CVE-2019-19801

In Gallagher Command Centre Server versions of v8.10 prior to v8.10.1134MR4, v8.00 prior to v8.00.1161MR5, v7.90 prior to v7.90.991MR5, v7.80 prior to v7.80.960MR2 and v7.70 or earlier, an unprivileged but authenticated user is able to perform a backup of the Command Centre databases...

CVE-2020-2640

Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager component: Target Management. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

Oracle Enterprise Manager for Oracle Database cpujan2020 Multiple Remote Security Vulnerabilities

Description Oracle Enterprise Manager for Oracle Database is prone to multiple remote security vulnerabilities. These vulnerabilities can be exploited over HTTP protocol. The 'Change Manager - web based', 'Discovery Framework', 'Enterprise Config Management', and 'Target Management' components ar...

CVE-2019-4651: Improper Neutralization of Special Elements used in an SQL Command

IBM Jazz Reporting Service JRS 6.0.6.1 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 170962...

SQL Injection Vulnerability in 51 Micro Voting System

51 Micro Voting System is a platform system that provides customers with online voting services through the Internet. There is a SQL injection vulnerability in 51MicroVoting System, which can be exploited by attackers to obtain sensitive information in the database...

SQL Injection Vulnerability in School Worry-Free Teacher Evaluation System

The Schoolfree Teacher Evaluation System is a school teaching management system. A SQL injection vulnerability exists in SchoolWorryFree Teacher Evaluation System, which can be exploited by attackers to obtain sensitive information from the database...

Wenzhou Yougu Technology Co., Ltd. website building system SQL injection vulnerability

Wenzhou Yougu Technology Co., Ltd. is committed to website construction and development, multimedia production, the company set up a mobile division, focusing on WeChat mobile system development. Wenzhou Yougu Science and Technology Co., Ltd. station building system there are SQL injection...

SQL Injection Vulnerability in UsualToolCMS of Chengdu Comfidonte Network Technology Co.

UsualToolCMS UTCMS is a content management system as well as a rapid site building framework. UsualToolCMS by Chengdu Comfidonte Network Technology Co., Ltd. suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive information from the database...

CVE-2019-10205

A flaw was found in the way Red Hat Quay stores robot account tokens in plain text. An attacker able to perform database queries in the Red Hat Quay database could use the tokens to read or write container images stored in the registry...

SQL Injection Vulnerability in opensns system

OpenSNS is an open-source social networking system from Jiaxing Wantsky Information Technology Company in China. The opensns system suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in Ocean CMS Backend ad***_vi***.php File

Ocean CMS seacms is a video-on-demand system designed for webmasters with different needs. There is a SQL injection vulnerability in the advi.php file in the background of Ocean CMS. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SQL injection vulnerability in the us***.php page of BaiLian Mall system

BaiLian mall system is a set of computer version of the mall + mobile version of the website + micro-mall enterprise weibo public number secondary development + BaiLian bearing network www.bearing.cn professional promotion and publicity in one of the new marketing solutions. SQL injection...

SQL Injection Vulnerability in pr***.asp Page of Shanghai Silverfox Information Technology Co.

Shanghai Silver Fox Information Technology Co., Ltd Silver Fox Power is a high-tech company dedicated to enterprise information technology services. Shanghai Silverfox Information Technology Co., Ltd. building system pr.asp page SQL injection vulnerability exists. Attackers can use the...

SQL Injection Vulnerability in Panmicro e-cology OA System

Panmicro Collaborative Management Application Platform e-cology is a collaborative business platform with enterprise information portal, knowledge management, data center, workflow management, human resource management, customer and partner management, project management, financial management, an...

Default credentials

Weak default password cause vulnerability in SonicWall Email Security appliance which leads to attacker gain access to appliance database. This vulnerability affected Email Security Appliance version 10.0.2 and earlier...

CVE-2019-7488

Weak default password cause vulnerability in SonicWall Email Security appliance which leads to attacker gain access to appliance database. This vulnerability affected Email Security Appliance version 10.0.2 and earlier...

SQL Injection Vulnerability in Hula Enterprise Website Management System of Qingdao Scorch Culture Media Co.

Hula enterprise website management system is based on ThinkPHP5 framework development, security and efficiency, including all the features of ThinkPHP5. Qingdao Scorch Culture Media Co., Ltd. Hula enterprise website management system has a SQL injection vulnerability, which can be exploited by...

PT-2019-18629

Name of the Vulnerable Software and Affected Versions SonicWall Email Security appliance versions 10.0.2 and earlier Description The issue is caused by a weak default password in the SonicWall Email Security appliance, allowing an attacker to gain access to the appliance database. Recommendations...

CVE-2019-7488: Weak Password Requirements

Weak default password cause vulnerability in SonicWall Email Security appliance which leads to attacker gain access to appliance database. This vulnerability affected Email Security Appliance version 10.0.2 and earlier...

Zhengzhou Rui Ma Technology Co., Ltd. website building system SQL injection vulnerability

Zhengzhou Rui Ma Technology specializes in providing Zhengzhou website construction, Zhengzhou website production, Zhengzhou website promotion, Zhengzhou website optimization, Zhengzhou seo optimization, Zhengzhou promotion software. Zhengzhou Rui Ma Technology Co., Ltd. website building system...