Lucene search
+L

108 matches found

osv_cve
osv_cve
•added 2019/10/31 5:15 p.m.•26 views

CVE-2019-18464

In Progress MOVEit Transfer 10.2 before 10.2.6 2018.3, 11.0 before 11.0.4 2019.0.4, and 11.1 before 11.1.3 2019.1.3, multiple SQL Injection vulnerabilities have been found in the REST API that could allow an unauthenticated attacker to gain unauthorized access to the database. Depending on the...

9.8CVSS5.8AI score0.0195EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2019/10/31 4:25 p.m.•51 views

CVE-2019-18464

In Progress MOVEit Transfer 10.2 before 10.2.6 2018.3, 11.0 before 11.0.4 2019.0.4, and 11.1 before 11.1.3 2019.1.3, multiple SQL Injection vulnerabilities have been found in the REST API that could allow an unauthenticated attacker to gain unauthorized access to the database. Depending on the...

10AI score0.0195EPSS
SaveExploits0References4
CVE
CVE
•added 2019/10/31 4:25 p.m.•78 views

CVE-2019-18464

CVE-2019-18464 affects Progress MOVEit Transfer REST API across the affected branches: 10.2 before 10.2.6 (2018.3), 11.0 before 11.0.4 (2019.0.4), and 11.1 before 11.1.3 (2019.1.3). The vulnerability is SQL Injection in the REST API that can allow an unauthenticated attacker to gain unauthorized ...

9.8CVSS10AI score0.0195EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/31 12:00 a.m.•8 views

CVE-2019-18464: Improper Neutralization of Special Elements used in an SQL Command

In Progress MOVEit Transfer 10.2 before 10.2.6 2018.3, 11.0 before 11.0.4 2019.0.4, and 11.1 before 11.1.3 2019.1.3, multiple SQL Injection vulnerabilities have been found in the REST API that could allow an unauthenticated attacker to gain unauthorized access to the database. Depending on the...

9.8CVSS8.1AI score0.0195EPSS
SaveExploits0References2
Prion
Prion
•added 2019/09/24 3:15 p.m.•21 views

Sql injection

MOVEit.DMZ.WebApi.dll in Progress MOVEit Transfer 2018 SP2 before 10.2.4, 2019 before 11.0.2, and 2019.1 before 11.1.1 allows an unauthenticated attacker to gain unauthorized access to the database. Depending on the database engine being used MySQL, Microsoft SQL Server, or Azure SQL, an attacker...

7.5CVSS9.3AI score0.05187EPSS
SaveExploits4References5Affected Software1
Imperva Blog
Imperva Blog
•added 2018/09/18 9:33 p.m.•76 views

Microsoft and Imperva Collaboration Bolsters Data Compliance and Security Capabilities

This article explains how Imperva SecureSphere V13.2 has leveraged the latest Microsoft EventHub enhancements to help customers maintain compliance and security controls as regulated or sensitive data is migrated to Azure SQL database instances. Database as a Service Benefits Platform as a Servic...

0.5AI score
SaveExploits0
Imperva Blog
Imperva Blog
•added 2018/03/12 6:30 p.m.•155 views

RDaaS Security: How to Apply Database Audit and Monitoring Controls

As you move databases to cloud database platforms, data security and compliance requirements move along with it. This article explains how you can apply database audit and monitoring controls when migrating your database to cloud services, including the following: Introduction to RDaaS Benefits o...

7.1AI score
SaveExploits0
Microsoft Secure
Microsoft Secure
•added 2018/02/26 5:00 p.m.•68 views

Best practices for securely moving workloads to Microsoft Azure

Azure is Microsofts cloud computing environment. It offers customers three primary service delivery models including infrastructure as a service IaaS, platform as a service PaaS, and software as a service SaaS. Adopting cloud technologies requires a shared responsibility model for security, with...

7.3AI score
SaveExploits0
Rows per page
Query Builder