Lucene search
K

5736 matches found

CNNVD
CNNVD
added 2025/01/13 12:0 a.m.2 views

MonetDB SQL注入漏洞

MonetDB is MonetDB open source an open source column-oriented relational database management system . A SQL injection vulnerability exists in the expscard component of MonetDB version 11.49.1, which can be exploited by an attacker to cause a denial of service via a specially crafted SQL statement...

7.5CVSS7.7AI score0.00562EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/01/13 12:0 a.m.2 views

MonetDB 安全漏洞

MonetDB is an open source column-oriented relational database management system from MonetDB Open Source. A security vulnerability exists in MonetDB version v11.49.1, which stems from an issue contained in the expbin component. An attacker exploiting this vulnerability could cause a denial of...

7.5CVSS7AI score0.00562EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/01/13 12:0 a.m.2 views

MonetDB SQL注入漏洞

MonetDB is an open source column-oriented relational database management system from MonetDB Open Source. A SQL injection vulnerability exists in MonetDB version v11.49.1, which stems from an issue contained in the expcopy component. An attacker exploiting this vulnerability could cause a denial ...

7.5CVSS7.6AI score0.00757EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/01/13 12:0 a.m.2 views

MonetDB SQL注入漏洞

MonetDB is an open source column-oriented relational database management system from MonetDB Open Source. A SQL injection vulnerability exists in MonetDB version v11.49.1, which stems from an issue contained in the expsbindcolumn component. An attacker exploiting this vulnerability could cause a...

7.5CVSS7.6AI score0.00514EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/13 12:0 a.m.2 views

MonetDB 安全漏洞

MonetDB is an open source column-oriented relational database management system from MonetDB Open Source. A security vulnerability exists in MonetDB version v11.47.11 that stems from an issue contained in the bindcolexp component. An attacker exploiting this vulnerability could cause a denial of...

7.5CVSS7AI score0.0052EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/01/13 12:0 a.m.2 views

Virtuoso Open-Source Edition 安全漏洞

Virtuoso Open-Source Edition is a high-performance and scalable multi-model RDBMS, data integration middleware, linked data deployment, and HTTP application server platform open-sourced by OpenLink Software. A security vulnerability exists in Virtuoso Open-Source Edition version v7.2.11, which...

7.5CVSS7.5AI score0.00551EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/01/13 12:0 a.m.2 views

Virtuoso Open-Source Edition 安全漏洞

Virtuoso Open-Source Edition is a high-performance and scalable multi-model RDBMS, data integration middleware, linked data deployment, and HTTP application server platform open-sourced by OpenLink Software. A security vulnerability exists in Virtuoso Open-Source Edition version v7.2.11, which...

7.5CVSS7.5AI score0.00722EPSS
Exploits1References2
SUSE CVE
SUSE CVE
added 2025/01/10 12:37 a.m.2 views

SUSE CVE-2024-45387

An SQL injection vulnerability in Traffic Ops in Apache Traffic Control = 8.0.0 allows a privileged user with role "admin", "federation", "operations", "portal", or "steering" to execute arbitrary SQL against the database by sending a specially-crafted PUT request. Users are recommended to upgrad...

8.8CVSS8.4AI score0.41841EPSS
Exploits0References4
CNVD
CNVD
added 2025/01/10 12:0 a.m.1 views

Online Shoe Store details2.php file SQL Injection Vulnerability

Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from the id parameter in the /details2.php page that lacks validation of externally-entered SQL statements. An attacker can exploit this vulnerability to execute illegal...

9.8CVSS8.3AI score0.00509EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.3 views

WordPress plugin Google Maps Travel Route SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Google Map...

8.5CVSS8.9AI score0.00362EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.4 views

cy-fast 注入漏洞

cy-fast is a SpringBoot based rapid development framework by chenyi personal developer. An injection vulnerability exists in cy-fast version 1.0, which is caused by SQL injection in the parameter order...

8.8CVSS7AI score0.00467EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.2 views

WordPress plugin Virtual Bot SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

9.3CVSS9AI score0.00377EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.4 views

BigAntSoft BigAnt office messenger 安全漏洞

BigAntSoft BigAnt office messenger is a server/client instant messaging program for enterprise environments from BigAntSoft Australia. A SQL injection vulnerability exists in BigAntSoft BigAnt office messenger. The vulnerability can be exploited to conduct a SQL injection attack via the "devcode"...

6.3CVSS7.9AI score0.01729EPSS
Exploits6References3
CNNVD
CNNVD
added 2025/01/09 12:0 a.m.5 views

cy-fast 注入漏洞

cy-fast is a SpringBoot based rapid development framework by chenyi personal developer. An injection vulnerability exists in cy-fast version 1.0, which is caused by SQL injection in the parameter order...

8.8CVSS7AI score0.00467EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/01/09 12:0 a.m.2 views

PT-2025-1070 · Dell · Dell Powerscale Insightiq

Name of the Vulnerable Software and Affected Versions: Dell PowerScale InsightIQ affected versions not specified Description: The issue is related to a lack of protection for the SQL query structure in the Dell PowerScale InsightIQ software for performance monitoring and reporting. Exploitation o...

4.3CVSS7.4AI score
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/01/08 12:0 a.m.3 views

The vulnerability of the query_to_xml_and_xmlschema/table_to_xml/table_to_xml_and_xmlschema function in the Apache Superset data visualization software allows a hacker to execute arbitrary SQL code.

The vulnerability of the querytoxmlandxmlschema/tabletoxml/tabletoxmlandxmlschema function exists due to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

6.5CVSS6AI score0.0079EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2025/01/07 12:0 a.m.2 views

WordPress plugin WordPress Auction Plugin SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. WordPress plugin...

7.6CVSS8.7AI score0.00458EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/01/07 12:0 a.m.2 views

WordPress plugin ClickWhale SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

8.5CVSS8.8AI score0.0037EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/06 12:0 a.m.2 views

编号撤回

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. This CVE number has...

6.8AI score
Exploits0References3
OSV
OSV
added 2025/01/04 3:15 p.m.5 views

CVE-2024-41767

IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

7.3CVSS5.9AI score0.00303EPSS
Exploits0References1
Rows per page
Query Builder