Lucene search
+L

2003 matches found

CNVD
CNVD
added 2020/12/31 12:0 a.m.4 views

SQL Injection Vulnerability in Lightbox Cloud Platform Pro

The Lightbox Cloud Platform Pro is an intelligent cloud server management system. Ltd. Lightboat Cloud Platform Pro has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...

7.4AI score
SaveExploits0
CNVD
CNVD
added 2020/12/23 12:0 a.m.4 views

SQL Injection Vulnerability in the System of Guangdong Dabit Information and Advertising Development Co.

Guangdong Big Bit Information and Advertising Development Co., Ltd. referred to as Big Bit big-bit, was established in 1999, to information dissemination as the main business, created to serve the electronics manufacturing industry as the main information platform. There is a SQL injection...

7.4AI score
SaveExploits0
CNVD
CNVD
added 2020/12/21 12:0 a.m.6 views

SQL Injection Vulnerability in CSC VIPExam Exam Study Resources Database

Zhongke VIPExam Exam Learning Resources Database is a set of educational resources database integrating the functions of daily study, review and preparation for exams, online paperless exams and so on. A SQL injection vulnerability exists in the ZK VIPExam Exam Learning Resources Database. An...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2020/12/17 12:0 a.m.4 views

SQL Injection Vulnerability in Environmental Automatic Monitoring System of Jiangsu Sanxi Technology Co.

The business scope of Jiangsu Sanxi Technology Co., Ltd. includes: environmental monitoring and control systems, automation systems, information management systems, computers, communications, control systems, and other types of systems such as software and hardware development. Jiangsu Sanxi...

7.6AI score
SaveExploits0
Exploit DB
Exploit DB
added 2020/12/17 12:0 a.m.387 views

Interview Management System 1.0 - 'id' SQL Injection

Exploit Title: Interview Management System 1.0 - 'id' SQL Injection Exploit Author: Saeed Bala Ahmed r0b0tG4nG Date: 2020-12-10 Google Dork: N/A Vendor Homepage: https://www.sourcecodester.com/php/14585/interview-management-system-phpmysqli-full-source-code.html Software Link:...

5.3AI score
SaveExploits0
CVE
CVE
added 2020/12/16 2:7 p.m.47 views

CVE-2020-25621

SolarWinds N-Central 12.3.0.670 is affected by an authentication flaw in its local database: access is permitted without authentication, relying only on network interface restrictions. The database reportedly stores keys and passwords, implying potential credential exposure if access is gained. P...

8.4CVSS8.1AI score0.00536EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2020/12/11 12:0 a.m.9 views

Mcafee Database Security Server and Mcafee Database Security Sensor Encryption Issue Vulnerability

Mcafee Database Security Server and Mcafee Database Security sensor are both products of Mcafee Corporation, China.Mcafee Database Security Server is a database security software. Mcafee Database Security Server is a database security software that provides users with an overall view of the...

6.3CVSS6.9AI score0.00172EPSS
SaveExploits0References1
NVD
NVD
added 2020/12/10 12:15 a.m.32 views

CVE-2020-7339

Use of a Broken or Risky Cryptographic Algorithm vulnerability in McAfee Database Security Server and Sensor prior to 4.8.0 in the form of a SHA1 signed certificate that would allow an attacker on the same local network to potentially intercept communication between the Server and Sensors...

6.3CVSS6.2AI score0.00172EPSS
SaveExploits0References1
OSV
OSV
added 2020/12/10 12:15 a.m.7 views

CVE-2020-7339

Use of a Broken or Risky Cryptographic Algorithm vulnerability in McAfee Database Security Server and Sensor prior to 4.8.0 in the form of a SHA1 signed certificate that would allow an attacker on the same local network to potentially intercept communication between the Server and Sensors...

6.3CVSS5.8AI score0.00172EPSS
SaveExploits0References1
Prion
Prion
added 2020/12/10 12:15 a.m.23 views

Design/Logic Flaw

Use of a Broken or Risky Cryptographic Algorithm vulnerability in McAfee Database Security Server and Sensor prior to 4.8.0 in the form of a SHA1 signed certificate that would allow an attacker on the same local network to potentially intercept communication between the Server and Sensors...

5.8CVSS6.2AI score0.00172EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/12/09 11:15 p.m.43 views

CVE-2020-7339 Database Security(DBS)-Use of a Broken or Risky Cryptographic Algorithm

Use of a Broken or Risky Cryptographic Algorithm vulnerability in McAfee Database Security Server and Sensor prior to 4.8.0 in the form of a SHA1 signed certificate that would allow an attacker on the same local network to potentially intercept communication between the Server and Sensors...

6.3CVSS6.3AI score0.00172EPSS
SaveExploits0References1
CVE
CVE
added 2020/12/09 11:15 p.m.69 views

CVE-2020-7339

CVE-2020-7339 affects McAfee Database Security Server and Sensor prior to version 4.8.0. The vulnerability stems from the use of SHA-1 signed certificates, enabling an attacker on the same local network to potentially intercept communication between the Server and Sensors. Publicly available conn...

6.3CVSS6.2AI score0.00172EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2020/12/09 12:0 a.m.15 views

Mcafee Database Security Server 和 Sensor 加密问题漏洞

Mcafee Database Security Server and Mcafee Database Security sensor are both products of Mcafee Corporation, China.Mcafee Database Security Server is a database security software. Mcafee Database Security Server is a database security software that provides users with an overall view of the...

6.3CVSS6.6AI score0.00172EPSS
SaveExploits0References3
CNVD
CNVD
added 2020/12/02 12:0 a.m.3 views

SQL Injection Vulnerability in ILAS III Digital Library System (CNVD-2020-70576)

ILAS III digital library is a set of library automation integrated system that can adapt to the use of libraries of different levels, scales and types at home and abroad, which is undertaken and organized by the Shenzhen Library. ILAS III digital library system SQL injection vulnerability,...

7.5AI score
SaveExploits0
MongoDB
MongoDB
added 2020/11/30 12:0 a.m.39 views

Invariant failure in applyOps

A user authorized to perform database queries may trigger denial of service by issuing specially crafted applyOps invocations. This issue affects: MongoDB Inc. MongoDB Server v4.0 versions prior to 4.0.10; v3.6 versions prior to 3.6.13...

6.5CVSS4.4AI score0.01233EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2020/11/30 12:0 a.m.2 views

SQL Injection Vulnerability in Zhengzhou Lanchuang Culture Communication Co.

Lantronix Network Marketing belongs to Zhengzhou Lantronix Culture Communication Co., Ltd, which is a professional network marketing service provider in China, focusing on seo marketing, sem marketing and social media marketing, etc. Lantronix Network Marketing is a professional network marketing...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2020/11/29 12:0 a.m.2 views

SQL Injection Vulnerability in mkcms Backend

mkcms is a film and television management system developed specifically for different webmasters. There are SQL injection vulnerabilities in the mkcms backend, which can be exploited by attackers to gain access to sensitive database information...

8.4AI score
SaveExploits0
CNVD
CNVD
added 2020/11/27 12:0 a.m.1 views

SQL Injection Vulnerability in Xinbu Supply Chain System of Xi'an Xinbu Electronic Information Technology Co.

Xinbu Supply Chain System is a software that realizes retailer-supplier collaboration, new type of zero-supply relationship, online ordering, and online reconciliation functions. Xi'an Xinbu Supply Chain System of Xi'an Xinbu Electronic Information Technology Co., Ltd. suffers from a SQL injectio...

7.4AI score
SaveExploits0
OSV
OSV
added 2020/11/23 6:15 p.m.15 views

CVE-2018-20803

A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which loop indefinitely in mathematics processing while retaining locks. This issue affects MongoDB Server v4.0 versions prior to 4.0.5; MongoDB Server v3.6 versions prior to 3.6.10...

6.5CVSS6.2AI score
SaveExploits0References1
CVE
CVE
added 2020/11/23 5:30 p.m.73 views

CVE-2018-20803

CVE-2018-20803 affects MongoDB Server: 4.0 prior to 4.0.5; 3.6 prior to 3.6.10; 3.4 prior to 3.4.19. Description: authenticated user can trigger a denial-of-service by sending specially crafted queries, causing an endless loop in mathematics processing while holding locks. Impact: availability de...

6.5CVSS6.2AI score0.01269EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder