Lucene search
K

476 matches found

CNNVD
CNNVD
added 2024/02/28 12:0 a.m.2 views

Apache Superset 信息泄露漏洞

Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. Apache Superset suffers from a security vulnerability that originates from the ability of an authenticated user to generate specially crafted SQL statements to trigger database errors and expose...

4.3CVSS7.2AI score0.00969EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/02/23 6:47 p.m.18 views

CVE-2022-43842 IBM Aspera Console SQL injection

IBM Aspera Console 3.4.0 through 3.4.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 239079...

8.6CVSS7.2AI score0.00533EPSS
Exploits0References2
CNVD
CNVD
added 2024/01/12 12:0 a.m.17 views

Hospital Management System SQL Injection Vulnerability

A Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs effectively. Hospital Management System V4.0 and prior versions suffer from a SQL injection vulnerability that stems from the application's lack ...

4.9CVSS7.4AI score0.00707EPSS
Exploits3References1
IBM Security Bulletins
IBM Security Bulletins
added 2024/01/10 4:23 a.m.37 views

Security Bulletin: IBM DB2 used by IBM Security Verify Governance has multiple vulnerabilities

Summary IBM Security Verify Governance supports IBM DB2 database. Information about security vulnerabilities affecting IBM DB2 has been published in security bulletins. Vulnerability Details CVEID:CVE-2023-29257 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.5,...

9.8CVSS10AI score0.02495EPSS
Exploits1Affected Software1
CNVD
CNVD
added 2023/12/21 12:0 a.m.28 views

Apache Superset SQL Injection Vulnerability (CNVD-2024-0102192)

Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. Apache Superset suffers from a SQL injection vulnerability that can be exploited by an authenticated, remote attacker to send specially crafted SQL statements to the wherein JINJA macro...

8.8CVSS8.1AI score0.01178EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2023/12/06 7:59 a.m.30 views

CVE-2023-48945

Openlink virtuoso-opensource is vulnerable to stack overflow vulnerability which allows a remote attackers to cause Denial of Service using crafted SQL statements...

7.5CVSS7.8AI score0.00894EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/12/01 12:0 a.m.2 views

PT-2023-7699 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 10.5, 11.1, and 11.5 Description: The issue exists due to insufficient input validation in the system, allowing a remote attacker to cause a denial of service with a...

9.4CVSS7.5AI score0.01053EPSS
Exploits0References9
NVD
NVD
added 2023/11/30 2:15 p.m.10 views

CVE-2023-6411

A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via home.php in the update parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all...

9.8CVSS0.00831EPSS
Exploits0References1
Prion
Prion
added 2023/11/30 2:15 p.m.17 views

Sql injection

A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via videos.php in the id parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all th...

5CVSS7.7AI score0.00831EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2023/11/30 2:15 p.m.17 views

Sql injection

A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via update.php in the id parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all th...

5CVSS7.7AI score0.00831EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/30 1:12 p.m.13 views

CVE-2023-6415 SQL injection in Voovi Social Networking Script

A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via signin.php in the user parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all...

9.8CVSS7.4AI score0.00831EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/11/30 1:12 p.m.16 views

CVE-2023-6415 SQL injection in Voovi Social Networking Script

A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via signin.php in the user parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all...

9.8CVSS9.7AI score0.00831EPSS
Exploits0References1
OSV
OSV
added 2023/11/29 8:15 p.m.2 views

DEBIAN-CVE-2023-48945

A stack overflow in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.6AI score0.00894EPSS
Exploits1References1
Prion
Prion
added 2023/11/29 8:15 p.m.15 views

Stack overflow

A stack overflow in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

5CVSS8AI score0.00894EPSS
Exploits1References1Affected Software1
UbuntuCve
UbuntuCve
added 2023/11/29 8:15 p.m.16 views

CVE-2023-48945

A stack overflow in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.2AI score0.00894EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/11/29 12:0 a.m.2 views

PT-2023-8878 · Openlink +4 · Openlink Virtuoso-Opensource +4

Name of the Vulnerable Software and Affected Versions: openlink virtuoso-opensource version 7.2.11 Description: The issue is related to a stack overflow in the openlink virtuoso-opensource platform, which can be exploited by attackers to cause a Denial of Service DoS via crafted SQL statements...

8.8CVSS7.5AI score0.00905EPSS
Exploits14References66
CNNVD
CNNVD
added 2023/11/29 12:0 a.m.2 views

Virtuoso Open-Source Edition Security Vulnerabilities

Virtuoso Open-Source Edition is a high-performance and scalable multi-model RDBMS, data integration middleware, linked data deployment, and HTTP application server platform open-sourced by OpenLink Software. A security vulnerability exists in Virtuoso Open-Source Edition version v7.2.11, which...

7.5CVSS7.2AI score0.00852EPSS
Exploits1References2
CNNVD
CNNVD
added 2023/11/29 12:0 a.m.3 views

Virtuoso Open-Source Edition Security Vulnerabilities

Virtuoso Open-Source Edition is a high-performance and scalable multi-model RDBMS, data integration middleware, linked data deployment and HTTP application server platform from OpenLink Software open source. A security vulnerability exists in Virtuoso Open-Source Edition version v7.2.11, which...

7.5CVSS7.2AI score0.0087EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/11/29 12:0 a.m.1 views

Virtuoso Open-Source Edition Security Vulnerabilities

Virtuoso Open-Source Edition is a high-performance and scalable multi-model RDBMS, data integration middleware, linked data deployment and HTTP application server platform from OpenLink Software open source. A security vulnerability exists in Virtuoso Open-Source Edition version v7.2.11, which...

7.5CVSS7.2AI score0.0083EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2023/11/29 12:0 a.m.16 views

CVE-2023-48945

A stack overflow in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.6AI score0.00894EPSS
Exploits1References1
Rows per page
Query Builder