Lucene search
+L

15470 matches found

Positive Technologies
Positive Technologies
•added 2020/06/30 12:00 a.m.•8 views

PT-2020-4199

Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric MC Works64 versions 4.02C and earlier Mitsubishi Electric MC Works32 version 3.00A ICONICS GenBroker64 versions 10.96 and prior ICONICS GenBroker32 versions 9.5 and prior ICONICS FrameWorX Server versions 10.96 and prior...

9.1CVSS0.03029EPSS
SaveExploits0References7
Check Point Advisories
Check Point Advisories
•added 2020/06/28 12:00 a.m.•59 views

Joomla Ek Rishta SQL Injection (CVE-2018-7315)

An SQL injection vulnerability exists in Joomla Ek Rishta component. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS4.9AI score0.02652EPSS
SaveExploits5
RedhatCVE
RedhatCVE
•added 2020/06/25 12:54 p.m.•68 views

CVE-2020-2934

A flaw was found in the mysql-connector-java package. A complicated attack against the mysql Connector/J allows attackers on the local network to interfere with a user's connection and insert unauthorized SQL commands...

5.1CVSS5.5AI score0.0328EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/06/25 12:54 p.m.•45 views

CVE-2020-2875

A flaw was found in the mysql-connector-java package. A complicated attack against the mysql Connector/J allows attackers on the local network to interfere with a user's connection and insert unauthorized SQL commands in MySQL Connectors and other products...

4CVSS5.2AI score0.02224EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2020/06/18 6:15 p.m.•26 views

CVE-2020-14443

A SQL injection vulnerability in accountancy/customer/card.php in Dolibarr 11.0.3 allows remote authenticated users to execute arbitrary SQL commands via the id parameter...

8.8CVSS8.2AI score
SaveExploits0References1
Prion
Prion
•added 2020/06/18 6:15 p.m.•37 views

Sql injection

A SQL injection vulnerability in accountancy/customer/card.php in Dolibarr 11.0.3 allows remote authenticated users to execute arbitrary SQL commands via the id parameter...

6.5CVSS8.8AI score0.01147EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/06/18 5:26 p.m.•53 views

CVE-2020-14443

A SQL injection vulnerability in accountancy/customer/card.php in Dolibarr 11.0.3 allows remote authenticated users to execute arbitrary SQL commands via the id parameter...

8.9AI score0.01147EPSS
SaveExploits0References1
Prion
Prion
•added 2020/06/18 3:15 p.m.•29 views

Sql injection

A SQL injection issue in the gVectors wpDiscuz plugin 5.3.5 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the order parameter of a wpdLoadMoreComments request. No 7.x versions are affected...

7.5CVSS10AI score0.12605EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2020/06/17 12:00 a.m.•6 views

PT-2020-6838

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 10.14 PostgreSQL versions prior to 11.9 PostgreSQL versions prior to 12.4 Description The issue is related to the improper sanitization of the search path during logical replication in PostgreSQL, allowing an...

8.1CVSS0.02235EPSS
SaveExploits2References193
Check Point Advisories
Check Point Advisories
•added 2020/06/16 12:00 a.m.•58 views

Symphony CMS SQL Injection (CVE-2013-2559)

An SQL injection vulnerability exists in the Symphony CMS. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

6.5CVSS5.1AI score0.02355EPSS
SaveExploits4
CNVD
CNVD
•added 2020/06/04 12:00 a.m.•39 views

WatermelonDB SQL Injection Vulnerability

WatermelonDB is the next generation React database for building powerful React and React Native applications that can scale from hundreds to tens of thousands of records while remaining fast. A SQL injection vulnerability in WatermelonDB versions prior to 0.15.1 and prior to 0.16.2, which stems...

5.9CVSS7.8AI score0.00763EPSS
SaveExploits0References1
NVD
NVD
•added 2020/05/20 11:15 a.m.•34 views

CVE-2020-5579

SQL injection vulnerability in the Paid Memberships versions prior to 2.3.3 allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors...

7.2CVSS7.3AI score0.0119EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/20 12:00 a.m.•7 views

CVE-2020-5579: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Paid Memberships versions prior to 2.3.3 allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors...

7.2CVSS6.6AI score0.0119EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/05/20 12:00 a.m.•5 views

PT-2020-18553

Name of the Vulnerable Software and Affected Versions Paid Memberships versions prior to 2.3.3 Description The issue allows an attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors. This can be exploited by sending malicious input to vulnerable parameters,...

7.2CVSS0.0119EPSS
SaveExploits0References5
Check Point Advisories
Check Point Advisories
•added 2020/05/18 12:00 a.m.•96 views

vBulletin nodeId SQL Injection (CVE-2020-12720)

An SQL injection vulnerability exists in vBulletin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS5.3AI score0.88948EPSS
SaveExploits14
Check Point Advisories
Check Point Advisories
•added 2020/04/30 12:00 a.m.•18 views

WordPress LearnPress Plugin SQL Injection

An SQL injection vulnerability exists in the WordPress LearnDash Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

4.9AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2020/04/30 12:00 a.m.•60 views

WordPress LearnDash Plugin SQL Injection (CVE-2020-6009)

An SQL injection vulnerability exists in the WordPress LearnDash Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS4.8AI score0.0184EPSS
SaveExploits0
Packet Storm
Packet Storm
•added 2020/04/21 12:00 a.m.•160 views

PMB 5.6 SQL Injection

Exploit Title: PMB 5.6 - 'logid' SQL Injection Google Dork: inurl:opaccss Date: 2020-04-20 Exploit Author: 41-trk Tarik Bakir Vendor Homepage: http://www.sigb.net Software Link: http://forge.sigb.net/redmine/projects/pmb/files Affected versions : = 5.6 -==== Software Description ====- PMB is a...

0.3AI score
SaveExploits0
Prion
Prion
•added 2020/04/03 7:15 p.m.•27 views

Sql injection

A SQL injection vulnerability in TestLink 1.9.20 allows attackers to execute arbitrary SQL commands in dragdroptreenodes.php via the nodeid parameter...

7.5CVSS9.8AI score0.02935EPSS
SaveExploits1References2Affected Software1
EUVD
EUVD
•added 2020/04/03 6:36 p.m.•12 views

EUVD-2020-29485

A SQL injection vulnerability in TestLink 1.9.20 allows attackers to execute arbitrary SQL commands in dragdroptreenodes.php via the nodeid parameter...

9.8CVSS10AI score0.02935EPSS
SaveExploits1References2
Rows per page
Query Builder