CVE-2018-18529

ThinkPHP 3.2.4 has SQL Injection via the count parameter because the Library/Think/Db/Driver/Mysql.class.php parseKey function mishandles the key variable. NOTE: a backquote character is not required in the attack URI...

PT-2018-14497

Name of the Vulnerable Software and Affected Versions ThinkPHP version 5.1.25 Description The issue is related to SQL Injection via the count parameter. This occurs because the library/think/db/Query.php aggregate function mishandles the aggregate variable. The attack requires a backquote charact...

CVE-2018-18529: Improper Neutralization of Special Elements used in an SQL Command

ThinkPHP 3.2.4 has SQL Injection via the count parameter because the Library/Think/Db/Driver/Mysql.class.php parseKey function mishandles the key variable. NOTE: a backquote character is not required in the attack URI...

CVE-2018-18530: Improper Neutralization of Special Elements used in an SQL Command

ThinkPHP 5.1.25 has SQL Injection via the count parameter because the library/think/db/Query.php aggregate function mishandles the aggregate variable. NOTE: a backquote character is required in the attack URI...

Android DoS

The vulnerability of the drivers/thermal/supplylmcore.c file in the Qualcomm Android operating system is related to the lack of a check on the count parameter. Exploiting this vulnerability can allow an attacker to cause service failures or other effects through a specially created application...

UBUNTU-CVE-2016-3855

drivers/thermal/supplylmcore.c in the Qualcomm components in Android before 2016-08-05 does not validate a certain count parameter, which allows attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via a crafted application, aka Qualcomm...

CouchDB: Denial of service

Background Apache CouchDB is a distributed, fault-tolerant and schema-free document-oriented database. Description CouchDB does not properly sanitize the count parameter for Universally Unique Identifiers UUID requests. Impact A remote attacker could send a specially crafted request to CouchDB,...

Updated couchdb packages fix CVE-2014-2668

Updated couchdb packages fix security vulnerability: Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service CPU and memory consumption via the count parameter to /uuids CVE-2014-2668...

CVE-2014-2668

Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service CPU and memory consumption via the count parameter to /uuids...

Code injection

Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service CPU and memory consumption via the count parameter to /uuids...

CVE-2014-2668

Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service CPU and memory consumption via the count parameter to /uuids...

CVE-2014-2668: Improper Input Validation

Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of service CPU and memory consumption via the count parameter to /uuids...

PT-2014-4861

Name of the Vulnerable Software and Affected Versions Apache CouchDB versions 1.5.0 and earlier Description The issue allows remote attackers to cause a denial of service, consuming CPU and memory resources. This is achieved by exploiting the count parameter in the "/ uuids" API endpoint...

CVE-2008-1216: Improper Input Validation

IBM Lotus Quickr 8.0 server, and possibly QuickPlace 7.x, does not properly identify URIs containing cross-site scripting XSS attack strings, which allows remote attackers to inject arbitrary web script or HTML via a Calendar OpenDocument action to main.nsf with a Count parameter containing a...

Code injection

PHP-Ping 1.3 does not properly validate ping counts, which allows remote attackers to cause a denial of service ping flood via a negative count parameter...

CVE-2005-4489: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Scoop 1.1 RC1 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 type and 2 count parameters, and 3 the query string in a story...

PT-2005-3450 · E107 · E107 Eping Plugin

Name of the Vulnerable Software and Affected Versions: e107 ePing plugin versions 1.02 and earlier Description: The issue allows remote attackers to execute arbitrary code or overwrite files. This can be achieved through shell metacharacters in the eping count parameter or restricted shell...