Lucene search
K

34 matches found

CNNVD
CNNVD
added 2025/11/16 12:0 a.m.2 views

ModulithShop 信任管理问题漏洞

ModulithShop is an online shopping mall system from the individual developers of Shopsuite. ModulithShop suffers from a Trust Management Issue vulnerability that stems from misbehavior of the component RSA/OAuth2/Database, which could lead to hard-coded credentials...

7.5CVSS7.4AI score0.00289EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2015-0492

Malware in sbrugna...

4CVSS6.1AI score0.01508EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2016-0507

Malware in sbrugna...

5.5CVSS8.1AI score0.01665EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2023-31437

Malicious code in bioql PyPI...

8.1CVSS8AI score0.00611EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/04/15 12:0 a.m.3 views

Oracle Database Server 安全漏洞

Oracle Database Server is a relational database management system from Oracle Corporation USA. This database management system provides data management, distributed processing, and other functions. A security vulnerability in the XML Database component of Oracle Database Server, versions 19.3...

5.4CVSS7.2AI score0.00323EPSS
Exploits0References2
OSV
OSV
added 2025/01/14 1:15 a.m.1 views

UBUNTU-CVE-2024-57661

An issue in the sqlodf component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.2AI score0.00799EPSS
Exploits1References3
NVD
NVD
added 2023/03/28 2:15 p.m.11 views

CVE-2023-27701

MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /database/sqldel.html...

8.1CVSS8.2AI score0.00611EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2023/03/28 12:0 a.m.6 views

CVE-2023-27701

MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /database/sqldel.html...

8.2AI score0.00611EPSS
Exploits1References1
NVD
NVD
added 2022/11/22 1:15 a.m.30 views

CVE-2022-41223

The Director database component of MiVoice Connect through 19.3 22.22.6100.0 could allow an authenticated attacker to conduct a code-injection attack via crafted data due to insufficient restrictions on the database data type...

6.8CVSS0.10571EPSS
Exploits0References3
Prion
Prion
added 2022/11/22 1:15 a.m.27 views

Code injection

The Director database component of MiVoice Connect through 19.3 22.22.6100.0 could allow an authenticated attacker to conduct a code-injection attack via crafted data due to insufficient restrictions on the database data type...

4.7CVSS6.5AI score0.10571EPSS
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/11/22 12:0 a.m.38 views

CVE-2022-41223

The Director database component of MiVoice Connect through 19.3 22.22.6100.0 could allow an authenticated attacker to conduct a code-injection attack via crafted data due to insufficient restrictions on the database data type. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value...

6.8CVSS4.1AI score0.10571EPSS
In wildExploits0References3
OSV
OSV
added 2022/05/24 5:27 p.m.4 views

GHSA-C7RM-W2HJ-X8G3 Guard bypass in Eloquent models affecting Laravel illuminate database component

An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2. Unvalidated values are saved to the database component in some situations in which table names are stripped during a mass assignment...

7.5CVSS7.4AI score0.01203EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2022/05/24 5:27 p.m.22 views

Guard bypass in Eloquent models affecting Laravel illuminate database component

An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2. Unvalidated values are saved to the database component in some situations in which table names are stripped during a mass assignment...

7.5CVSS6.6AI score0.01203EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2022/02/15 6:15 p.m.19 views

CVE-2021-43049

The Database component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to obtain the usernames and passwords of users of the affected system. Affected releases are TIBCO...

10CVSS0.01305EPSS
Exploits0References2
Prion
Prion
added 2022/02/15 6:15 p.m.22 views

Privilege escalation

The Database component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to obtain the usernames and passwords of users of the affected system. Affected releases are TIBCO...

10CVSS9.2AI score0.01305EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/02/15 5:55 p.m.25 views

CVE-2021-43049 TIBCO BusinessConnect Container Edition username and password leakage

The Database component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to obtain the usernames and passwords of users of the affected system. Affected releases are TIBCO...

9.8CVSS9.6AI score0.01305EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2020/11/26 12:0 a.m.4 views

Vulnerability of the MySQL Server component of the database management system: This component allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

6.8CVSS6.5AI score0.02336EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/02/11 12:0 a.m.3 views

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows a hacker to cause a service failure.

The vulnerability of the Core RDBMS component of the database management system, Oracle Database Server, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to completely disrupt service delivery using the OracleNet network protocol...

7.7CVSS7.2AI score0.01318EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2020/01/23 5:15 p.m.25 views

CVE-2019-16153

A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attackers to access the device database via the use of static credentials...

9.8CVSS9.5AI score0.0115EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2020/01/23 4:39 p.m.10 views

CVE-2019-16153

A hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5 and below may allow attackers to access the device database via the use of static credentials...

7.3AI score0.0115EPSS
Exploits0References1
Rows per page
Query Builder