Lucene search
+L

6710 matches found

BDU FSTEC
BDU FSTEC
•added 2021/12/20 12:00 a.m.•21 views

The vulnerability of the IBM QRadar SIEM system for event collection and analysis, related to authentication procedures that allow unauthorized access by attackers to protected information.

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

5.9CVSS6.2AI score0.01238EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2021/12/20 12:00 a.m.•18 views

The vulnerability of the IBM QRadar SIEM system for event collection and analysis, related to insufficient validation of incoming requests, allows a perpetrator to carry out an SSRF attack.

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to insufficient checking of incoming requests. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute an SSRF attack by sending specially crafted requests...

5.5CVSS5.9AI score0.00637EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2021/12/20 12:00 a.m.•17 views

The vulnerability of the IBM QRadar SIEM system for event collection and analysis, related to insufficiently secure data encryption, allows attackers to gain unauthorized access to protected information.

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to insufficiently secure data encryption. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

7.8CVSS6.5AI score0.00687EPSS
SaveExploits0References4
CNVD
CNVD
•added 2021/12/19 12:00 a.m.•92 views

MongoDB Server Denial of Service Vulnerability (CNVD-2021-101988)

Mongodb Server is an open source NoSQL database from Mongodb, Inc. The database provides collection-oriented storage, dynamic query, data replication and automatic failover, etc. A denial-of-service vulnerability exists in MongoDB Server, which can be exploited by an attacker with basic CRUD...

6.5CVSS2.9AI score0.0108EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/12/18 12:00 a.m.•65 views

WordPress Quotes Collection plugin SQL injection vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the erection of personal blog sites on PHP and MySQL servers. Quotes Collection Plugin is a WordPress open source application plugin. WordPress Quotes Collection Plugin has a S...

7.2CVSS3AI score0.01317EPSS
SaveExploits2References1
BDU FSTEC
BDU FSTEC
•added 2021/12/16 12:00 a.m.•17 views

The vulnerability of the IBM QRadar SIEM system for event collection and analysis, related to insufficient validation of incoming requests, allows a perpetrator to carry out an SSRF attack.

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to insufficient checking of incoming requests. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute an SSRF attack by sending specially crafted requests...

5.5CVSS5.9AI score0.00504EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2021/12/15 4:00 p.m.•11 views

CVE-2021-20330

An attacker with basic CRUD permissions on a replicated collection can run the applyOps command with specially malformed oplog entries, resulting in a potential denial of service on secondaries. This issue affects MongoDB Server v4.0 versions prior to 4.0.27; MongoDB Server v4.2 versions prior to...

6.5CVSS6.6AI score0.0108EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2021/12/15 1:15 p.m.•36 views

CVE-2021-20330

An attacker with basic CRUD permissions on a replicated collection can run the applyOps command with specially malformed oplog entries, resulting in a potential denial of service on secondaries. This issue affects MongoDB Server v4.0 versions prior to 4.0.27; MongoDB Server v4.2 versions prior to...

6.5CVSS0.0108EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2021/12/15 1:15 p.m.•40 views

CVE-2021-20330

An attacker with basic CRUD permissions on a replicated collection can run the applyOps command with specially malformed oplog entries, resulting in a potential denial of service on secondaries. This issue affects MongoDB Server v4.0 versions prior to 4.0.27; MongoDB Server v4.2 versions prior to...

6.5CVSS6.6AI score0.0108EPSS
SaveExploits0References2
OSV
OSV
•added 2021/12/15 1:15 p.m.•11 views

UBUNTU-CVE-2021-20330

An attacker with basic CRUD permissions on a replicated collection can run the applyOps command with specially malformed oplog entries, resulting in a potential denial of service on secondaries. This issue affects MongoDB Server v4.0 versions prior to 4.0.27; MongoDB Server v4.2 versions prior to...

6.5CVSS5.8AI score0.0108EPSS
SaveExploits0References3
Mend
Mend
•added 2021/12/15 12:30 p.m.•5 views

CVE-2021-20330

An attacker with basic CRUD permissions on a replicated collection can run the applyOps command with specially malformed oplog entries, resulting in a potential denial of service on secondaries. This issue affects MongoDB Server v4.0 versions prior to 4.0.27; MongoDB Server v4.2 versions prior to...

7.1CVSS0.0108EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2021/12/15 12:30 p.m.•73 views

CVE-2021-20330

Removed by vendor...

6.5CVSS6.5AI score0.0108EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/15 12:00 a.m.•4 views

CVE-2021-20330: Improper Input Validation

An attacker with basic CRUD permissions on a replicated collection can run the applyOps command with specially malformed oplog entries, resulting in a potential denial of service on secondaries. This issue affects MongoDB Server v4.0 versions prior to 4.0.27; MongoDB Server v4.2 versions prior to...

6.5CVSS5.8AI score0.0108EPSS
SaveExploits0References3
OSV
OSV
•added 2021/12/13 11:15 a.m.•12 views

CVE-2021-24861

The Quotes Collection WordPress plugin through 2.5.2 does not validate and escape the bulkcheck parameter before using it in a SQL statement, leading to a SQL injection...

7.2CVSS7.1AI score0.01317EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2021/12/13 11:15 a.m.•9 views

CVE-2021-24861

The Quotes Collection WordPress plugin through 2.5.2 does not validate and escape the bulkcheck parameter before using it in a SQL statement, leading to a SQL injection...

7.2CVSS7.1AI score0.01317EPSS
SaveExploits2References2
NVD
NVD
•added 2021/12/13 11:15 a.m.•43 views

CVE-2021-24861

The Quotes Collection WordPress plugin through 2.5.2 does not validate and escape the bulkcheck parameter before using it in a SQL statement, leading to a SQL injection...

7.2CVSS0.01317EPSS
SaveExploits2References1
CVE
CVE
•added 2021/12/13 10:41 a.m.•61 views

CVE-2021-24861

CVE-2021-24861 affects WordPress Quotes Collection plugin (versions

7.2CVSS7.2AI score0.01317EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2021/12/13 10:41 a.m.•43 views

CVE-2021-24861 Quotes Collection <= 2.5.2 - Admin+ SQL Injection

The Quotes Collection WordPress plugin through 2.5.2 does not validate and escape the bulkcheck parameter before using it in a SQL statement, leading to a SQL injection...

7.5AI score0.01317EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2021/12/13 12:00 a.m.•15 views

WordPress和WordPress 插件 SQL注入漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the erection of personal blog sites on PHP and MySQL servers. Quotes Collection Plugin is a WordPress open source application plugin. WordPress Quotes Collection Plugin has a S...

7.2CVSS6.2AI score0.01317EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/13 12:00 a.m.•2 views

CVE-2021-24861: Improper Neutralization of Special Elements used in an SQL Command

The Quotes Collection WordPress plugin through 2.5.2 does not validate and escape the bulkcheck parameter before using it in a SQL statement, leading to a SQL injection...

7.2CVSS5.9AI score0.01317EPSS
SaveExploits2References2
Rows per page
Query Builder