1321 matches found
Sql injection
A SQL injection vulnerability exists in the “reporter events type date” feature of the ScienceLogic SL1 that takes unsanitized user-controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database...
CVE-2022-48598
A SQL injection vulnerability exists in the “reporter events type date” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database...
CVE-2022-48598
A SQL injection vulnerability exists in the “reporter events type date” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database...
SUSE CVE-2023-4205
This was deemed as a false positive both by the reporter and upstream kernel...
PT-2023-26732 · Opnsense · Opnsense Community Edition +1
Name of the Vulnerable Software and Affected Versions: OPNsense Community Edition versions prior to 23.7 OPNsense Business Edition versions prior to 23.4.2 Description: The issue is related to the Crash Reporter component, specifically the crash reporter.php file, which mishandles input...
PT-2023-15871 · Sciencelogic · Sciencelogic Sl1
Name of the Vulnerable Software and Affected Versions: ScienceLogic SL1 affected versions not specified Description: A SQL injection issue exists in the “reporter events type” feature of the ScienceLogic SL1. This feature takes unsanitized user-controlled input and passes it directly to a SQL...
CVE-2023-39006
The Crash Reporter crashreporter.php component of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 mishandles input sanitization...
ScienceLogic SL1 SQL注入漏洞
ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A SQL injection vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from a lack of validation of externally entered SQL...
CVE-2023-39006
The CVE-2023-39006 vulnerability affects OPNSense components, specifically the Crash Reporter (crash_reporter.php). Affected versions are Community Edition before 23.7 and Business Edition before 23.4.2, where input sanitization is mishandled. Concrete details across sources confirm the affected ...
Deciso OPNsense Cross-Site Scripting Vulnerability
Deciso OPNsense is a suite of FreeBSD-based open source firewall and routing software from Dutch company Deciso. A cross-site scripting vulnerability exists in OPNsense versions prior to 23.7, which stems from an improper input cleanup issue in the Crash Reporter component...
ScienceLogic SL1 SQL注入漏洞
ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A SQL injection vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from a lack of validation of externally entered SQL...
UBUNTU-CVE-2023-4205
Rejected reason: This was deemed as a false positive both by the reporter and upstream kernel...
CVE-2023-4205
CVE-2023-4205 entry is rejected/not used; not an active vulnerability.
Improper Authorization
gitlab is vulnerable to Improper Authorization. This vulnerability allows project members to manage issues in the error tracking feature if they are assigned the reporter role...
aproperties.es Cross Site Scripting vulnerability OBB-3530311
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-30565
An insecure connection between Systems Manager and CQI Reporter application could expose infusion data to an attacker...
CVE-2023-30565
An insecure connection between Systems Manager and CQI Reporter application could expose infusion data to an attacker...
Design/Logic Flaw
An insecure connection between Systems Manager and CQI Reporter application could expose infusion data to an attacker...
CVE-2023-30565
CVE-2023-30565 describes an insecure (cleartext) connection between BD Alaris System Manager (SM) and CQI Reporter that could expose infusion data. Affected: BD Alaris SM versions 12.3 and prior; CQI Reporter v10.17 and prior; PCU Model 8015 12.1.3 and prior. MITRE/ADP assessment in the connected...