Lucene search
+L

971 matches found

attackerkb
attackerkb
•added 2022/05/19 9:15 p.m.•9 views

CVE-2022-28961

Spip Web Framework v3.1.13 and below was discovered to contain multiple SQL injection vulnerabilities at /ecrire via the liertrad and where parameters...

8.8CVSS5.9AI score0.01724EPSS
SaveExploits1References6
NVD
NVD
•added 2022/05/19 9:15 p.m.•32 views

CVE-2022-28961

Spip Web Framework v3.1.13 and below was discovered to contain multiple SQL injection vulnerabilities at /ecrire via the liertrad and where parameters...

8.8CVSS0.01724EPSS
SaveExploits1References5
OSV
OSV
•added 2022/05/19 9:15 p.m.•7 views

DEBIAN-CVE-2022-28961

Spip Web Framework v3.1.13 and below was discovered to contain multiple SQL injection vulnerabilities at /ecrire via the liertrad and where parameters...

8.8CVSS8.3AI score0.01724EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2022/05/19 8:26 p.m.•40 views

CVE-2022-28961

Spip Web Framework v3.1.13 and below was discovered to contain multiple SQL injection vulnerabilities at /ecrire via the liertrad and where parameters...

9.5AI score0.01724EPSS
SaveExploits1References5
Mend
Mend
•added 2022/05/19 8:26 p.m.•2 views

CVE-2022-28961

Spip Web Framework v3.1.13 and below was discovered to contain multiple SQL injection vulnerabilities at /ecrire via the liertrad and where parameters...

8.8CVSS0.01724EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2022/05/19 12:00 a.m.•25 views

SPIP SQL注入漏洞

SPIP is a web-based content publishing system. A SQL injection vulnerability exists in SPIP version 3.1.13 and earlier, which stems from a lack of validation of external input SQL statements in the liertrad and where parameters of /ecrire. An attacker could use this vulnerability to execute illeg...

8.8CVSS6.1AI score0.01724EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/19 12:00 a.m.•3 views

CVE-2022-28961: Improper Neutralization of Special Elements used in an SQL Command

Spip Web Framework v3.1.13 and below was discovered to contain multiple SQL injection vulnerabilities at /ecrire via the liertrad and where parameters...

8.8CVSS7.8AI score0.01724EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2022/05/14 1:57 a.m.•43 views

ThinkPHP SQL injection vulnerability

In ThinkPHP 5.1.24, the inner function delete can be used for SQL injection when its WHERE condition's value can be controlled by a user's request...

9.8CVSS8AI score0.01537EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2022/05/05 5:15 p.m.•27 views

CVE-2021-38441

Eclipse CycloneDDS versions prior to 0.8.0 are vulnerable to a write-what-where condition, which may allow an attacker to write arbitrary values in the XML parser...

9.8CVSS0.02146EPSS
SaveExploits0References2
OSV
OSV
•added 2022/05/05 5:15 p.m.•16 views

DEBIAN-CVE-2021-38441

Eclipse CycloneDDS versions prior to 0.8.0 are vulnerable to a write-what-where condition, which may allow an attacker to write arbitrary values in the XML parser...

9.8CVSS8.8AI score0.02146EPSS
SaveExploits0References1
Prion
Prion
•added 2022/05/05 5:15 p.m.•28 views

Design/Logic Flaw

Eclipse CycloneDDS versions prior to 0.8.0 are vulnerable to a write-what-where condition, which may allow an attacker to write arbitrary values in the XML parser...

7.5CVSS9.3AI score0.02146EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
•added 2022/05/05 5:15 p.m.•31 views

CVE-2021-38441

Eclipse CycloneDDS versions prior to 0.8.0 are vulnerable to a write-what-where condition, which may allow an attacker to write arbitrary values in the XML parser...

9.8CVSS7.2AI score0.02146EPSS
SaveExploits0References3
OSV
OSV
•added 2022/05/05 5:15 p.m.•19 views

UBUNTU-CVE-2021-38441

Eclipse CycloneDDS versions prior to 0.8.0 are vulnerable to a write-what-where condition, which may allow an attacker to write arbitrary values in the XML parser...

9.8CVSS5.9AI score0.02146EPSS
SaveExploits0References4
Mend
Mend
•added 2022/05/05 3:15 p.m.•1 views

CVE-2021-38441

Eclipse CycloneDDS versions prior to 0.8.0 are vulnerable to a write-what-where condition, which may allow an attacker to write arbitrary values in the XML parser...

9.8CVSS0.02146EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2022/05/05 3:15 p.m.•15 views

CVE-2021-38441 Eclipse CycloneDDS Write-what-where Condition

Eclipse CycloneDDS versions prior to 0.8.0 are vulnerable to a write-what-where condition, which may allow an attacker to write arbitrary values in the XML parser...

6.6CVSS6.8AI score0.02146EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/05/05 3:15 p.m.•36 views

CVE-2021-38441 Eclipse CycloneDDS Write-what-where Condition

Eclipse CycloneDDS versions prior to 0.8.0 are vulnerable to a write-what-where condition, which may allow an attacker to write arbitrary values in the XML parser...

6.6CVSS9.6AI score0.02146EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/05 12:00 a.m.•6 views

CVE-2021-38441: Write-what-where Condition

Eclipse CycloneDDS versions prior to 0.8.0 are vulnerable to a write-what-where condition, which may allow an attacker to write arbitrary values in the XML parser...

9.8CVSS8.2AI score0.02146EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/05/05 12:00 a.m.•3 views

PT-2022-10727

Name of the Vulnerable Software and Affected Versions Eclipse CycloneDDS versions prior to 0.8.0 Description The issue is related to a write-what-where condition that may allow an attacker to write arbitrary values in the XML parser. This could potentially be exploited by an attacker...

9.8CVSS0.02146EPSS
SaveExploits0References10
RedHat Linux
RedHat Linux
•added 2022/04/26 9:15 p.m.•27 views

mariadb: Crash caused by mishandling of a pushdown from a HAVING clause to a WHERE clause

MariaDB before 10.6.2 allows an application crash because of mishandling of a pushdown from a HAVING clause to a WHERE clause...

5.5CVSS7.4AI score0.00387EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2022/04/26 5:34 p.m.•11 views

mariadb: Crash caused by mishandling of a pushdown from a HAVING clause to a WHERE clause

MariaDB before 10.6.2 allows an application crash because of mishandling of a pushdown from a HAVING clause to a WHERE clause...

5.5CVSS7.4AI score0.00387EPSS
SaveExploits1References4
Rows per page
Query Builder