Lucene search
+L

25 matches found

Redos
Redos
•added 2026/09/22 12:00 a.m.•5 views

ROS-20260922-73-0135

The vulnerability in postgresqlanonymizer17 is related to the failure to implement proper protection for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

8.8CVSS7.2AI score0.00429EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2026/08/03 12:00 a.m.•11 views

The vulnerability of the Microsoft SQL Server database management system lies in the lack of measures taken to protect SQL query structures, allowing attackers to enhance their privileges.

The vulnerability of the Microsoft SQL Server database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

9CVSS5.7AI score0.00987EPSS
SaveExploits0References2Affected Software10
BDU FSTEC
BDU FSTEC
•added 2026/04/15 12:00 a.m.•18 views

The vulnerability of the Microsoft SQL Server database management system lies in the lack of measures taken to protect SQL query structures, allowing attackers to enhance their privileges.

The vulnerability of the Microsoft SQL Server database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.8CVSS7.1AI score0.00324EPSS
SaveExploits0References2Affected Software10
BDU FSTEC
BDU FSTEC
•added 2026/03/23 12:00 a.m.•14 views

The vulnerability of the Django web application framework lies in its lack of protection for SQL query structures, allowing attackers to execute arbitrary code.

The vulnerability of the Django web application framework lies in the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

5.5CVSS6.1AI score0.008EPSS
SaveExploits0References12Affected Software4
BDU FSTEC
BDU FSTEC
•added 2025/08/29 12:00 a.m.•17 views

The vulnerability of the PQescapeIdentifier() function in the PHP programming language allows a hacker to trigger a service failure.

The vulnerability of the PQescapeIdentifier function in the PHP programming language is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

5.9CVSS7.1AI score0.00983EPSS
SaveExploits0References17Affected Software8
BDU FSTEC
BDU FSTEC
•added 2025/07/24 12:00 a.m.•30 views

The vulnerability of the NetworkServlet.getNextTrapPage() function in the system for centrally managing network devices and ports of Advantech iView allows a hacker to execute arbitrary code.

The vulnerability of the NetworkServlet.getNextTrapPage function in the system for centrally managing network devices and ports of Advantech iView is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS6.1AI score0.05696EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2025/01/21 12:00 a.m.•18 views

The vulnerability of the Amazon Redshift JDBC driver lies in the lack of security measures for SQL query structures, allowing attackers to exploit this to increase their privileges.

The vulnerability of the Amazon Redshift JDBC driver is related to the lack of security measures for SQL query structures. Exploiting this vulnerability can allow attackers to enhance their privileges...

10CVSS5.6AI score0.00591EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/27 12:00 a.m.•15 views

The vulnerability of the Windows Active Directory (AD) management and reporting software Zoho ManageEngine ADAudit Plus lies in the lack of protection for SQL query structures, allowing attackers to execute custom queries and gain access to database table records.

The vulnerability of the Windows Active Directory management and reporting software Zoho ManageEngine ADAudit Plus is related to the lack of protection for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute custom queries and gain access to database table...

8.7CVSS5.7AI score0.04702EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/22 12:00 a.m.•14 views

The vulnerability of the Ivanti Endpoint Manager software for managing endpoints in information networks lies in the lack of protective measures for SQL query structures, allowing attackers to execute arbitrary code.

The vulnerability of the Ivanti Endpoint Manager software for managing endpoints in information networks relates to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS7.6AI score0.03163EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2024/11/22 12:00 a.m.•14 views

The vulnerability of the Ivanti Endpoint Manager software for managing endpoints in information networks lies in the lack of protective measures for SQL query structures, allowing attackers to execute arbitrary code.

The vulnerability of the Ivanti Endpoint Manager software for managing endpoints in information networks relates to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS7.6AI score0.01715EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2024/11/22 12:00 a.m.•17 views

The vulnerability of the Ivanti Endpoint Manager software for managing endpoints in information networks lies in the lack of protective measures for SQL query structures, allowing attackers to execute arbitrary code.

The vulnerability of the Ivanti Endpoint Manager software for managing endpoints in information networks relates to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS7.6AI score0.03396EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2024/11/22 12:00 a.m.•16 views

The vulnerability of the Ivanti Endpoint Manager software for managing endpoints in information networks lies in the lack of protective measures for SQL query structures, allowing attackers to execute arbitrary code.

The vulnerability of the Ivanti Endpoint Manager software for managing endpoints in information networks relates to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS7.6AI score0.01715EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2024/02/13 12:00 a.m.•14 views

The vulnerability of the Neshan Maps plugin of the WordPress content management system allows attackers to carry out attacks based on SQL injections.

The vulnerability of the Neshan Maps plugin of the WordPress content management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to carry out attacks based on SQL injections...

10CVSS7.9AI score0.00547EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/11/29 12:00 a.m.•18 views

The vulnerability of the Tyk application programming interface, related to the lack of security measures for SQL query structures, allows attackers to execute arbitrary SQL queries.

The vulnerability of the Tyk cloud firewall’s application programming interface is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

10CVSS8.1AI score0.01247EPSS
SaveExploits2References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/10/02 12:00 a.m.•21 views

The vulnerability of the Nozomi Guardian detection and tracking tool for network activities, as well as the Nozomi Central Management Console (CMC) – a central management tool for security operations – stems from the lack of protective measures for the SQL query structure. This allows attackers to gain unauthorized access to protected information and execute arbitrary SQL queries.

The vulnerability of the Nozomi Guardian detection and tracking tool for network activities, as well as the Nozomi Central Management Console CMC, relates to the lack of protective measures taken against SQL query structures during parameter sorting. Exploiting this vulnerability could allow an...

7.5CVSS7AI score0.00613EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/12/24 12:00 a.m.•15 views

The vulnerability of Centreon’s software for monitoring IT infrastructure lies in the lack of protection for SQL query structures, allowing attackers to execute arbitrary SQL queries.

The vulnerability of Centreon’s IT infrastructure monitoring software relates to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

10CVSS6AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/11/22 12:00 a.m.•15 views

The vulnerability of the Create_tmp_table::finalize component of the MariaDB database, which allows a hacker to trigger a service failure.

The vulnerability of the Createtmptable::finalize component in the MariaDB database lies in the lack of protective measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to trigger service failures through a specially crafted SQL query...

7.8CVSS7.5AI score0.02406EPSS
SaveExploits1References10Affected Software6
BDU FSTEC
BDU FSTEC
•added 2022/04/04 12:00 a.m.•16 views

The vulnerability of the SyliusGridBundle e-commerce platform for Symfony applications, related to the lack of protection for SQL query structures, allows attackers to execute arbitrary SQL queries.

The vulnerability of the SyliusGridBundle e-commerce platform for Symfony applications is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries remotely...

10CVSS8.1AI score0.01392EPSS
SaveExploits0References9Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/12/13 12:00 a.m.•16 views

The vulnerability of the PostgreSQL database management system lies in the lack of measures taken to protect SQL query structures, allowing attackers to execute arbitrary code.

The vulnerability of the PostgreSQL database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8.1CVSS7.4AI score0.01901EPSS
SaveExploits0References10Affected Software7
BDU FSTEC
BDU FSTEC
•added 2021/06/29 12:00 a.m.•15 views

The vulnerability of FortiWeb web applications’ network firewalls, related to the lack of protection for SQL query structures, allows attackers to execute arbitrary commands.

The vulnerability of FortiWeb web applications’ network firewalls is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely by sending specially crafted SQL queries...

10CVSS8.5AI score0.02599EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder