Lucene search
+L

72 matches found

BDU FSTEC
BDU FSTEC
added 2019/01/28 12:00 a.m.17 views

Vulnerability of the sub-component’s overview page/report rendering in the Oracle E-Business Intelligence component of the Oracle E-Business Suite. This component is used for automating business processes within enterprises. It allows attackers to gain access to modify, add, or delete data.

The vulnerability of the sub-component’s overview page/report rendering in Oracle E-Business Intelligence, a system for automating business processes within the Oracle E-Business Suite, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating...

8.2CVSS7.5AI score0.01953EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/28 12:00 a.m.14 views

The vulnerability of the User Interface sub-component of the Oracle Trade Management component in the Oracle E-Business Suite allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the User Interface component of the Oracle Trade Management component in the Oracle E-Business Suite is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to modify, add, or delete data...

8.2CVSS7.5AI score0.01953EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2018/11/20 12:00 a.m.14 views

Bakeshop Inventory System SQL Injection Vulnerability

Bakeshop Inventory System is a bakery inventory management system. A SQL injection vulnerability exists in Bakeshop Inventory System version 1.0. A remote attacker can use the login page to view, add, modify, or delete information in the back-end database...

9.8CVSS9.6AI score0.02542EPSS
SaveExploits5References1
BDU FSTEC
BDU FSTEC
added 2017/11/10 12:00 a.m.11 views

The vulnerability of the IBM Security Guardium information protection mechanism lies in its lack of protection for SQL query structures. This allows attackers to view, add, modify, or delete data.

The vulnerability of the IBM Security Guardium security tool relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to remotely access, view, add, modify, or delete data using specially crafted SQL statements...

9.8CVSS7.9AI score0.01605EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2017/10/24 6:33 p.m.45 views

Array data injection vulnerability in activerecord

SQL injection vulnerability in activerecord/lib/activerecord/connectionadapters/postgresql/cast.rb in Active Record in Ruby on Rails 4.0.x before 4.0.3, and 4.1.0.beta1, when PostgreSQL is used, allows remote attackers to execute "add data" SQL commands via vectors involving \ backslash character...

6.8CVSS7.9AI score0.01266EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/01/26 12:00 a.m.13 views

The vulnerability of the Solaris operating system, which allows a hacker to modify data

The vulnerability of the NDMP Backup Service component of the Solaris operating system is related to errors in the code. Exploiting this vulnerability could allow an attacker, operating locally, to gain access to modify, add, or delete data...

2.1CVSS7.2AI score0.0037EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2014/02/20 3:27 p.m.23 views

CVE-2014-0080

SQL injection vulnerability in activerecord/lib/activerecord/connectionadapters/postgresql/cast.rb in Active Record in Ruby on Rails 4.0.x before 4.0.3, and 4.1.0.beta1, when PostgreSQL is used, allows remote attackers to execute "add data" SQL commands via vectors involving \ backslash character...

6.8CVSS7.8AI score0.01266EPSS
SaveExploits0References2
Prion
Prion
added 2014/02/20 3:27 p.m.32 views

Sql injection

SQL injection vulnerability in activerecord/lib/activerecord/connectionadapters/postgresql/cast.rb in Active Record in Ruby on Rails 4.0.x before 4.0.3, and 4.1.0.beta1, when PostgreSQL is used, allows remote attackers to execute "add data" SQL commands via vectors involving \ backslash character...

6.8CVSS8.5AI score0.01266EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2014/02/20 11:00 a.m.90 views

CVE-2014-0080

SQL injection vulnerability in activerecord/lib/activerecord/connectionadapters/postgresql/cast.rb in Active Record in Ruby on Rails 4.0.x before 4.0.3, and 4.1.0.beta1, when PostgreSQL is used, allows remote attackers to execute "add data" SQL commands via vectors involving \ backslash character...

6.8CVSS7.9AI score0.01266EPSS
SaveExploits0
Cvelist
Cvelist
added 2014/02/20 11:00 a.m.39 views

CVE-2014-0080

SQL injection vulnerability in activerecord/lib/activerecord/connectionadapters/postgresql/cast.rb in Active Record in Ruby on Rails 4.0.x before 4.0.3, and 4.1.0.beta1, when PostgreSQL is used, allows remote attackers to execute "add data" SQL commands via vectors involving \ backslash character...

7.7AI score0.01266EPSS
SaveExploits0References2
RubySec
RubySec
added 2014/02/18 12:00 a.m.41 views

CVE-2014-0080 rubygem-activerecord: PostgreSQL array data injection vulnerability

SQL injection vulnerability in activerecord/lib/activerecord/connectionadapters/postgresql/cast.rb in Active Record in Ruby on Rails 4.0.x before 4.0.3, and 4.1.0.beta1, when PostgreSQL is used, allows remote attackers to execute "add data" SQL commands via vectors involving \ backslash character...

6.8CVSS7.9AI score0.01266EPSS
SaveExploits0References1Affected Software1
seebug.org
seebug.org
added 2006/08/19 12:00 a.m.13 views

ZZ:FlashChat <= 3.1 (adminlog) Remote File Incude Vulnerability

No description provided by source. ============================================================================================== ZZ:FlashChat = V3.1 adminlog Remote File Inclusion Exploit =============================================================================================== Critical Lev...

7.1AI score
SaveExploits0
Rows per page
Query Builder