Lucene search
+L

10 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2025-10403

Malicious code in bioql PyPI...

9.3CVSS6.4AI score0.00358EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/04/10 4:15 p.m.•35 views

CVE-2025-32020

The crud-query-parser library parses query parameters from HTTP requests and converts them to database queries. Improper neutralization of the order/sort parameter in the TypeORM adapter, which allows SQL injection. You are impacted by this vulnerability if you are using the TypeORM adapter,...

9.3CVSS7.6AI score0.00358EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/08 3:15 p.m.•19 views

CVE-2025-32020

The crud-query-parser library parses query parameters from HTTP requests and converts them to database queries. Improper neutralization of the order/sort parameter in the TypeORM adapter, which allows SQL injection. You are impacted by this vulnerability if you are using the TypeORM adapter,...

9.3CVSS0.00358EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/08 3:05 p.m.•79 views

CVE-2025-32020

CVE-2025-32020 affects the crud-query-parser library. The vulnerability arises from improper neutralization of the order/sort parameter in the TypeORM adapter when ordering is enabled and a property filter is not configured, enabling SQL injection. Impacted environments are those using the TypeOR...

9.3CVSS7.9AI score0.00358EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/08 3:05 p.m.•7 views

CVE-2025-32020 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in crud-query-parser

The crud-query-parser library parses query parameters from HTTP requests and converts them to database queries. Improper neutralization of the order/sort parameter in the TypeORM adapter, which allows SQL injection. You are impacted by this vulnerability if you are using the TypeORM adapter,...

9.3CVSS7.9AI score0.00358EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/08 3:05 p.m.•29 views

CVE-2025-32020 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in crud-query-parser

The crud-query-parser library parses query parameters from HTTP requests and converts them to database queries. Improper neutralization of the order/sort parameter in the TypeORM adapter, which allows SQL injection. You are impacted by this vulnerability if you are using the TypeORM adapter,...

9.3CVSS0.00358EPSS
SaveExploits0References1
OSV
OSV
•added 2025/04/08 3:05 p.m.•12 views

CVE-2025-32020 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in crud-query-parser

The crud-query-parser library parses query parameters from HTTP requests and converts them to database queries. Improper neutralization of the order/sort parameter in the TypeORM adapter, which allows SQL injection. You are impacted by this vulnerability if you are using the TypeORM adapter,...

9.3CVSS7.5AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/04/08 12:00 a.m.•14 views

PT-2025-15445 · Unknown +1 · Crud-Query-Parser +1

Name of the Vulnerable Software and Affected Versions: crud-query-parser versions prior to 0.1.0 Description: The crud-query-parser library is affected by an issue where improper neutralization of the order/sort parameter in the TypeORM adapter allows SQL injection. This issue impacts users who a...

9.3CVSS7.2AI score0.00358EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/04/08 12:00 a.m.•15 views

crud-query-parser SQL注入漏洞

crud-query-parser is a tool by Guilherme Chaguri Personal Developer. A SQL injection vulnerability exists in crud-query-parser that stems from not properly neutralizing the order/sort parameter, resulting in SQL injection...

9.3CVSS7.7AI score0.00358EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/08 12:00 a.m.•3 views

CVE-2025-32020: Improper Neutralization of Special Elements used in an SQL Command

The crud-query-parser library parses query parameters from HTTP requests and converts them to database queries. Improper neutralization of the order/sort parameter in the TypeORM adapter, which allows SQL injection. You are impacted by this vulnerability if you are using the TypeORM adapter,...

9.3CVSS6AI score0.00358EPSS
SaveExploits0References1
Rows per page
Query Builder