Lucene search
+L

9280 matches found

Positive Technologies
Positive Technologies
•added 2026/02/18 12:00 a.m.•19 views

PT-2026-20925

CVE-2026-2570 - Adobe Flash Remote Code Execution CVE ID : CVE-2026-2570 Published : Feb. 17, 2026, 11:16 p.m. | 56 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this...

5.7AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/17 7:35 p.m.•9 views

CVE-2008-4608

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2008. Notes: none...

5.5AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/17 7:35 p.m.•6 views

CVE-2008-4607

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2008. Notes: none...

5.5AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/17 3:33 a.m.•14 views

CVE-2007-1208

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2007. Notes: none...

5.5AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/17 3:33 a.m.•12 views

CVE-2007-1207

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2007. Notes: none...

5.5AI score
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/02/17 12:00 a.m.•12 views

CVE-2025-70828

An issue in Datart v1.0.0-rc.3 allows attackers to execute arbitrary code via the url parameter in the JDBC configuration...

6.6AI score0.00497EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2026/02/16 5:31 p.m.•17 views

CVE-2026-1783

REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...

5.5AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/16 12:00 a.m.•19 views

PT-2026-20285

CVE-2026-1783 - Oracle WebLogic Server Remote Code Execution Vulnerability CVE ID : CVE-2026-1783 Published : Feb. 16, 2026, 4:19 p.m. | 1 hour, 47 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references...

5.8AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/13 6:10 p.m.•41 views

CVE-2026-21878 BACnet Stack Improperly Limits Pathnames to a Restricted Directory

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0.rc3, a vulnerability has been discovered in BACnet Stack's file writing functionality where there is no validation of user-provided file paths, allowing attackers to write files to arbitrary...

7.5CVSS0.00378EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2026/02/13 12:00 a.m.•20 views

BACnet Stack 路径遍历漏洞

BACnet Stack is an open-source protocol stack for BACnet, suitable for embedded systems, Linux, MacOS, BSD, and Windows. Versions of BACnet Stack prior to 1.5.0.rc3 contained a path traversal vulnerability. This vulnerability stemmed from the lack of validation for the file writing function,...

7.5CVSS5.9AI score0.00378EPSS
SaveExploits1References2
NVD
NVD
•added 2026/02/07 12:15 a.m.•14 views

CVE-2020-37154

eLection 2.0 contains an authenticated SQL injection vulnerability in the candidate management endpoint that allows attackers to manipulate database queries through the 'id' parameter. Attackers can leverage SQLMap to exploit the vulnerability, potentially gaining remote code execution by uploadi...

7.1CVSS0.00505EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/02/07 12:00 a.m.•18 views

eLection SQL注入漏洞

eLection is an election content management system developed by fauzantrif. Version 2.0 of eLection has a SQL injection vulnerability; this vulnerability stems from the lack of parameter id validation in the candidate management endpoint, which may lead to SQL injection attacks...

7.1CVSS5.8AI score0.00505EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/07 12:00 a.m.•2 views

CVE-2020-37154: Improper Neutralization of Special Elements used in an SQL Command

eLection 2.0 contains an authenticated SQL injection vulnerability in the candidate management endpoint that allows attackers to manipulate database queries through the 'id' parameter. Attackers can leverage SQLMap to exploit the vulnerability, potentially gaining remote code execution by uploadi...

7.1CVSS6.3AI score0.00505EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/02/06 11:14 p.m.•6 views

CVE-2020-37154 eLection 2.0 - 'id' SQL Injection

eLection 2.0 contains an authenticated SQL injection vulnerability in the candidate management endpoint that allows attackers to manipulate database queries through the 'id' parameter. Attackers can leverage SQLMap to exploit the vulnerability, potentially gaining remote code execution by uploadi...

7.1CVSS6.3AI score0.00505EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/02/06 11:14 p.m.•48 views

CVE-2020-37154 eLection 2.0 - 'id' SQL Injection

eLection 2.0 contains an authenticated SQL injection vulnerability in the candidate management endpoint that allows attackers to manipulate database queries through the 'id' parameter. Attackers can leverage SQLMap to exploit the vulnerability, potentially gaining remote code execution by uploadi...

7.1CVSS0.00505EPSS
SaveExploits0References4
CVE
CVE
•added 2026/02/06 11:14 p.m.•25 views

CVE-2020-37154

CVE-2020-37154 affects eLection 2.0, with an authenticated SQL injection in the candidate management endpoint. The vulnerability allows manipulation of database queries through the 'id' parameter and can be leveraged with SQLMap; authorship notes suggest potential remote code execution via upload...

7.1CVSS6.3AI score0.00505EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/02/06 11:14 p.m.•17 views

CVE-2020-37154

eLection 2.0 contains an authenticated SQL injection vulnerability in the candidate management endpoint that allows attackers to manipulate database queries through the 'id' parameter. Attackers can leverage SQLMap to exploit the vulnerability, potentially gaining remote code execution by uploadi...

7.1CVSS6.6AI score0.00505EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2026/02/06 12:00 a.m.•26 views

PT-2026-6822

Name of the Vulnerable Software and Affected Versions eLection version 2.0 Description The software contains an authenticated SQL injection issue in the candidate management endpoint. Attackers can manipulate database queries through the id parameter. Exploitation can be performed using SQLMap,...

7.1CVSS6.5AI score0.00505EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/02/02 5:30 p.m.•8 views

CVE-2026-0921

REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...

5.4AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/02 12:00 a.m.•12 views

PT-2026-6026

CVE-2026-0921 - Apache HTTP Server Remote Code Execution CVE ID : CVE-2026-0921 Published : Feb. 2, 2026, 5:16 p.m. | 1 hour, 24 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions i...

5.7AI score
SaveExploits0References1
Rows per page
Query Builder