Lucene search
K

161 matches found

BDU FSTEC
BDU FSTEC
added 2024/03/14 12:0 a.m.2 views

The vulnerability of the ia.core.mysqli.php component of the Intelliants Subrion CMS system allows a hacker to execute arbitrary SQL queries.

The vulnerability of the ia.core.mysqli.php component of the Intelliants Subrion CMS system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

7.5CVSS5.9AI score0.00654EPSS
Exploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/12 12:0 a.m.3 views

The vulnerability of the pgx toolset for working with PostgreSQL lies in the lack of protective measures for SQL query structures, allowing attackers to execute arbitrary SQL queries.

The vulnerability of the tools for working with PostgreSQL’s pgx is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

10CVSS8.1AI score0.01109EPSS
Exploits1References8Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/05 12:0 a.m.1 views

The vulnerability of the IBM i operating system, related to the lack of measures taken to protect the SQL query structure, allows attackers to enhance their privileges.

The vulnerability of the IBM i operating system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

8.3CVSS7.2AI score0.00513EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/25 12:0 a.m.4 views

The vulnerability of the JDBC driver pgjdbc for connecting Java programs to a PostgreSQL database allows a attacker to execute arbitrary code.

The vulnerability of the JDBC driver pgjdbc, which allows Java programs to connect to PostgreSQL databases, is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted SQL...

10CVSS7.9AI score0.0481EPSS
Exploits0References7Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/02/16 12:0 a.m.2 views

The vulnerability of the software for network monitoring and management of IT infrastructure on the SolarWinds Platform lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the software for network monitoring and management of IT infrastructure on the SolarWinds Platform lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8CVSS8.1AI score0.01578EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/07 12:0 a.m.2 views

The vulnerability of the QTS, QuTS hero, and QuTScloud operating systems for QNAP network devices stems from the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the QTS, QuTS hero, and QuTScloud operating systems for QNAP network devices is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS8.1AI score0.00535EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/02/06 12:0 a.m.1 views

The vulnerability of the NEXO-OS operating system in the Bosch Nexo cordless nutrunner and Bosch Nexo special cordless nutrunner tools used in production lines allows a intruder to gain unauthorized access to the database.

The vulnerability of the NEXO-OS operating system for tools used in production line assembly work, such as the Bosch Nexo cordless nutrunner and the Bosch Nexo special cordless nutrunner, is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability ca...

5.3CVSS7.3AI score0.00622EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/06 12:0 a.m.4 views

The vulnerability of the NEXO-OS operating system in the Bosch Nexo cordless nutrunner and Bosch Nexo special cordless nutrunner tools used in production lines allows a intruder to gain unauthorized access to the database.

The vulnerability of the NEXO-OS operating system for tools used in production line assembly work, such as the Bosch Nexo cordless nutrunner and the Bosch Nexo special cordless nutrunner, is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability ca...

5.3CVSS7.3AI score0.00622EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/19 12:0 a.m.4 views

The vulnerability of the Bulk Modification Tool component in Nagios XI allows a hacker to execute arbitrary SQL code.

The vulnerability of the Bulk Modification Tool component in Nagios XI is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

9CVSS8.2AI score0.3374EPSS
Exploits2References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.2 views

The vulnerability of the Groundhogg plugin of the WordPress content management system allows a hacker to execute XSS attacks.

The vulnerability of the Groundhogg plugin in the WordPress content management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

8.3CVSS7.3AI score0.0085EPSS
Exploits2References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/29 12:0 a.m.3 views

The vulnerability of the Apache Submarine machine learning platform, related to the lack of protection for SQL query structures, allows attackers to execute arbitrary SQL queries.

The vulnerability of the Apache Submarine machine learning platform relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

7.5CVSS8.2AI score0.07167EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/27 12:0 a.m.1 views

The vulnerability of the clearAlertByIds() function in the ProSAFE Network Management System (NMS300) allows a hacker to increase their privileges.

The vulnerability of the clearAlertByIds function in the ProSAFE Network Management System NMS300 for managing, diagnosing, and optimizing network devices is related to the lack of protection for the SQL query structure. Exploiting this vulnerability could allow a malicious actor to increase thei...

9CVSS7.7AI score0.52562EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/17 12:0 a.m.2 views

The vulnerability of the IBM Security Guardium information protection mechanism lies in its failure to protect the structure of SQL queries. This allows attackers to view, add, modify, or delete information in the internal database.

The vulnerability of the IBM Security Guardium security tool is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to remotely access, view, add, modify, or delete information in the internal database...

8CVSS6AI score0.00429EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/17 12:0 a.m.4 views

The vulnerability of Fortinet FortiWLM, a centralized management system for WLAN access points and LAN switches, stems from the lack of protective measures for the SQL query structure. This allows attackers to execute arbitrary SQL queries against the database.

The vulnerability of Fortinet FortiWLM, a centralized management system for WLAN access points and LAN switches, relates to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries against the database remotely...

10CVSS8.2AI score0.28783EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/30 12:0 a.m.4 views

The vulnerability of the Paid Memberships Pro plugin of the WordPress content management system allows a hacker to execute arbitrary SQL queries.

The vulnerability of the Paid Memberships Pro plugin of the WordPress content management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

10CVSS8.1AI score0.9246EPSS
Exploits6References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/25 12:0 a.m.3 views

The vulnerability in the Nagios XI monitoring tool’s script for nagiosxi/admin/banner_message-ajaxhelper.php allows a attacker to disclose protected information.

The vulnerability in the nagiosxi/admin/bannermessage-ajaxhelper.php script of Nagios XI relates to the failure to protect the SQL query structure during the processing of the ID parameter. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

6.8CVSS6.9AI score0.13484EPSS
Exploits2References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/13 12:0 a.m.1 views

The vulnerability of the `grow_right_pane_tree()` function in the Cacti network monitoring software, which allows a hacker to execute arbitrary SQL queries.

The vulnerability of the growrightpanetree function in the Cacti network monitoring software’s script graphview.php relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using a specially...

10CVSS8.4AI score0.87575EPSS
Exploits2References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/04 12:0 a.m.2 views

The vulnerability of the MXSecurity software platform for managing security in industrial networks lies in its failure to protect the SQL query structure. This allows attackers to execute arbitrary commands and gain unauthorized access to protected information.

The vulnerability of the MXSecurity software platform for managing security in industrial networks stems from the lack of protective measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands and gain unauthorized access to protected...

7.5CVSS8AI score0.00516EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/17 12:0 a.m.3 views

The vulnerability of the Siemens RUGGEDCOM CROSSBOW access control system lies in the lack of protection for the SQL query structure, allowing attackers to execute arbitrary SQL queries against the database server.

The vulnerability of the Siemens RUGGEDCOM CROSSBOW access control system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries against the database server remotely...

10CVSS8.1AI score0.00706EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/11 12:0 a.m.3 views

The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management processes, related to the failure to protect the SQL query structure, allows a perpetrator to execute arbitrary code.

The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management processes is related to the lack of protective measures for the SQL request structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

8.6CVSS8.2AI score0.4464EPSS
Exploits1References5Affected Software1
Rows per page
Query Builder