Lucene search
+L

280 matches found

Microsoft Secure
Microsoft Secure
•added 2023/02/21 5:00 p.m.•32 views

Microsoft Defender for Office 365 named Best Email Security Service of 2023 by SE Labs

In todays world where hybrid and remote work are on the rise, and companies rely on email now more than ever, phishing remains one of the most prominent and sophisticated techniques that malicious actors utilize to attack organizations and gain access to their most sensitive information...

7AI score
SaveExploits0
SUSE CVE
SUSE CVE
•added 2023/02/15 5:54 a.m.•15 views

SUSE CVE-2011-0468

The aaabase package before 11.3-8.9.1 in SUSE openSUSE 11.3, and before 11.4-54.62.1 in openSUSE 11.4, allows local users to gain privileges via shell metacharacters in a filename, related to tab expansion...

6.9CVSS7.1AI score0.00326EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2022/11/29 9:56 p.m.•77 views

CVE-2022-45931

A SQL injection issue was discovered in the AAA package of OpenDaylight. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/UserStore.java deleteUser function is affected when the API interface /auth/v1/users/ is used. This may allow a malicious user to execute arbitrary sql...

6.8CVSS3.5AI score0.00589EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2022/11/29 9:56 p.m.•52 views

CVE-2022-45932

A SQL injection issue was discovered in the AAA package of OpenDaylight. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/RoleStore.java deleteRole function is affected when the API interface /auth/v1/roles/ is used. This may allow a malicious user to execute arbitrary sql...

6.8CVSS3.4AI score0.00639EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2022/11/29 9:26 p.m.•50 views

CVE-2022-45930

A SQL injection issue was discovered in the AAA package of OpenDaylight. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/DomainStore.java deleteDomain function is affected for the /auth/v1/domains/ API interface. This may allow a malicious user to execute arbitrary sql...

6.8CVSS3.5AI score0.00733EPSS
SaveExploits1References5
Veracode
Veracode
•added 2022/11/28 6:39 a.m.•37 views

SQL Injection

org.opendaylight.aaa:aaa-idm-store-h2 is vulnerable to SQL Injection attacks. A specifically crafted attack statement through the deleteRole function in RoleStore.java allows a malicious user to inject and execute arbitrary SQL queries on the target system, when the API interface /auth/v1/roles/ ...

7.5CVSS8.2AI score0.00639EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
•added 2022/11/28 5:56 a.m.•35 views

SQL Injection

org.opendaylight.aaa:aaa-idm-store-h2 is vulnerable to SQL Injection attacks. A specifically crafted attack statement through the deleteUser function in UserStore.java allows a malicious user to inject and execute arbitrary SQL queries on the target system, when the /auth/v1/users/ API interface ...

7.5CVSS8.2AI score0.00589EPSS
SaveExploits0References3Affected Software1
Openbugbounty
Openbugbounty
•added 2022/11/27 5:44 p.m.•19 views

aaa-co.net Cross Site Scripting vulnerability OBB-3074544

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
NVD
NVD
•added 2022/11/27 3:15 a.m.•39 views

CVE-2022-45932

A SQL injection issue was discovered in AAA in OpenDaylight ODL before 0.16.5. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/RoleStore.java deleteRole function is affected when the API interface /auth/v1/roles/ is used...

7.5CVSS0.00639EPSS
SaveExploits1References2
NVD
NVD
•added 2022/11/27 3:15 a.m.•36 views

CVE-2022-45931

A SQL injection issue was discovered in AAA in OpenDaylight ODL before 0.16.5. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/UserStore.java deleteUser function is affected when the API interface /auth/v1/users/ is used...

7.5CVSS0.00589EPSS
SaveExploits0References2
NVD
NVD
•added 2022/11/27 3:15 a.m.•35 views

CVE-2022-45930

A SQL injection issue was discovered in AAA in OpenDaylight ODL before 0.16.5. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/DomainStore.java deleteDomain function is affected for the /auth/v1/domains/ API interface...

7.5CVSS0.00733EPSS
SaveExploits1References2
Prion
Prion
•added 2022/11/27 3:15 a.m.•35 views

Sql injection

A SQL injection issue was discovered in AAA in OpenDaylight ODL before 0.16.5. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/UserStore.java deleteUser function is affected when the API interface /auth/v1/users/ is used...

5CVSS7.9AI score0.00589EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/27 12:00 a.m.•6 views

CVE-2022-45932: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection issue was discovered in AAA in OpenDaylight ODL before 0.16.5. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/RoleStore.java deleteRole function is affected when the API interface /auth/v1/roles/ is used...

7.5CVSS5.8AI score0.00639EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/11/27 12:00 a.m.•48 views

CVE-2022-45932

A SQL injection issue was discovered in AAA in OpenDaylight ODL before 0.16.5. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/RoleStore.java deleteRole function is affected when the API interface /auth/v1/roles/ is used...

8.2AI score0.00639EPSS
SaveExploits1References2
CVE
CVE
•added 2022/11/27 12:00 a.m.•90 views

CVE-2022-45930

OpenDaylight ODL prior to 0.16.5 is affected by a SQL injection in the AAA domain management path. Specifically, the deleteDomain function in DomainStore.java (aaa-idm-store-h2) handles /auth/v1/domains/ in a way that can allow arbitrary SQL execution. This is caused by the SQL construction/handl...

7.5CVSS7.9AI score0.00733EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/11/27 12:00 a.m.•50 views

CVE-2022-45930

A SQL injection issue was discovered in AAA in OpenDaylight ODL before 0.16.5. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/DomainStore.java deleteDomain function is affected for the /auth/v1/domains/ API interface...

8.2AI score0.00733EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/11/27 12:00 a.m.•49 views

CVE-2022-45931

A SQL injection issue was discovered in AAA in OpenDaylight ODL before 0.16.5. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/UserStore.java deleteUser function is affected when the API interface /auth/v1/users/ is used...

8.2AI score0.00589EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/27 12:00 a.m.•3 views

CVE-2022-45931: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection issue was discovered in AAA in OpenDaylight ODL before 0.16.5. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/UserStore.java deleteUser function is affected when the API interface /auth/v1/users/ is used...

7.5CVSS5.8AI score0.00589EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/27 12:00 a.m.•1 views

CVE-2022-45930: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection issue was discovered in AAA in OpenDaylight ODL before 0.16.5. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/DomainStore.java deleteDomain function is affected for the /auth/v1/domains/ API interface...

7.5CVSS5.8AI score0.00733EPSS
SaveExploits1References3
CVE
CVE
•added 2022/11/27 12:00 a.m.•99 views

CVE-2022-45931

Summary: CVE-2022-45931 affects the AAA component in OpenDaylight (ODL) prior to 0.16.5. The vulnerability resides in the deleteUser function of UserStore.java within aaa-idm-store-h2, exploitable via the /auth/v1/users/ API interface. The issue is a SQL injection that could allow a malicious use...

7.5CVSS7.9AI score0.00589EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder