Lucene search
K

5735 matches found

CNNVD
CNNVD
added 2024/11/13 12:0 a.m.9 views

Intel Neural Compressor 安全漏洞

Intel Neural Compressor is an open source project from Intel Corporation USA designed to help developers easily optimize AI models. A security vulnerability exists in Intel Neural Compressor versions prior to v3.0 that stems from an improper neutralization of special elements used in SQL commands...

7.3CVSS7.1AI score0.00227EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/11/13 12:0 a.m.4 views

Ivanti Endpoint Manager SQL注入漏洞

Ivanti Endpoint Manager is an enterprise-grade endpoint management solution, mainly used for centralized management of various types of devices including Windows, MacOS, Linux, iOS/Android mobile devices, etc., to achieve unified configuration, security control and remote operation and maintenanc...

7.2CVSS7.4AI score0.01667EPSS
Exploits0References3
OSV
OSV
added 2024/11/12 6:15 p.m.3 views

CVE-2024-49003

SQL Server Native Client Remote Code Execution Vulnerability...

8.8CVSS5.9AI score0.01432EPSS
Exploits0References1
OSV
OSV
added 2024/11/12 6:15 p.m.2 views

CVE-2024-43459

SQL Server Native Client Remote Code Execution Vulnerability...

8.8CVSS5.9AI score0.01577EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/12 12:0 a.m.1 views

Ivanti Endpoint Manager 安全漏洞

Ivanti Endpoint Manager is an enterprise-grade endpoint management solution, mainly used for centralized management of various types of devices including Windows, MacOS, Linux, iOS/Android mobile devices, etc., to achieve unified configuration, security control and remote operation and maintenanc...

9.8CVSS8.4AI score0.40512EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/11/12 12:0 a.m.4 views

Microsoft SQL Server 安全漏洞

Microsoft SQL Server is a large commercial database system from Microsoft Corporation USA that is used under Microsoft Windows. A security vulnerability exists in Microsoft SQL Server. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...

8.8CVSS7AI score0.01345EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/11/12 12:0 a.m.1 views

Microsoft SQL Server 安全漏洞

Microsoft SQL Server is the United States Microsoft Microsoft company's set of applications in the Microsoft Windows system under the large commercial database system. A remote code execution vulnerability exists in Microsoft SQL Server Native Client, which can be exploited by an attacker to...

8.8CVSS8.8AI score0.01345EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/11/12 12:0 a.m.2 views

Microsoft SQL Server 安全漏洞

Microsoft SQL Server is a large commercial database system from Microsoft Corporation USA that is used under Microsoft Windows. A security vulnerability exists in Microsoft SQL Server. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...

8.8CVSS7AI score0.01432EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/11/12 12:0 a.m.3 views

Job Recruitment 注入漏洞

Job Recruitment is a job portal project developed by code-projects using PHP, CSS, JavaScript, and MySQL technologies. An injection vulnerability exists in Job Recruitment version 1.0, which stems from an SQL injection vulnerability in the userid parameter of the admin.php page...

8.8CVSS7AI score0.00484EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/11/12 12:0 a.m.3 views

1000 Projects Beauty Parlour Management System 注入漏洞

1000 Projects Beauty Parlour Management System is an open source beauty parlor management system from 1000 Projects. An injection vulnerability exists in 1000 Projects Beauty Parlour Management System version 1.0, which stems from an incorrect manipulation of the parameter name that can lead to S...

9.8CVSS8AI score0.00587EPSS
Exploits1References5
OSV
OSV
added 2024/11/11 8:15 a.m.2 views

CVE-2024-11020

Webopac from Grand Vice info has a SQL Injection vulnerability, allowing unauthenticated remote attacks to inject arbitrary SQL commands to read, modify, and delete database contents...

9.8CVSS6AI score0.00451EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/11/11 12:0 a.m.1 views

Grand Vice info Webopac SQL注入漏洞

Grand Vice info Webopac is an online public access catalog from China Xinxueying Info Grand Vice info. It is used for users to use library services through the Internet. A SQL injection vulnerability exists in Grand Vice info Webopac version 6.x prior to 6.5.1 and version 7.x prior to 7.2.3, whic...

9.8CVSS8.1AI score0.00451EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/11 12:0 a.m.2 views

WordPress plugin Gboy Custom Google Map SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

8.5CVSS8.6AI score0.00416EPSS
Exploits0References2
CNVD
CNVD
added 2024/11/11 12:0 a.m.2 views

Teachers Record Management System admin/queries.php File SQL Injection Vulnerability

Teachers Record Management System is a teacher record management system. Teachers Record Management System is vulnerable to an SQL injection vulnerability that originates from an SQL injection vulnerability via the tid parameter in the admin/queries.php file. No details of the vulnerability are...

9.8CVSS8AI score0.00564EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/11/11 12:0 a.m.4 views

PT-2024-16704 · Grand Vice Info · Webopac

Name of the Vulnerable Software and Affected Versions: Webopac from Grand Vice info affected versions not specified Description: The issue is a SQL Injection vulnerability, allowing unauthenticated remote attacks to inject arbitrary SQL commands to read, modify, and delete database contents...

9.8CVSS8.3AI score0.00538EPSS
Exploits0References16
CNNVD
CNNVD
added 2024/11/09 12:0 a.m.3 views

WordPress plugin RSVP ME SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

8.5CVSS7.7AI score0.00384EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/09 12:0 a.m.2 views

WordPress plugin Porsline SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

8.5CVSS7.7AI score0.00384EPSS
Exploits0References1
OSV
OSV
added 2024/11/08 4:15 a.m.2 views

CVE-2024-10987

A vulnerability was found in code-projects E-Health Care System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /Doctor/userappointment.php. The manipulation of the argument scheduleid/scheduledate/scheduleday/starttime/endtime/booking...

6.5CVSS5.8AI score0.00429EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2024/11/08 12:0 a.m.1 views

PT-2024-9097 · Unknown · J-Ирбис 2.0

Name of the Vulnerable Software and Affected Versions: J-ИРБИС 2.0 affected versions not specified Description: The issue is related to the lack of protection measures for the SQL query structure in the J-ИРБИС 2.0 module. This could allow a remote attacker to execute arbitrary SQL code by sendin...

10CVSS8.2AI score
Exploits0References1
CNNVD
CNNVD
added 2024/11/08 12:0 a.m.5 views

code-projects E-Health Care System 注入漏洞

Code-Projects E-Health Care System is an e-health care system from Code-Projects open source. An injection vulnerability exists in code-projects E-Health Care System version 1.0, which stems from the parameter sid in the file /Admin/detail.php that can lead to SQL injection...

6.5CVSS7.1AI score0.00429EPSS
Exploits1References5
Rows per page
Query Builder