Lucene search
+L

31 matches found

NVD
NVD
•added 2026/04/27 12:16 a.m.•14 views

CVE-2026-33566

There is a cypher injection issue in LogonTracer prior to v2.0.0. If specially crafted Windows event log data is loaded, the contents of the database may be altered...

5.1CVSS0.00304EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/04/27 12:04 a.m.•10 views

CVE-2026-33566

There is a cypher injection issue in LogonTracer prior to v2.0.0. If specially crafted Windows event log data is loaded, the contents of the database may be altered...

5.1CVSS5.2AI score0.00304EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2026/04/27 12:04 a.m.•16 views

CVE-2026-33566

There is a cypher injection issue in LogonTracer prior to v2.0.0. If specially crafted Windows event log data is loaded, the contents of the database may be altered...

5.1CVSS6.2AI score
SaveExploits0References4
CVE
CVE
•added 2026/04/27 12:04 a.m.•40 views

CVE-2026-33566

CVE-2026-33566 is a cypher injection issue in LogonTracer prior to v2.0.0. When specially crafted Windows event log data is loaded, the contents of the database may be altered. The issue is documented across multiple sources (NVD, CVE List, JVN) and is addressed by updating to LogonTracer v2.0.0....

5.1CVSS6.1AI score0.00304EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/27 12:00 a.m.•7 views

CVE-2026-33566: Improper Neutralization of Special Elements in Data Query Logic

There is a cypher injection issue in LogonTracer prior to v2.0.0. If specially crafted Windows event log data is loaded, the contents of the database may be altered...

5.1CVSS5.8AI score0.00304EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/04/27 12:00 a.m.•27 views

PT-2026-35276

There is a cypher injection issue in LogonTracer prior to v2.0.0. If specially crafted Windows event log data is loaded, the contents of the database may be altered...

5.1CVSS5.6AI score0.00304EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/01/09 9:11 a.m.•19 views

CVE-2022-35946

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In affected versions request input is not properly validated in the plugin controller and can be used ...

6.5CVSS6.6AI score0.00885EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/06 12:00 a.m.•3 views

CVE-2022-50590: Access of Resource Using Incompatible Type

SuiteCRM versions prior to 7.12.6 contain a type confusion vulnerability within the processing of the ‘module’ parameter within the ‘deleteAttachment’ functionality. Successful exploitation allows remote unauthenticated attackers to alter database objects including changing the email address of t...

8.8CVSS5.9AI score0.00363EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2018-1349

Malware in sbrugna...

4CVSS4.2AI score0.00845EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-13580

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00442EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2023-51720

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.01089EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2021-8150

Malicious code in bioql PyPI...

9.1CVSS8.5AI score0.01307EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/23 9:16 a.m.•15 views

CVE-2024-33622

Missing authentication for critical function vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, sensitive information may be obtained and/or the information stored in the database may be altered by a remote authenticated attacker...

6.5CVSS6.7AI score0.00438EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 7:08 p.m.•13 views

CVE-2021-20736

NoSQL injection vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to obtain and/or alter the information stored in the database via unspecified vectors...

9.1CVSS6.6AI score0.01307EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 6:40 p.m.•27 views

CVE-2021-38159

In certain Progress MOVEit Transfer versions before 2021.0.4 aka 13.0.4, SQL injection in the MOVEit Transfer web application could allow an unauthenticated remote attacker to gain access to the database. Depending on the database engine being used MySQL, Microsoft SQL Server, or Azure SQL, an...

9.8CVSS8.1AI score0.01891EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/18 12:00 a.m.•2 views

CVE-2024-33622: Missing Authentication for Critical Function

Missing authentication for critical function vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, sensitive information may be obtained and/or the information stored in the database may be altered by a remote authenticated attacker...

6.5CVSS6.7AI score0.00438EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/23 4:47 a.m.•291 views

CVE-2024-31077

Forminator prior to 1.29.3 contains a SQL injection vulnerability. If this vulnerability is exploited, a remote authenticated attacker with an administrative privilege may obtain and alter any information in the database and cause a denial-of-service DoS condition...

7.2CVSS7AI score0.30361EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2023/11/14 5:12 a.m.•30 views

CVE-2023-47609

SQL injection vulnerability in OSS Calendar versions prior to v.2.0.3 allows a remote authenticated attacker to execute arbitrary code or obtain and/or alter the information stored in the database by sending a specially crafted request...

8.9AI score0.01089EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/27 12:00 a.m.•1 views

CVE-2023-0241: Improper Limitation of a Pathname to a Restricted Directory

pgAdmin 4 versions prior to v6.19 contains a directory traversal vulnerability. A user of the product may change another user's settings or alter the database...

6.5CVSS5.7AI score0.08826EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/01/30 12:00 a.m.•12 views

CVE-2023-22332

Information disclosure vulnerability exists in Pgpool-II 4.4.0 to 4.4.1 4.4 series, 4.3.0 to 4.3.4 4.3 series, 4.2.0 to 4.2.11 4.2 series, 4.1.0 to 4.1.14 4.1 series, 4.0.0 to 4.0.21 4.0 series, All versions of 3.7 series, All versions of 3.6 series, All versions of 3.5 series, All versions of 3....

6.5AI score0.00704EPSS
SaveExploits0References2
Rows per page
Query Builder