Lucene search
+L

6 matches found

Redos
Redos
added 2026/07/06 12:0 a.m.9 views

ROS-20260706-73-0012

The vulnerability of the CREATE TYPE command in the PostgreSQL database management system is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL functions remotely...

5.4CVSS6.4AI score0.00159EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2026/02/02 12:0 a.m.7 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the gettest parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

7.7CVSS6.2AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/25 12:0 a.m.10 views

The vulnerability of the customerview.php file in the tailoring management system allows a hacker to execute arbitrary SQL code.

The vulnerability of the customerview.php file in the tailoring management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary SQL code...

10CVSS7.5AI score0.0108EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/25 12:0 a.m.10 views

The vulnerability of the Cyrus SASL authentication mechanism lies in the lack of protection for the structure of SQL queries, allowing attackers to execute arbitrary SQL queries.

The vulnerability of the Cyrus SASL authentication mechanism lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

9.4CVSS7.4AI score0.04123EPSS
SaveExploits0References13Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/11/25 12:0 a.m.23 views

The vulnerability of the ePolicy Orchestrator extension of the McAfee Data Loss Prevention software allows a perpetrator to execute arbitrary SQL code.

The vulnerability of the ePolicy Orchestrator extension of the McAfee Data Loss Prevention software lies in the lack of measures taken to neutralize special elements used in SQL queries. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

8.4CVSS7.2AI score0.01044EPSS
SaveExploits0References5Affected Software1
CNVD
CNVD
added 2015/01/08 12:0 a.m.5 views

Easewe FTP OCX Arbitrary File Execution Vulnerability

Easewe FTP OCX is easy to use ftp activex component that supports all standard ftp features. Easewe FTP OCX version 4.5.0.9 EaseWeFtp.FtpLibrary ActiveX control in EaseWeFtp.ocx fails to restrict access to certain methods, allowing remote attackers to exploit a vulnerability to execute arbitrary...

7.5CVSS7.5AI score0.01402EPSS
SaveExploits1References1
Rows per page
Query Builder