Lucene search
K

48 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2014-8136

Malware in sbrugna...

7.5CVSS6.4AI score0.00806EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-23037

Malicious code in bioql PyPI...

8.1CVSS6.3AI score0.00523EPSS
Exploits1References3
Veracode
Veracode
added 2025/08/13 12:25 p.m.3 views

SQL Injection

bacula-web/bacula-web is vulnerable to SQL Injection. The vulnerability is due to improper input sanitization in HTTP GET requests, which allows an attacker to execute arbitrary code remotely...

8.1CVSS8.4AI score0.00523EPSS
Exploits1References4Affected Software1
RedhatCVE
RedhatCVE
added 2025/07/31 12:33 a.m.4 views

CVE-2025-45346

SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request...

8.1CVSS9.1AI score0.00523EPSS
Exploits1References1
GithubExploit
GithubExploit
added 2025/07/30 8:32 p.m.200 views

Exploit for SQL Injection in Bacula Bacula-Web

CVE-2025-45346 – Bacula-Web Time-Based SQL Injection PostgreS...

8.1CVSS7.5AI score0.00523EPSS
Exploits1
OSV
OSV
added 2025/07/29 9:30 p.m.4 views

GHSA-HQ25-VP56-QR86 Bacula-web SQL Injection Vulnerability

SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request...

8.1CVSS9AI score0.00523EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2025/07/29 9:30 p.m.7 views

Bacula-web SQL Injection Vulnerability

SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request...

8.1CVSS8.1AI score0.00523EPSS
Exploits1References4Affected Software1
Snyk
Snyk
added 2025/07/29 8:43 p.m.1 views

SQL Injection

Overview bacula-web/bacula-web is a The open source web based reporting and monitoring tool for Bacula. Affected versions of this package are vulnerable to SQL Injection via the getJobFiles function in the application/Table/JobFileTable.php . An attacker can execute arbitrary code on the server b...

8.3CVSS8.6AI score0.00523EPSS
Exploits1References2
NVD
NVD
added 2025/07/29 8:15 p.m.6 views

CVE-2025-45346

SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request...

8.1CVSS0.00523EPSS
Exploits1References2
OSV
OSV
added 2025/07/29 8:15 p.m.3 views

CVE-2025-45346

SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request...

8.1CVSS9AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/07/29 12:0 a.m.3 views

PT-2025-31257 · Unknown · Bacula-Web

Name of the Vulnerable Software and Affected Versions: Bacula-web versions prior to 9.7.1 Description: A SQL Injection issue exists in Bacula-web. A remote attacker can execute arbitrary code via a crafted HTTP GET request. Recommendations: Update Bacula-web to version 9.7.1 or later...

8.1CVSS8.6AI score0.00523EPSS
Exploits1References9
CNNVD
CNNVD
added 2025/07/29 12:0 a.m.1 views

Bacula-Web 安全漏洞

Bacula-Web is a web reporting and monitoring tool from Bacula-Web open source. A security vulnerability exists in Bacula-Web versions prior to 9.7.1, which stems from improper handling of HTTP GET requests and could lead to SQL injection attacks...

8.1CVSS7.3AI score0.00523EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2025/07/29 12:0 a.m.3 views

CVE-2025-45346

SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request...

8.3AI score0.00523EPSS
Exploits1References2
CVE
CVE
added 2025/07/29 12:0 a.m.24 views

CVE-2025-45346

CVE-2025-45346 affects Bacula-web prior to version 9.7.1. The vulnerability is an SQL Injection that can be triggered remotely via a crafted HTTP GET request, potentially allowing arbitrary code execution on affected systems. Public materials in connected documents confirm the issue and point to ...

8.1CVSS9AI score0.00523EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2025/07/29 12:0 a.m.6 views

CVE-2025-45346

SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request...

0.00523EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/05/22 6:28 a.m.5 views

CVE-2014-8295

SQL injection vulnerability in joblogs.php in Bacula-Web 5.2.10 allows remote attackers to execute arbitrary SQL commands via the jobid parameter...

7.5CVSS8.8AI score0.00806EPSS
Exploits1References1
Github Security Blog
Github Security Blog
added 2022/05/14 2:56 a.m.19 views

Bacula-web SQL Injection Vulnerabilities

Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access the Bacula database and, depending on configuration, escalate privileges on the server...

9.8CVSS8.1AI score0.222EPSS
Exploits5References6Affected Software1
OSV
OSV
added 2022/05/14 2:56 a.m.9 views

GHSA-FV4M-5J2C-787R Bacula-web SQL Injection Vulnerabilities

Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access the Bacula database and, depending on configuration, escalate privileges on the server...

9.8CVSS10AI score0.222EPSS
Exploits5References6
Tenable Nessus
Tenable Nessus
added 2021/10/06 12:0 a.m.40 views

FreeBSD : Bacula-Web -- Multiple Vulnerabilities (f05dbd1f-2599-11ec-91be-001b217b3468)

Bacula-Web reports : Address Smarty CVE %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2021 Jacques Vidrine and contributors Redistribution and use in source VuXML and...

9.8CVSS6.2AI score0.7558EPSS
Exploits2References4
FreeBSD
FreeBSD
added 2021/07/11 12:0 a.m.34 views

Bacula-Web -- Multiple Vulnerabilities

Bacula-Web reports: Address Smarty CVE...

9.8CVSS1.8AI score0.7558EPSS
Exploits2References1
Rows per page
Query Builder