Lucene search
+L

13420 matches found

Cvelist
Cvelist
•added 2015/06/02 2:00 p.m.•39 views

CVE-2015-4159

SQL injection vulnerability in SAP HANA Web-based Development Workbench allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Notes 2153892...

8.4AI score0.01236EPSS
SaveExploits1References2
CVE
CVE
•added 2015/06/02 2:00 p.m.•63 views

CVE-2015-4159

The CVE-2015-4159 entry concerns SAP HANA Web-based Development Workbench with an SQL injection vulnerability. The affected component is the Web-based Development Workbench in SAP HANA, where remote attackers can submit specially crafted SQL commands to manipulate or obtain data. The root cause i...

7.5CVSS8.7AI score0.01236EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2015/06/02 12:00 a.m.•8 views

PT-2015-6440

Name of the Vulnerable Software and Affected Versions SAP ASE Database Platform affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations At the moment, there is no information about a newer version that contains a...

7.5CVSS6.5AI score0.01236EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2015/06/02 12:00 a.m.•5 views

PT-2015-6439

Name of the Vulnerable Software and Affected Versions SAP HANA Web-based Development Workbench affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations At the moment, there is no information about a newer version...

7.5CVSS6.5AI score0.01236EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/06/02 12:00 a.m.•11 views

CVE-2015-4159: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SAP HANA Web-based Development Workbench allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Notes 2153892...

7.5CVSS6.4AI score0.01236EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/06/02 12:00 a.m.•9 views

CVE-2015-4160: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SAP ASE Database Platform allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Notes: 2152278...

7.5CVSS6.4AI score0.01236EPSS
SaveExploits1References2
NVD
NVD
•added 2015/05/29 3:59 p.m.•30 views

CVE-2015-0753

SQL injection vulnerability in Cisco Unified Email Interaction Manager EIM and Unified Web Interaction Manager WIM 9.02 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuu30028...

6.8CVSS8.4AI score0.01827EPSS
SaveExploits0References2
Prion
Prion
•added 2015/05/29 3:59 p.m.•25 views

Sql injection

SQL injection vulnerability in Cisco Unified Email Interaction Manager EIM and Unified Web Interaction Manager WIM 9.02 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuu30028...

6.8CVSS9.1AI score0.01827EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2015/05/29 2:59 p.m.•28 views

Sql injection

SQL injection vulnerability in related.php in Milw0rm Clone Script 1.0 allows remote attackers to execute arbitrary SQL commands via the program parameter...

7.5CVSS9AI score0.02464EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
•added 2015/05/29 2:00 p.m.•37 views

CVE-2015-4137

SQL injection vulnerability in related.php in Milw0rm Clone Script 1.0 allows remote attackers to execute arbitrary SQL commands via the program parameter...

8.4AI score0.02464EPSS
SaveExploits2References4
Positive Technologies
Positive Technologies
•added 2015/05/29 12:00 a.m.•7 views

PT-2015-6427

Name of the Vulnerable Software and Affected Versions Milw0rm Clone Script version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting a SQL injection vulnerability in the related.php file via the program parameter. Recommendations F...

7.5CVSS6.4AI score0.02464EPSS
SaveExploits2References5
Positive Technologies
Positive Technologies
•added 2015/05/29 12:00 a.m.•9 views

PT-2015-4862

Name of the Vulnerable Software and Affected Versions Cisco Unified Email Interaction Manager EIM and Unified Web Interaction Manager WIM version 9.02 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For version 9.02, update to a version...

6.8CVSS6.5AI score0.01827EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2015/05/28 2:00 p.m.•40 views

CVE-2015-1392

Multiple SQL injection vulnerabilities in Aruba Networks ClearPass Policy Manager CPPM before 6.4.5 allow remote administrators to execute arbitrary SQL commands via unspecified vectors...

8.5AI score0.00814EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2015/05/28 12:00 a.m.•10 views

PT-2015-5261

Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass Policy Manager versions prior to 6.4.5 Description The issue allows remote administrators to execute arbitrary SQL commands, potentially leading to unauthorized data access or modification. Recommendations For versions...

6.5CVSS6.5AI score0.00814EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/05/28 12:00 a.m.•15 views

CVE-2015-1392: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Aruba Networks ClearPass Policy Manager CPPM before 6.4.5 allow remote administrators to execute arbitrary SQL commands via unspecified vectors...

6.5CVSS6.4AI score0.00814EPSS
SaveExploits0References2
NVD
NVD
•added 2015/05/27 6:59 p.m.•40 views

CVE-2015-4066

Multiple SQL injection vulnerabilities in admin/handlers.php in the GigPress plugin before 2.3.9 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the 1 showartistid or 2 showvenueid parameter in an add action in the gigpress.php page to wp-admin/admin.php...

6.5CVSS7.5AI score0.04238EPSS
SaveExploits5References4
NVD
NVD
•added 2015/05/27 6:59 p.m.•39 views

CVE-2015-4064

SQL injection vulnerability in modules/module.ab-testing.php in the Landing Pages plugin before 1.8.5 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the post parameter in an edit delete-variation action to wp-admin/post.php...

6.5CVSS7.9AI score0.03825EPSS
SaveExploits5References4
NVD
NVD
•added 2015/05/27 6:59 p.m.•31 views

CVE-2015-4062

SQL injection vulnerability in includes/nspsearch.php in the NewStatPress plugin before 0.9.9 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the where1 parameter in the nspsearch page to wp-admin/admin.php...

6.5CVSS7.9AI score0.09292EPSS
SaveExploits6References4
Prion
Prion
•added 2015/05/27 6:59 p.m.•21 views

Sql injection

SQL injection vulnerability in includes/nspsearch.php in the NewStatPress plugin before 0.9.9 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the where1 parameter in the nspsearch page to wp-admin/admin.php...

6.5CVSS8.5AI score0.09292EPSS
SaveExploits6References4Affected Software1
Prion
Prion
•added 2015/05/27 6:59 p.m.•24 views

Sql injection

SQL injection vulnerability in modules/module.ab-testing.php in the Landing Pages plugin before 1.8.5 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the post parameter in an edit delete-variation action to wp-admin/post.php...

6.5CVSS8.5AI score0.03825EPSS
SaveExploits5References4Affected Software1
Rows per page
Query Builder