Lucene search
+L

971 matches found

OSV
OSV
•added 2021/09/30 5:11 p.m.•78 views

GHSA-M7H5-FJJQ-559F SQL Injection in topthink/thinkphp

ThinkPHP v3.2.3 and below contains a SQL injection vulnerability which is triggered when the array is not passed to the "where" and "query" methods...

9.8CVSS9.8AI score0.01807EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2021/09/30 5:11 p.m.•69 views

SQL Injection in topthink/thinkphp

ThinkPHP v3.2.3 and below contains a SQL injection vulnerability which is triggered when the array is not passed to the "where" and "query" methods...

9.8CVSS9.7AI score0.01807EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2021/09/28 11:15 p.m.•30 views

CVE-2020-20120

ThinkPHP v3.2.3 and below contains a SQL injection vulnerability which is triggered when the array is not passed to the "where" and "query" methods...

9.8CVSS9.8AI score
SaveExploits0References1
Prion
Prion
•added 2021/09/28 11:15 p.m.•40 views

Sql injection

ThinkPHP v3.2.3 and below contains a SQL injection vulnerability which is triggered when the array is not passed to the "where" and "query" methods...

7.5CVSS9.7AI score0.01807EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/28 12:00 a.m.•10 views

CVE-2020-20120: Improper Neutralization of Special Elements used in an SQL Command

ThinkPHP v3.2.3 and below contains a SQL injection vulnerability which is triggered when the array is not passed to the "where" and "query" methods...

9.8CVSS5.9AI score0.01807EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/09/28 12:00 a.m.•3 views

PT-2021-10431

Name of the Vulnerable Software and Affected Versions: ThinkPHP versions 3.2.3 and below Description: The issue is a SQL injection vulnerability. It occurs when the array is not passed to the where and query methods. Recommendations: For ThinkPHP versions 3.2.3 and below, update to a version abov...

9.8CVSS0.01807EPSS
SaveExploits1References7
OSV
OSV
•added 2021/09/01 3:15 p.m.•34 views

CVE-2021-36057

XMP Toolkit SDK version 2020.1 and earlier is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of th...

3.3CVSS6.2AI score
SaveExploits0References3
OSV
OSV
•added 2021/09/01 3:15 p.m.•6 views

DEBIAN-CVE-2021-36057

XMP Toolkit SDK version 2020.1 and earlier is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of th...

3.3CVSS6.5AI score0.0062EPSS
SaveExploits0References1
NVD
NVD
•added 2021/09/01 3:15 p.m.•28 views

CVE-2021-36057

XMP Toolkit SDK version 2020.1 and earlier is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of th...

4CVSS0.0062EPSS
SaveExploits0References3
OSV
OSV
•added 2021/09/01 3:15 p.m.•14 views

UBUNTU-CVE-2021-36057

XMP Toolkit SDK version 2020.1 and earlier is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of th...

4CVSS6.7AI score0.0062EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2021/09/01 3:15 p.m.•42 views

CVE-2021-36057

XMP Toolkit SDK version 2020.1 and earlier is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of th...

4CVSS6.7AI score0.0062EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2021/09/01 2:33 p.m.•45 views

CVE-2021-36057 XMP Toolkit SDK Write-What-Where Condition Could Lead To Local Application Denial Of Service

XMP Toolkit SDK version 2020.1 and earlier is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of th...

4CVSS5.4AI score0.0062EPSS
SaveExploits0References2
CVE
CVE
•added 2021/09/01 2:33 p.m.•91 views

CVE-2021-36057

CVE-2021-36057 affects the XMP Toolkit SDK 2020.1 and earlier. The vulnerability is a write-what-where condition during the application’s memory allocation, which can cause mismatches in memory management and lead to local denial of service in the context of the current user. The issue is confirm...

4CVSS3.7AI score0.0062EPSS
SaveExploits0References3Affected Software1
Mend
Mend
•added 2021/09/01 2:33 p.m.•1 views

CVE-2021-36057

XMP Toolkit SDK version 2020.1 and earlier is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of th...

5.1CVSS0.0062EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2021/09/01 2:33 p.m.•47 views

CVE-2021-36057

XMP Toolkit SDK version 2020.1 and earlier is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of th...

4CVSS5.2AI score0.0062EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/01 12:00 a.m.•4 views

CVE-2021-36057: Write-what-where Condition

XMP Toolkit SDK version 2020.1 and earlier is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of th...

4CVSS7.2AI score0.0062EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/08/17 12:00 a.m.•13 views

PT-2021-4888 · Adobe +2 · Xmp Toolkit Sdk +2

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2020.1 and earlier Description: The issue is related to a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become...

9.3CVSS8.1AI score0.05785EPSS
SaveExploits2References65
Tenable Nessus
Tenable Nessus
•added 2021/08/10 12:00 a.m.•39 views

Schneider-electric Unity Write-what-where Condition

A CWE-123: Write-what-where Condition vulnerability exists in EcoStruxure™ Control Expert all versions and Unity Pro former name of EcoStruxure™ Control Expert all versions, that could cause a crash of the software or unexpected code execution when opening a malicious file in EcoStruxure™ Control...

6.8CVSS3.8AI score0.01447EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/06/23 12:00 a.m.•16 views

PT-2021-7932 · Mariadb +6 · Mariadb +7

Name of the Vulnerable Software and Affected Versions: MariaDB versions prior to 10.6.2 Description: The issue is related to the mishandling of a pushdown from a HAVING clause to a WHERE clause, which can cause an application crash. This can be exploited by an attacker to disrupt service...

9CVSS6.7AI score0.73188EPSS
SaveExploits57References304
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/06 12:00 a.m.•4 views

CVE-2021-1520: Write-what-where Condition

A vulnerability in the internal message processing of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, local attacker to run arbitrary commands with root privileges on the underlying operating system OS. This vulnerability exists because an interna...

7.2CVSS6AI score0.0029EPSS
SaveExploits1References2
Rows per page
Query Builder