Lucene search
+L

13420 matches found

Check Point Advisories
Check Point Advisories
•added 2016/01/26 12:00 a.m.•35 views

WordPress WPML Plugin SQL Injection (CVE-2015-2314)

An SQL injection vulnerability exists in the WPML plugin for WordPress, allowing remote attackers to execute arbitrary SQL commands...

7.5CVSS7.2AI score0.07069EPSS
SaveExploits2
Check Point Advisories
Check Point Advisories
•added 2016/01/25 12:00 a.m.•35 views

WordPress Webdorado Spider Event Calendar Plugin SQL Injection (CVE-2015-2196)

An SQL injection vulnerability exists in Spider Event Calendar 1.4.9 for WordPress allowing remote attackers to execute arbitrary SQL commands...

7.5CVSS6.8AI score0.10853EPSS
SaveExploits2
osv_mgasa
osv_mgasa
•added 2016/01/20 5:53 p.m.•17 views

MGASA-2016-0025 Updated cacti packages fix security vulnerability

Several SQL injection vulnerabilities have been discovered in Cacti. Specially crafted input can be used by an attacker in the rraid value of the graph.php script to execute arbitrary SQL commands on the database CVE-2015-8369...

8.8CVSS9.4AI score0.02319EPSS
SaveExploits7References5
Positive Technologies
Positive Technologies
•added 2016/01/19 12:00 a.m.•3 views

PT-2016-1064

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 11.2.0.4 through 12.1.0.2 Description The issue is related to errors in the code of the Database Vault component in Oracle Database systems. It may allow a remote attacker to modify, add, or delete data by...

4CVSS0.01306EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2016/01/19 12:00 a.m.•19 views

Cisco Unified Communications Manager SQL Injection

The vulnerability of the Cisco Unified Communications Manager IP telephony management system is related to the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands using a specially crafted URL...

4CVSS7.1AI score0.01208EPSS
SaveExploits0References2
NVD
NVD
•added 2016/01/15 3:59 a.m.•31 views

CVE-2015-3947

SQL injection vulnerability in Advantech WebAccess before 8.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

8.1CVSS8.6AI score0.01689EPSS
SaveExploits0References1
Prion
Prion
•added 2016/01/15 3:59 a.m.•29 views

Sql injection

SQL injection vulnerability in Advantech WebAccess before 8.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

6.5CVSS8.4AI score0.01689EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2016/01/15 2:00 a.m.•46 views

CVE-2015-3947

SQL injection vulnerability in Advantech WebAccess before 8.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

8.2AI score0.01689EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/01/15 12:00 a.m.•6 views

CVE-2015-3947: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Advantech WebAccess before 8.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

8.1CVSS8AI score0.01689EPSS
SaveExploits0References2
Mend
Mend
•added 2016/01/12 8:00 p.m.•5 views

CVE-2015-8769

SQL injection vulnerability in Joomla! 3.x before 3.4.7 allows attackers to execute arbitrary SQL commands via unspecified vectors...

7.5CVSS0.01138EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2016/01/12 12:00 a.m.•4 views

PT-2016-4010

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 3.4.7 Description A SQL injection issue allows attackers to execute arbitrary SQL commands. Recommendations For versions prior to 3.4.7, update to version 3.4.7 or later to resolve the issue...

7.5CVSS0.01138EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/01/12 12:00 a.m.•11 views

CVE-2015-8769: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Joomla! 3.x before 3.4.7 allows attackers to execute arbitrary SQL commands via unspecified vectors...

7.5CVSS7.7AI score0.01138EPSS
SaveExploits0References2
NVD
NVD
•added 2016/01/08 2:59 a.m.•26 views

CVE-2015-6433

SQL injection vulnerability in Cisco Unified Communications Manager 11.00.98000.225 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCut66767...

6.5CVSS6.8AI score0.01208EPSS
SaveExploits0References2
Prion
Prion
•added 2016/01/08 2:59 a.m.•23 views

Sql injection

SQL injection vulnerability in Cisco Unified Communications Manager 11.00.98000.225 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCut66767...

4CVSS8.4AI score0.01208EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2016/01/08 2:00 a.m.•83 views

CVE-2015-6433

CVE-2015-6433 describes an SQL injection vulnerability in Cisco Unified Communications Manager 11.0(0.98000.225). An authenticated remote user can exploit a crafted URL to execute arbitrary SQL commands on the backend. The issue stems from improper validation of user-supplied input in SQL queries...

6.5CVSS6.8AI score0.01208EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2016/01/08 12:00 a.m.•5 views

PT-2016-1016

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager version 11.00.98000.225 Description The issue is related to a lack of protection in the SQL query structure, allowing remote authenticated users to execute arbitrary SQL commands via a crafted URL. This can...

6.5CVSS0.01208EPSS
SaveExploits0References4
NVD
NVD
•added 2016/01/03 5:59 a.m.•25 views

CVE-2015-5023

SQL injection vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

6.5CVSS6AI score0.00707EPSS
SaveExploits0References1
Prion
Prion
•added 2016/01/03 5:59 a.m.•26 views

Sql injection

SQL injection vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

6.5CVSS8.2AI score0.00707EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2016/01/03 12:00 a.m.•6 views

PT-2016-3658

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management version 6.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For IBM Curam Social Program Management version 6.1, update to version 6.1.1 to resolve...

6.5CVSS0.00707EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/01/03 12:00 a.m.•9 views

CVE-2015-5023: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

6.5CVSS6.4AI score0.00707EPSS
SaveExploits0References2
Rows per page
Query Builder