Lucene search
+L

13555 matches found

Cvelist
Cvelist
added 2020/01/30 7:3 p.m.21 views

CVE-2014-3719

Multiple SQL injection vulnerabilities in cgi-bin/reviewm.cgi in Ex Libris ALEPH 500 Integrated library management system 18.1 and 20 allow remote attackers to execute arbitrary SQL commands via the 1 find, 2 lib, or 3 sid parameter...

10AI score0.0199EPSS
SaveExploits2References2
Prion
Prion
added 2020/01/24 5:15 p.m.22 views

Sql injection

SQL injection vulnerability in the MARC framework import/export function admin/importexportframework.pl in Koha before 3.8.23, 3.10.x before 3.10.13, 3.12.x before 3.12.10, and 3.14.x before 3.14.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. NOTE:...

7.5CVSS9.4AI score0.02038EPSS
SaveExploits2References4Affected Software1
Packet Storm
Packet Storm
added 2020/01/24 12:0 a.m.191 views

Webtareas 2.0 SQL Injection

Exploit Title: Webtareas 2.0 - 'id' SQL Injection Date: 2020-01-23 Exploit Author: Greg.Priest Vendor Homepage: http://webtareas.sourceforge.net/general/home.php Software Link: http://webtareas.sourceforge.net/general/home.php Version: Webtareas v2.0 Tested on: Windows CVE : N/A Webtareas v2.0...

0.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.37 views

Huawei EulerOS: Security Advisory for sqlite (EulerOS-SA-2019-1152)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS8.2AI score0.10312EPSS
SaveExploits1References2
NVD
NVD
added 2020/01/09 8:15 p.m.20 views

CVE-2012-1259

Multiple SQL injection vulnerabilities in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and possibly other versions before 9.0.1.19899, allow remote attackers to execute arbitrary SQL commands via the 1 addip parameter to cgi-bin/scrutfaexclusions.cgi, 2...

9.8CVSS10AI score0.04247EPSS
SaveExploits7References5
Prion
Prion
added 2020/01/09 8:15 p.m.14 views

Sql injection

Multiple SQL injection vulnerabilities in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and possibly other versions before 9.0.1.19899, allow remote attackers to execute arbitrary SQL commands via the 1 addip parameter to cgi-bin/scrutfaexclusions.cgi, 2...

7.5CVSS9.2AI score0.04247EPSS
SaveExploits7References5Affected Software1
OSV
OSV
added 2020/01/06 8:15 a.m.9 views

CVE-2019-15985

Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device. To exploit these vulnerabilities, an attacker would need administrative privileges on the DC...

7.2CVSS7.4AI score0.03304EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2020/01/06 7:45 a.m.13 views

CVE-2019-15985 Cisco Data Center Network Manager SQL Injection Vulnerabilities

Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device. To exploit these vulnerabilities, an attacker would need administrative privileges on the DC...

7.2CVSS8.1AI score0.03304EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/01/03 12:0 a.m.6 views

Cisco Data Center Network Manager SOAP API SQL Injection Vulnerability

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. A SOAP API SQL injection vulnerability exists in Cisco Data Center Network Manager...

9CVSS8.3AI score0.03304EPSS
SaveExploits0References1
NVD
NVD
added 2020/01/02 8:15 p.m.20 views

CVE-2013-3932

SQL injection vulnerability in the Jomres comjomres component before 7.3.1 for Joomla! allows remote authenticated users with the "Business Manager" permission to execute arbitrary SQL commands via the id parameter in an editProfile action to administrator/index.php...

8.8CVSS8.8AI score0.01758EPSS
SaveExploits0References3
Prion
Prion
added 2020/01/02 8:15 p.m.19 views

Sql injection

SQL injection vulnerability in the Jomres comjomres component before 7.3.1 for Joomla! allows remote authenticated users with the "Business Manager" permission to execute arbitrary SQL commands via the id parameter in an editProfile action to administrator/index.php...

6.5CVSS8.6AI score0.01758EPSS
SaveExploits0References3Affected Software1
Cisco
Cisco
added 2020/01/02 4:0 p.m.130 views

Cisco Data Center Network Manager SQL Injection Vulnerabilities

Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device. To exploit these vulnerabilities, an attacker would need administrative privileges on the DC...

7.2CVSS1.4AI score0.46935EPSS
SaveExploits10References1
Cvelist
Cvelist
added 2019/12/31 8:42 p.m.31 views

CVE-2015-5591

SQL injection vulnerability in Zenphoto before 1.4.9 allow remote administrators to execute arbitrary SQL commands...

7.5AI score0.02238EPSS
SaveExploits2References4
Cvelist
Cvelist
added 2019/12/26 3:16 p.m.31 views

CVE-2019-6012

SQL injection vulnerability in the wpDataTables Lite Version 2.0.11 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

7.2AI score0.01447EPSS
SaveExploits0References2
Cloud Foundry
Cloud Foundry
added 2019/12/18 12:0 a.m.138 views

USN-4205-1: SQLite vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description It was discovered that SQLite incorrectly handled certain schemas. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 12.04 ESM...

8.8CVSS8.6AI score0.08115EPSS
SaveExploits2
Prion
Prion
added 2019/12/09 8:15 p.m.15 views

Sql injection

SQL injection vulnerability in Accentis Content Resource Management System before the October 2015 patch allows remote attackers to execute arbitrary SQL commands via the SIDX parameter...

6.5CVSS9AI score0.01566EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2019/12/09 7:13 p.m.18 views

CVE-2015-3424

SQL injection vulnerability in Accentis Content Resource Management System before the October 2015 patch allows remote attackers to execute arbitrary SQL commands via the SIDX parameter...

9.2AI score0.01566EPSS
SaveExploits2References1
NVD
NVD
added 2019/11/20 8:15 p.m.22 views

CVE-2013-2091

SQL injection vulnerability in Dolibarr ERP/CRM 3.3.1 allows remote attackers to execute arbitrary SQL commands via the 'pays' parameter in fiche.php...

9.8CVSS10AI score0.02504EPSS
SaveExploits0References4
Prion
Prion
added 2019/11/20 8:15 p.m.25 views

Sql injection

SQL injection vulnerability in Dolibarr ERP/CRM 3.3.1 allows remote attackers to execute arbitrary SQL commands via the 'pays' parameter in fiche.php...

7.5CVSS9AI score0.02504EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
added 2019/11/20 8:15 p.m.40 views

CVE-2013-2091

SQL injection vulnerability in Dolibarr ERP/CRM 3.3.1 allows remote attackers to execute arbitrary SQL commands via the 'pays' parameter in fiche.php...

9.8CVSS7.5AI score0.02504EPSS
SaveExploits0References1
Rows per page
Query Builder