Lucene search
K

476 matches found

Prion
Prion
added 2017/03/01 9:59 p.m.12 views

Sql injection

IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM Reference : 1992067...

6.5CVSS7.8AI score0.00853EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2017/03/01 9:59 p.m.13 views

Sql injection

IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM Reference : 1976805...

6.5CVSS7.8AI score0.00853EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2017/03/01 9:59 p.m.20 views

CVE-2016-9994

IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM Reference : 1976805...

7.1CVSS7.2AI score0.00853EPSS
Exploits0References1
NVD
NVD
added 2017/03/01 9:59 p.m.16 views

CVE-2016-9992

IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM Reference : 1992067...

7.1CVSS7.2AI score0.00853EPSS
Exploits0References1
Cvelist
Cvelist
added 2017/03/01 9:0 p.m.20 views

CVE-2016-9992

IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM Reference : 1992067...

7.1AI score0.00853EPSS
Exploits0References1
CVE
CVE
added 2017/03/01 9:0 p.m.45 views

CVE-2016-9994

IBM Kenexa LCMS Premier on Cloud 9.0 and 10.0.0 are affected by a SQL injection vulnerability (CVE-2016-9994). A remote attacker could submit specially crafted SQL statements to view, add, modify, or delete data in the back-end database. The issue has been addressed by IBM in LCMS Premier on Clou...

7.1CVSS7.5AI score0.00853EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2017/02/01 10:59 p.m.21 views

Sql injection

IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database...

6.5CVSS7.8AI score0.00969EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2017/02/01 10:59 p.m.15 views

Sql injection

IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database...

5.5CVSS7.8AI score0.00877EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2017/02/01 10:59 p.m.15 views

Sql injection

IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database...

6.5CVSS7.8AI score0.00969EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2017/02/01 8:59 p.m.16 views

Sql injection

IBM Kenexa LCMS Premier on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database...

6.5CVSS7.8AI score0.01351EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2017/02/01 8:59 p.m.13 views

Sql injection

IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database...

6.5CVSS7.8AI score0.00801EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2016/03/01 11:0 a.m.34 views

CVE-2016-2560

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.15, 4.4.x before 4.4.15.5, and 4.5.x before 4.5.5.1 allow remote attackers to inject arbitrary web script or HTML via 1 a crafted Host HTTP header, related to libraries/Config.class.php; 2 crafted JSON data, relat...

6.4AI score0.03109EPSS
Exploits0References11
FreeBSD
FreeBSD
added 2016/02/29 12:0 a.m.29 views

phpmyadmin -- multiple XSS and a man-in-the-middle vulnerability

The phpMyAdmin development team reports: XSS vulnerability in SQL parser. Using a crafted SQL query, it is possible to trigger an XSS attack through the SQL query page. We consider this vulnerability to be non-critical. Multiple XSS vulnerabilities. By sending a specially crafted URL as part of t...

6.8CVSS1.4AI score0.03109EPSS
Exploits0References4
Prion
Prion
added 2015/08/12 2:59 p.m.21 views

Buffer overflow

Buffer overflow in the skip-scan optimization in SQLite 3.8.2 allows remote attackers to cause a denial of service crash via crafted SQL statements...

5CVSS7.8AI score0.03176EPSS
Exploits1References7Affected Software2
Cvelist
Cvelist
added 2015/08/12 2:0 p.m.33 views

CVE-2013-7443

Buffer overflow in the skip-scan optimization in SQLite 3.8.2 allows remote attackers to cause a denial of service crash via crafted SQL statements...

9.4AI score0.03176EPSS
Exploits1References7
Tenable Nessus
Tenable Nessus
added 2015/07/14 12:0 a.m.35 views

Cisco Unified MeetingPlace Unspecified SQLi (CSCuu54037)

According to its self-reported version number, the Cisco Unified MeetingPlace application hosted on the remote web server is potentially affected by a SQL injection vulnerability due to a failure to properly sanitize user-supplied input. An authenticated, remote attacker can exploit this to...

6.5CVSS6.1AI score0.01993EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2015/01/23 12:0 a.m.3 views

PT-2023-4102 · Unknown +1 · Monetdb Server +1

Name of the Vulnerable Software and Affected Versions: MonetDB Server versions 11.45.17 through 11.46.0 Description: The issue in the cs bind ubat component allows attackers to cause a Denial of Service DoS via crafted SQL statements. It is related to incorrect clearance or release of resources,...

7.5CVSS7.8AI score0.00776EPSS
Exploits11References27
Positive Technologies
Positive Technologies
added 2015/01/23 12:0 a.m.4 views

PT-2023-25550 · Monetdb +1 · Monetdb Server +1

Name of the Vulnerable Software and Affected Versions: MonetDB Server versions 11.45.17 through 11.46.0 Description: The issue in the rel sequences component allows attackers to cause a Denial of Service DoS via crafted SQL statements. Recommendations: For MonetDB Server versions 11.45.17 and...

7.5CVSS7.7AI score0.00776EPSS
Exploits11References28
Positive Technologies
Positive Technologies
added 2015/01/23 12:0 a.m.4 views

PT-2023-25551 · Monetdb +1 · Monetdb Server +1

Name of the Vulnerable Software and Affected Versions: MonetDB Server versions 11.45.17 through 11.46.0 Description: The issue in the nss database lookup component allows attackers to cause a Denial of Service DoS via crafted SQL statements. Recommendations: For MonetDB Server versions 11.45.17...

7.5CVSS7.7AI score0.00776EPSS
Exploits11References27
Positive Technologies
Positive Technologies
added 2015/01/23 12:0 a.m.3 views

PT-2023-25554 · Monetdb +1 · Monetdb Server +1

Name of the Vulnerable Software and Affected Versions: MonetDB Server versions 11.45.17 through 11.46.0 Description: The issue in the log create delta component allows attackers to cause Denial of Service DoS via crafted SQL statements. Recommendations: For MonetDB Server versions 11.45.17 throug...

7.5CVSS7.8AI score0.00776EPSS
Exploits11References27
Rows per page
Query Builder