Lucene search
+L

248 matches found

CNNVD
CNNVD
added 2022/06/02 12:00 a.m.14 views

Car Rental Management System SQL注入漏洞

Car Rental Management System is a car rental management system. SQL injection vulnerability exists in Car Rental Management System, which can be exploited by attackers to view, add, modify or delete information in the back-end database...

7.2CVSS5.9AI score0.04563EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/06/02 12:00 a.m.14 views

Car Rental Management System SQL注入漏洞

Car Rental Management System is a car rental management system. SQL injection vulnerability exists in Car Rental Management System, which can be exploited by attackers to view, add, modify or delete information in the back-end database...

7.2CVSS5.9AI score0.04923EPSS
SaveExploits1References2
OSV
OSV
added 2022/04/14 3:15 p.m.17 views

CVE-2022-1258

A blind SQL injection vulnerability in the ePolicy Orchestrator ePO extension of MA prior to 5.7.6 can be exploited by an authenticated administrator on ePO to perform arbitrary SQL queries in the back-end database, potentially leading to command execution on the server...

7.2CVSS6AI score0.00996EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/04/14 3:15 p.m.10 views

CVE-2022-1258

A blind SQL injection vulnerability in the ePolicy Orchestrator ePO extension of MA prior to 5.7.6 can be exploited by an authenticated administrator on ePO to perform arbitrary SQL queries in the back-end database, potentially leading to command execution on the server...

8.4CVSS7.5AI score0.00996EPSS
SaveExploits0References2
Prion
Prion
added 2022/04/14 3:15 p.m.30 views

Sql injection

A blind SQL injection vulnerability in the ePolicy Orchestrator ePO extension of MA prior to 5.7.6 can be exploited by an authenticated administrator on ePO to perform arbitrary SQL queries in the back-end database, potentially leading to command execution on the server...

6CVSS7.3AI score0.00996EPSS
SaveExploits0References1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/04/06 7:27 p.m.81 views

Security Bulletin: Apache Log4j vulnerability

Summary Apache Log4j vulnerability Vulnerability Details CVEID: CVE-2022-23305 DESCRIPTION: Apache Log4j is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements to the JDBCAppender, which could allow the attacker to view, add, modify or delete information in...

9.8CVSS1.2AI score0.66537EPSS
SaveExploits1Affected Software1
CNNVD
CNNVD
added 2021/10/13 12:00 a.m.16 views

Proofpoint Insider Threat Management Server SQL注入漏洞

Proofpoint Insider Threat Management Server is a server-side application from Proofpoint, Inc. that is used to prevent malicious operations by enterprise insiders. A security vulnerability exists in Proofpoint Insider Threat Management Server that stems from incorrect input validation of the...

9.8CVSS8.8AI score0.00996EPSS
SaveExploits0References3
Prion
Prion
added 2021/10/06 5:15 p.m.30 views

Sql injection

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 203734...

7.5CVSS9.2AI score0.01134EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2021/09/17 12:00 a.m.67 views

SAP Business One SQL Injection Vulnerability

SAP Business One is a suite of enterprise management software from SAP, a German company. SAP Business One version 10.0 has a SQL injection vulnerability that stems from the lack of effective validation and escaping of SQL statements, which can be exploited by an attacker with business privileges...

4.3CVSS3.4AI score0.00652EPSS
SaveExploits0References1
Prion
Prion
added 2021/09/14 12:15 p.m.27 views

Information disclosure

SAP Business One allows an attacker with business privileges to execute crafted database queries, exposing the back-end database. Due to framework restrictions, only some information can be obtained...

4CVSS4.8AI score0.00652EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/09/14 11:24 a.m.43 views

CVE-2021-33688

SAP Business One allows an attacker with business privileges to execute crafted database queries, exposing the back-end database. Due to framework restrictions, only some information can be obtained...

5AI score0.00652EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/07/12 12:00 a.m.18 views

IBM InfoSphere Information Server SQL Injection Vulnerability

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. IBM InfoSphere Information Server has a security vulnerability that can be exploited by an attacker to view...

8.8CVSS6.3AI score0.00968EPSS
SaveExploits0References1
NVD
NVD
added 2021/07/09 5:15 p.m.31 views

CVE-2021-29730

IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 201164...

8.8CVSS0.00968EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/07/08 12:00 a.m.17 views

IBM InfoSphere Information Server SQL注入漏洞

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. IBM InfoSphere Information Server has a security vulnerability that can be exploited by an attacker to view...

8.8CVSS5.7AI score0.00968EPSS
SaveExploits0References5
OSV
OSV
added 2021/07/01 4:15 p.m.14 views

CVE-2020-4902

IBM Datacap Taskmaster Capture IBM Datacap Navigator 9.1.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 191045...

8.8CVSS6.8AI score0.00968EPSS
SaveExploits0References2
NVD
NVD
added 2021/05/24 2:15 p.m.32 views

CVE-2020-4990

IBM Security Guardium 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 192710...

8.8CVSS0.0112EPSS
SaveExploits0References2
OSV
OSV
added 2021/05/24 2:15 p.m.11 views

CVE-2020-4990

IBM Security Guardium 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 192710...

8.8CVSS7.2AI score0.0112EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/05/24 1:55 p.m.38 views

CVE-2020-4990

IBM Security Guardium 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 192710...

7.6CVSS8.6AI score0.0112EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/05/21 12:00 a.m.14 views

IBM Security Guardium SQL注入漏洞

IBM Security Guardium is a product of IBM IBM in the U.S. etc. IBM Security Guardium is a suite of platforms that provide data protection capabilities. github rd is a software application. github ic etc. are open source products. github ic is a software application. IBM Security Guardium suffers...

8.8CVSS7.8AI score0.0112EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2021/05/21 12:00 a.m.9 views

CVE-2020-4990

IBM Security Guardium 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 192710...

8.8CVSS7.9AI score0.0112EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder