Lucene search
+L

31 matches found

CNVD
CNVD
added 2020/03/31 12:00 a.m.14 views

odata4j sql injection vulnerability

odata4j is a new open source toolkit. A SQL injection vulnerability exists in odata4j version 0.7.0. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit the vulnerability to execute illegal SQL commands...

9.8CVSS9.8AI score0.01411EPSS
SaveExploits0
CNVD
CNVD
added 2020/03/31 12:00 a.m.10 views

odata4j sql injection vulnerability (CNVD-2020-24024)

odata4j is a new open source toolkit. A SQL injection vulnerability exists in odata4j version 0.7.0. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit the vulnerability to execute illegal SQL commands...

9.8CVSS9.8AI score0.01411EPSS
SaveExploits0
CNVD
CNVD
added 2019/12/16 12:00 a.m.19 views

samurai heap buffer overflow vulnerability

samurai is a ninja-compatible build tool written in C. It can be used in a variety of ways, including. A buffer overflow vulnerability exists in the 'canonpath' function of the util.c file in samurai version 0.7. The vulnerability stems from a networked system or product performing operations in...

7.8CVSS7.3AI score0.00778EPSS
SaveExploits1References1
OSV
OSV
added 2019/09/08 3:15 a.m.8 views

DEBIAN-CVE-2019-16095

Symonics libmysofa 0.7 has an invalid read in getDimension in hrtf/reader.c...

7.5CVSS6.7AI score0.01347EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/08/28 12:00 a.m.8 views

PrestaShop ICOMMKT connector SQL Injection Vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods , short message alerts and product image zoom and other features.ICOMMKT connector is used in one of the ICOMMK connector . A SQL injection vulnerability...

9.8CVSS8.1AI score0.01329EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/03/14 12:00 a.m.10 views

GNU LibreDWG Heap Buffer Overflow Vulnerability

GNU LibreDWG is a GNU Project C library for working with DWG files. A buffer overflow vulnerability exists in the 'dwgdecodeeeddata' function of the decode.c file in GNU LibreDWG version 0.7 and version 0.7.1645. An attacker could exploit this vulnerability to cause a denial of service...

7.5CVSS7.2AI score0.02906EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/03/14 12:00 a.m.18 views

GNU LibreDWG null pointer back-reference vulnerability (CNVD-2019-12558)

GNU LibreDWG is a GNU Project C library for working with DWG files. A null pointer back-reference vulnerability exists in the 'dwgdxfLTYPE' function of the dwg.spec file in GNU LibreDWG version 0.7 and 0.7.1645. An attacker could exploit this vulnerability to cause a denial of service...

7.5CVSS6.8AI score0.02772EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/03/14 12:00 a.m.16 views

GNU LibreDWG Buffer Overflow Vulnerability (CNVD-2019-12557)

GNU LibreDWG is a GNU Project C library for working with DWG files. A buffer overflow vulnerability exists in the 'dwgdxfBLOCKCONTROL' function of the dwg.spec file in GNU LibreDWG version 0.7 and 0.7.1645. An attacker could exploit this vulnerability to cause a denial of service or disclose...

9.1CVSS7.2AI score0.02968EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/03/07 12:00 a.m.13 views

Western Bridge Cobub Razor Cross-Site Request Forgery Vulnerability

Western Bridge Cobub Razor is an open source mobile application analytics system. The system can provide users with detailed multi-dimensional reports and monitor their mobile applications and applications user behavior statistics. A cross-site request forgery vulnerability exists in Western Brid...

8.8CVSS7AI score0.01143EPSS
SaveExploits1References1
OSV
OSV
added 2018/03/07 12:00 a.m.11 views

UBUNTU-CVE-2018-7752

GPAC through 0.7.1 has a Buffer Overflow in the gfmediaavcreadsps function in mediatools/avparsers.c, a different vulnerability than CVE-2018-1000100...

7.8CVSS7.1AI score0.02079EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2011/12/29 12:00 a.m.18 views

PT-2011-5168 · Php · Phpids

Name of the Vulnerable Software and Affected Versions: PHPIDS versions prior to 0.7 Description: The issue allows remote attackers to bypass rulesets and add PHP sequences to a file due to improper implementation of Regular Expression Denial of Service ReDoS filters. Recommendations: For versions...

7.5CVSS6.7AI score0.01346EPSS
SaveExploits0References2
Rows per page
Query Builder