Lucene search
K

10 matches found

BDU FSTEC
BDU FSTEC
added 2025/01/28 12:0 a.m.1 views

The vulnerability of the web interface for managing microprogramming software-based network storage devices STEALTHONE D220 and D340 allows a intruder to gain unauthorized access to protected information.

The vulnerability of the web interface for managing microprogramming software-based network storage devices STEALTHONE D220 and D340 is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...

7.8CVSS7.8AI score0.00132EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/11/07 12:0 a.m.1 views

The vulnerability of the AWV component (Audio, Web, and Video Conferencing) of the Mitel MiCollab collaboration platform allows a perpetrator to execute arbitrary code.

The vulnerability of the AWV component Audio, Web, and Video Conferencing is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9.7CVSS8.5AI score0.00821EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2024/09/20 12:0 a.m.0 views

The vulnerability of the LoadMotherboardTable method in the Ivanti EPM endpoint management software allows a hacker to execute arbitrary code.

The vulnerability of the LoadMotherboardTable method in the Ivanti EPM endpoint management software is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.1CVSS8.2AI score0.38131EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/07/01 12:0 a.m.0 views

The vulnerability of the login.php file of the Loan Management System allows a perpetrator to execute arbitrary SQL code.

The vulnerability of the login.php file of the Loan Management System is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary SQL code through the username parameter...

7.5CVSS0.00106EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/06/10 12:0 a.m.0 views

The vulnerability of the RecordGoodApp method in the Ivanti Endpoint Manager software for managing endpoints in information networks allows a hacker to execute arbitrary code.

The vulnerability of the RecordGoodApp method in the Ivanti Endpoint Manager software for managing endpoints in information networks relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a...

10CVSS0.93975EPSS
Exploits5References8
BDU FSTEC
BDU FSTEC
added 2023/09/13 12:0 a.m.1 views

The vulnerability of the `grow_right_pane_tree()` function in the Cacti network monitoring software, which allows a hacker to execute arbitrary SQL queries.

The vulnerability of the growrightpanetree function in the Cacti network monitoring software’s script graphview.php relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using a specially...

10CVSS0.92278EPSS
Exploits2References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/06/30 12:0 a.m.2 views

The vulnerability of the mod_h5pactivity component in the virtual learning environment Moodle allows a hacker to execute arbitrary SQL queries in the database.

The vulnerability of the modh5pactivity component in the virtual learning environment Moodle is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries in the database...

10CVSS0.031EPSS
Exploits4References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/17 12:0 a.m.1 views

The vulnerability of the software used to implement the hypertext environment in the Centreon IT infrastructure monitoring software allows a hacker to execute arbitrary SQL commands.

The vulnerability of the software for implementing the hypertext environment in the Centreon IT infrastructure monitoring software is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands...

9.3CVSS0.02059EPSS
Exploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/10/09 12:0 a.m.0 views

The vulnerability of the PayAction.class.php script of the software controller for centralized control of wireless networks by D-Link Central WiFi Manager CWM(100) allows a hacker to execute arbitrary code.

The vulnerability of the PayAction.class.php script of the software controller for centralized control of wireless networks by D-Link Central WiFi Manager CWM100 is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker operating...

10CVSS6AI score0.02753EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/04/04 12:0 a.m.1 views

The vulnerability of the NVBUPolicy Get request handler in NetVault Backup software allows a attacker to execute arbitrary code.

The vulnerability of the NVBUPolicy Get request handler in NetVault Backup software for data archiving and restoration is related to insufficient protection of the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9.8CVSS6.1AI score0.14875EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder