Lucene search
K

20 matches found

BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.3 views

The vulnerability of the NetworkServlet.getNextTrapPage() function in the system for centrally managing network devices and ports of Advantech iView allows a hacker to execute arbitrary code.

The vulnerability of the NetworkServlet.getNextTrapPage function in the system for centrally managing network devices and ports of Advantech iView is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS6.1AI score0.01838EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/01/21 12:0 a.m.2 views

The vulnerability of the Amazon Redshift JDBC driver lies in the lack of security measures for SQL query structures, allowing attackers to exploit this to increase their privileges.

The vulnerability of the Amazon Redshift JDBC driver is related to the lack of security measures for SQL query structures. Exploiting this vulnerability can allow attackers to enhance their privileges...

10CVSS5.6AI score0.0076EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/27 12:0 a.m.1 views

The vulnerability of the Windows Active Directory (AD) management and reporting software Zoho ManageEngine ADAudit Plus lies in the lack of protection for SQL query structures, allowing attackers to execute custom queries and gain access to database table records.

The vulnerability of the Windows Active Directory management and reporting software Zoho ManageEngine ADAudit Plus is related to the lack of protection for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute custom queries and gain access to database table...

8.7CVSS5.7AI score0.01217EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/22 12:0 a.m.2 views

The vulnerability of the Ivanti Endpoint Manager software for managing endpoints in information networks lies in the lack of protective measures for SQL query structures, allowing attackers to execute arbitrary code.

The vulnerability of the Ivanti Endpoint Manager software for managing endpoints in information networks relates to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS7.6AI score0.11549EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2024/11/22 12:0 a.m.2 views

The vulnerability of the Ivanti Endpoint Manager software for managing endpoints in information networks lies in the lack of protective measures for SQL query structures, allowing attackers to execute arbitrary code.

The vulnerability of the Ivanti Endpoint Manager software for managing endpoints in information networks relates to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS7.6AI score0.13898EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2024/11/22 12:0 a.m.1 views

The vulnerability of the Ivanti Endpoint Manager software for managing endpoints in information networks lies in the lack of protective measures for SQL query structures, allowing attackers to execute arbitrary code.

The vulnerability of the Ivanti Endpoint Manager software for managing endpoints in information networks relates to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS7.6AI score0.07784EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2024/11/22 12:0 a.m.2 views

The vulnerability of the Ivanti Endpoint Manager software for managing endpoints in information networks lies in the lack of protective measures for SQL query structures, allowing attackers to execute arbitrary code.

The vulnerability of the Ivanti Endpoint Manager software for managing endpoints in information networks relates to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS7.6AI score0.07784EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/02/13 12:0 a.m.1 views

The vulnerability of the Neshan Maps plugin of the WordPress content management system allows attackers to carry out attacks based on SQL injections.

The vulnerability of the Neshan Maps plugin of the WordPress content management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to carry out attacks based on SQL injections...

10CVSS7.9AI score0.00114EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/29 12:0 a.m.1 views

The vulnerability of the Tyk application programming interface, related to the lack of security measures for SQL query structures, allows attackers to execute arbitrary SQL queries.

The vulnerability of the Tyk cloud firewall’s application programming interface is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

10CVSS8.1AI score0.10676EPSS
Exploits2References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/02 12:0 a.m.1 views

The vulnerability of the Nozomi Guardian detection and tracking tool for network activities, as well as the Nozomi Central Management Console (CMC) – a central management tool for security operations – stems from the lack of protective measures for the SQL query structure. This allows attackers to gain unauthorized access to protected information and execute arbitrary SQL queries.

The vulnerability of the Nozomi Guardian detection and tracking tool for network activities, as well as the Nozomi Central Management Console CMC, relates to the lack of protective measures taken against SQL query structures during parameter sorting. Exploiting this vulnerability could allow an...

7.5CVSS7AI score0.00216EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/12/24 12:0 a.m.2 views

The vulnerability of Centreon’s software for monitoring IT infrastructure lies in the lack of protection for SQL query structures, allowing attackers to execute arbitrary SQL queries.

The vulnerability of Centreon’s IT infrastructure monitoring software relates to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

10CVSS6AI score
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/11/22 12:0 a.m.1 views

The vulnerability of the Create_tmp_table::finalize component of the MariaDB database, which allows a hacker to trigger a service failure.

The vulnerability of the Createtmptable::finalize component in the MariaDB database lies in the lack of protective measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to trigger service failures through a specially crafted SQL query...

7.8CVSS7.5AI score0.00217EPSS
Exploits1References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/04/04 12:0 a.m.1 views

The vulnerability of the SyliusGridBundle e-commerce platform for Symfony applications, related to the lack of protection for SQL query structures, allows attackers to execute arbitrary SQL queries.

The vulnerability of the SyliusGridBundle e-commerce platform for Symfony applications is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries remotely...

10CVSS8.1AI score0.00558EPSS
Exploits0References9Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/13 12:0 a.m.1 views

The vulnerability of the PostgreSQL database management system lies in the lack of measures taken to protect SQL query structures, allowing attackers to execute arbitrary code.

The vulnerability of the PostgreSQL database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8.1CVSS7.4AI score0.00193EPSS
Exploits0References10Affected Software7
BDU FSTEC
BDU FSTEC
added 2021/06/29 12:0 a.m.1 views

The vulnerability of FortiWeb web applications’ network firewalls, related to the lack of protection for SQL query structures, allows attackers to execute arbitrary commands.

The vulnerability of FortiWeb web applications’ network firewalls is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely by sending specially crafted SQL queries...

10CVSS8.5AI score0.01005EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/05/19 12:0 a.m.1 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from the lack of measures to protect SQL query structures, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Magento Commerce development and management software platform lies in the lack of measures to protect SQL query structures. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by using administrator-level access rights...

9.1CVSS7.6AI score0.02071EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/07/15 12:0 a.m.1 views

The vulnerability of the library for working with relational DBMSs like SQLAlchemy lies in the lack of protective measures for SQL query structures, allowing attackers to execute arbitrary code.

The vulnerability of the library for working with relational DBMSs like SQLAlchemy is related to the lack of protective measures taken against the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.8CVSS7.8AI score0.01088EPSS
Exploits1References11Affected Software8
BDU FSTEC
BDU FSTEC
added 2019/10/24 12:0 a.m.1 views

The vulnerability of the “Red Database” and Firebird database management systems, related to the lack of measures taken to protect SQL query structures, allows attackers to execute arbitrary code.

The vulnerability of the "Red Database" and Firebird database management systems is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by executing incorrectly formed SQL statements...

9CVSS6.1AI score0.10885EPSS
Exploits1References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2016/07/07 12:0 a.m.3 views

The vulnerability of the Security SiteProtector System’s security protection mechanism allows a hacker to execute arbitrary SQL commands.

The vulnerability of the Security SiteProtector System security system lies in the lack of protection for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

6.5CVSS6AI score0.00277EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/10/30 12:0 a.m.2 views

Vulnerabilities of the SAP HANA database management system, allowing attackers to execute arbitrary SQL commands

The multiple vulnerabilities of the Development Workbench component of the SAP HANA database management system are related to the lack of protection for SQL query structures. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary SQL commands remotely...

6.5CVSS6.1AI score0.006EPSS
Exploits0References8Affected Software1
Rows per page
Query Builder