-2026-84056

Уязвимость системы управления содержимым сайта DIAFAN.CMS связана с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

9.7CVSS5.8AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/07/22 12:00 a.m.•21 views

XML analysis SQLi

The vulnerability of the XML analysis mechanism of the security system and the Nessus vulnerability assessment tool is related to the lack of measures taken to protect the SQL query structure during the processing of the nessus file. Exploiting this vulnerability allows an attacker to execute...

3.3CVSS7.2AI score0.0033EPSS
SaveExploits4References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/07/17 12:00 a.m.•17 views

Apache Fineract SQL Injection

The vulnerability of the Apache Fineract digital financial services platform lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary SQL code...

8.5CVSS7.4AI score0.00743EPSS
SaveExploits1References3Affected Software1
Redos
Redos
•added 2026/07/06 12:00 a.m.•25 views

ROS-20260706-73-0045

The vulnerability of the refint module in the PostgreSQL database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8.8CVSS8.1AI score0.0037EPSS
SaveExploits0
Redos
Redos
•added 2026/07/06 12:00 a.m.•16 views

ROS-20260706-73-0041

The vulnerability of the refint module in the PostgreSQL database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8.8CVSS8.1AI score0.0037EPSS
SaveExploits0
Redos
Redos
•added 2026/07/06 12:00 a.m.•21 views

ROS-20260706-73-0042

The vulnerability of the refint module in the PostgreSQL database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8.8CVSS8.1AI score0.0037EPSS
SaveExploits0
Redos
Redos
•added 2026/07/06 12:00 a.m.•26 views

ROS-20260706-73-0001

The vulnerability of the pgcreatesubscriber function in the PostgreSQL database management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

7.2CVSS8AI score0.00287EPSS
SaveExploits0
Redos
Redos
•added 2026/07/06 12:00 a.m.•22 views

ROS-20260706-73-0044

The vulnerability of the refint module in the PostgreSQL database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8.8CVSS8.1AI score0.0037EPSS
SaveExploits0
Redos
Redos
•added 2026/07/06 12:00 a.m.•16 views

ROS-20260706-73-0043

The vulnerability of the refint module in the PostgreSQL database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8.8CVSS8.1AI score0.0037EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/06/15 12:00 a.m.•25 views

Ghost SQL Injection Unauthorized Access

The vulnerability of the Ghost content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

9.7CVSS7AI score0.05573EPSS
SaveExploits10References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/06/08 12:00 a.m.•21 views

SOGo Contact Search Code Execution

The vulnerability of the contact search component in the SOGo software for collaborative work is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or gain unauthorized access to protected...

10CVSS7.6AI score0.00266EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/06/03 12:00 a.m.•21 views

GLPI SQL Injection Code Execution

The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management processes is related to the lack of measures taken to protect the SQL request structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

9CVSS7.6AI score0.00466EPSS
SaveExploits0References3Affected Software2
Redos
Redos
•added 2026/05/24 12:00 a.m.•25 views

ROS-20260524-73-0052

Vulnerability in glpi related to failure to take measures to protect sql query structure. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

8.8CVSS8.5AI score0.00466EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/05/24 12:00 a.m.•24 views

Glances export module Code Execution

The vulnerability of the export module of the Glances monitoring tool relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9.4CVSS7AI score0.00419EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/22 12:00 a.m.•22 views

GLPI SQL Injection Code Execution

The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management processes is related to the lack of measures taken to protect the SQL request structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

9CVSS7.6AI score0.00446EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/18 12:00 a.m.•23 views

N8n Snowflake Node MySQL Node Unauthorized Access

The vulnerability of the Snowflake Node and MySQL Node components of the N8n automation platform for workflow processes is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to gain unauthorized access to read, modify, and...

8.2CVSS6.5AI score0.00439EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/04/24 12:00 a.m.•23 views

Cisco Unity Connection Unauthorized Access

The vulnerability of the Web interface for managing the Cisco Unity Connection integrated messaging system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

4.3CVSS5.8AI score0.00228EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2026/04/20 12:00 a.m.•9 views

PT-2026-65336

Уязвимость платформы для создания индивидуальных веб-приложений CRM Руководитель связана с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

8.7CVSS5.8AI score
SaveExploits0References3
Rows per page
Query Builder