Lucene search
+L

6937 matches found

OSV
OSV
added 2024/11/15 4:15 p.m.6 views

CVE-2024-11245

A vulnerability, which was classified as critical, has been found in code-projects Farmacia 1.0. This issue affects some unknown processing of the file /editar-produto.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been...

7.5CVSS5.8AI score0.00558EPSS
SaveExploits1References5
CNVD
CNVD
added 2024/11/15 12:0 a.m.5 views

Ivanti Endpoint Manager SQL Injection Vulnerability (CNVD-2025-28685)

Ivanti Endpoint Manager is a comprehensive endpoint management solution developed by Ivanti to unify the management of all types of devices in an enterprise network, including Windows, macOS, Linux, ChromeOS, mobile devices and IoT devices. An SQL injection vulnerability exists in Ivanti Endpoint...

7.8CVSS8.5AI score0.00665EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/11/15 12:0 a.m.4 views

Ivanti Endpoint Manager SQL Injection Vulnerability (CNVD-2025-28690)

Ivanti Endpoint Manager is a comprehensive endpoint management solution developed by Ivanti to unify the management of all types of devices in an enterprise network, including Windows, macOS, Linux, ChromeOS, mobile devices and IoT devices. Ivanti Endpoint Manager suffers from a SQL injection...

7.2CVSS8.2AI score0.25814EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/11/15 12:0 a.m.9 views

Ivanti Endpoint Manager SQL Injection Vulnerability (CNVD-2025-28688)

Ivanti Endpoint Manager is a comprehensive endpoint management solution developed by Ivanti to unify the management of all types of devices in an enterprise network, including Windows, macOS, Linux, ChromeOS, mobile devices and IoT devices. Ivanti Endpoint Manager suffers from a SQL injection...

7.2CVSS8.2AI score0.01024EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/15 12:0 a.m.5 views

JeeWMS 注入漏洞

JeeWMS is JeeWMS open source a JAVA-based warehouse management system . JeeWMS 20241108 and earlier versions have an injection vulnerability that stems from the parameter begindate in the file cgReportController.do can lead to SQL injection...

8.8CVSS7AI score0.00506EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/11/15 12:0 a.m.6 views

KASO 安全漏洞

KASO is an application from KASO Inc. A security vulnerability exists in KASO v9.0, which stems from the discovery of an SQL injection vulnerability via the personid parameter in /cardcase/editcard.jsp...

9.8CVSS8AI score0.00421EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/11/15 12:0 a.m.7 views

The vulnerability of the Fortinet FortiManager software, which is used for centralized device management, and the Fortinet FortiAnalyzer software, which is used for event monitoring and analysis, stems from improper validation of input data. This vulnerability allows an attacker to gain access to information about the file system.

The vulnerability of the Fortinet FortiManager software, which is used for centralized device management, and the Fortinet FortiAnalyzer software, which is used for event monitoring and analysis, is related to improper validation of input data. Exploiting this vulnerability can allow attackers to...

7.1CVSS6AI score0.00187EPSS
SaveExploits0References3Affected Software2
CNNVD
CNNVD
added 2024/11/14 12:0 a.m.6 views

Kashipara E-learning Management System 安全漏洞

Kashipara E-learning Management System is a learning management system from Kashipara Corporation. A security vulnerability exists in Kashipara E-learning Management System version 1.0, which originates from SQL injection of the parameters firstname and lastname...

7.2CVSS7.9AI score0.0058EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/11/14 12:0 a.m.8 views

Kashipara E-learning Management System 安全漏洞

Kashipara E-learning Management System is a learning management system from Kashipara. A security vulnerability exists in Kashipara E-learning Management System version 1.0, which is caused by an SQL injection in the parameter classname...

7.2CVSS7.8AI score0.0058EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/11/14 12:0 a.m.11 views

PT-2024-34422 · Unknown · Kashipara E-Learning Management System Project

Name of the Vulnerable Software and Affected Versions: kashipara E-learning Management System Project version 1.0 Description: A SQL Injection issue was found in the /admin/class.php file via the class name parameter. This allows for potential exploitation. Recommendations: For kashipara E-learni...

7.2CVSS7.7AI score0.00468EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/11/14 12:0 a.m.7 views

Kashipara E-learning Management System 安全漏洞

Kashipara E-learning Management System is a learning management system from Kashipara. A security vulnerability exists in Kashipara E-learning Management System version 1.0, which is caused by an SQL injection in the parameter schoolyear...

7.2CVSS7.8AI score0.00379EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/11/14 12:0 a.m.9 views

Kashipara E-learning Management System 安全漏洞

Kashipara E-learning Management System is a learning management system from Kashipara. A security vulnerability exists in Kashipara E-learning Management System version 1.0, which is caused by an SQL injection in the parameter classname...

7.2CVSS7.8AI score0.00468EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/11/14 12:0 a.m.6 views

Kashipara E-learning Management System 安全漏洞

Kashipara E-learning Management System is a learning management system from Kashipara Inc. A security vulnerability exists in Kashipara E-learning Management System version 1.0, which originates from SQL injection of the parameters cys, un, ln, fn, and id...

7.2CVSS7.9AI score0.0058EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/11/14 12:0 a.m.6 views

Kashipara E-learning Management System 安全漏洞

Kashipara E-learning Management System is a learning management system from Kashipara. A security vulnerability exists in Kashipara E-learning Management System version 1.0, which is caused by an SQL injection in the parameter subjectcode...

7.2CVSS7.8AI score0.00379EPSS
SaveExploits1References1
OSV
OSV
added 2024/11/13 2:15 a.m.4 views

CVE-2024-32839

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

7.2CVSS7.4AI score0.03301EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/13 12:0 a.m.5 views

Ivanti Endpoint Manager SQL注入漏洞

Ivanti Endpoint Manager is a comprehensive endpoint management solution developed by Ivanti to manage all endpoint devices in an enterprise network. A SQL injection vulnerability exists in Ivanti Endpoint Manager. An attacker could exploit this vulnerability to remotely execute code...

7.2CVSS7.3AI score0.67711EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/11/13 12:0 a.m.9 views

Ivanti Endpoint Manager SQL注入漏洞

Ivanti Endpoint Manager is an enterprise-grade endpoint management solution, mainly used for centralized management of various types of devices including Windows, MacOS, Linux, iOS/Android mobile devices, etc., to achieve unified configuration, security control and remote operation and maintenanc...

7.2CVSS7.4AI score0.01667EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/11/13 12:0 a.m.55 views

Intel Neural Compressor 安全漏洞

Intel Neural Compressor is an open source project from Intel Corporation USA designed to help developers easily optimize AI models. A security vulnerability exists in Intel Neural Compressor versions prior to v3.0 that stems from an improper neutralization of special elements used in SQL commands...

7.3CVSS7.1AI score0.00227EPSS
SaveExploits0References2
OSV
OSV
added 2024/11/12 6:15 p.m.5 views

CVE-2024-49003

SQL Server Native Client Remote Code Execution Vulnerability...

8.8CVSS5.9AI score0.01432EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/12 6:15 p.m.2 views

CVE-2024-43459

SQL Server Native Client Remote Code Execution Vulnerability...

8.8CVSS5.9AI score0.01577EPSS
SaveExploits0References1
Rows per page
Query Builder