Lucene search
K

23 matches found

NVD
NVD
added 5 days ago7 views

CVE-2019-25755

Joomla Component vReview 1.9.11 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the cmId parameter. Attackers can send POST requests to the editReview task endpoint with URL-encoded SQL UNION...

8.8CVSS0.00366EPSS
Exploits0References4
EUVD
EUVD
added 5 days ago4 views

EUVD-2019-20191

Joomla Component vReview 1.9.11 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the cmId parameter. Attackers can send POST requests to the editReview task endpoint with URL-encoded SQL UNION...

8.8CVSS6.3AI score0.00366EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/05/26 12:0 a.m.10 views

PT-2026-43277

Name of the Vulnerable Software and Affected Versions IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.4 Description IBM Db2 for Linux, UNIX, and Windows, including DB2 Connect Server, stores potentially sensitive information in log files. This data could be accessed an...

5.5CVSS5.8AI score0.00108EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/04/30 12:0 a.m.3 views

PT-2026-36205

Name of the Vulnerable Software and Affected Versions IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.3 Description An authenticated user can cause a denial of service by using a specially crafted SQL query. This issue occurs due to the improper allocation of system...

6.5CVSS5.9AI score0.00245EPSS
Exploits0References5
NVD
NVD
added 2026/02/17 6:20 p.m.5 views

CVE-2025-14689

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 12.1.0 through 12.1.3 could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic with federated objects...

6.5CVSS0.0024EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/17 5:13 p.m.7 views

CVE-2025-36247

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3 is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memo...

7.1CVSS5.7AI score0.00296EPSS
Exploits0References2Affected Software1
EUVD
EUVD
added 2025/11/20 9:30 p.m.4 views

EUVD-2025-198346

Debug information disclosure in the SQL error message to in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to acquire information about the software, PHP and database versions currently in use...

4.3CVSS4.8AI score0.00307EPSS
Exploits1References2
NVD
NVD
added 2025/11/20 8:16 p.m.4 views

CVE-2025-52671

Debug information disclosure in the SQL error message to in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to acquire information about the software, PHP and database versions currently in use...

4.3CVSS0.00307EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/11/20 7:10 p.m.6 views

CVE-2025-52671

Debug information disclosure in the SQL error message to in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to acquire information about the software, PHP and database versions currently in use...

4.3CVSS0.00307EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/11/20 7:10 p.m.3 views

CVE-2025-52671

Debug information disclosure in the SQL error message to in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to acquire information about the software, PHP and database versions currently in use...

4.3CVSS4.8AI score0.00307EPSS
Exploits1References1
CVE
CVE
added 2025/11/20 7:10 p.m.8 views

CVE-2025-52671

CVE-2025-52671 describes an information-disclosure vulnerability in Revive Adserver where SQL error messages reveal debugging details, enabling non-admin users to learn software, PHP, and database versions. Connected sources (CNVD, RH, EUVD, NVD, OSV, CVE/CVEList, and a HackerOne report) consiste...

4.3CVSS6.4AI score0.00307EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2025/11/07 12:0 a.m.4 views

IBM Db2 安全漏洞

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. A security vulnerability exists in IBM Db2 that can be exploited by an attacker to regain access after ...

8.8CVSS6.5AI score0.00139EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2008-2586

Malware in sbrugna...

6.5CVSS6.3AI score0.0137EPSS
Exploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2007-3843

Malware in sbrugna...

7.5CVSS6.4AI score0.03288EPSS
Exploits0References13
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2006-5325

Malware in sbrugna...

7.1CVSS6.3AI score0.03844EPSS
Exploits0References17
RedhatCVE
RedhatCVE
added 2025/05/22 1:32 a.m.8 views

CVE-2011-0785

Unspecified vulnerability in the Oracle Help component in Oracle Database Server 11.1.0.7, 11.2.0.1, 11.2.0.2, 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, and 10.1.0.5; and Oracle Fusion Middleware 11.1.1.2.0, 11.1.1.3.0, and 11.1.1.4.0 allows remote attackers to affect integrity via unknown vectors...

4.3CVSS6.3AI score0.01361EPSS
Exploits0References1
MariaDBUnix
MariaDBUnix
added 2025/03/08 12:0 a.m.5 views

CVE-2023-52968

Disclaimer: This data contains information about vulnerable...

4.9CVSS6.5AI score0.00396EPSS
Exploits0
CNNVD
CNNVD
added 2023/04/18 12:0 a.m.3 views

Oracle Database Server 安全漏洞

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. A security vulnerability exists in Oracle Database Server versions 19c and 21c. An...

6.8CVSS6.5AI score0.00668EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2019/08/06 1:49 p.m.3 views

mysql: Server: Options unspecified vulnerability (CPU Jul 2018)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Options. Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocol...

4.9CVSS7.1AI score0.01933EPSS
Exploits0References5
OSV
OSV
added 2019/07/23 11:15 p.m.1 views

CVE-2019-2753

Vulnerability in the Oracle Text component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via OracleNet to compromise Orac...

4.6CVSS6.1AI score0.00887EPSS
Exploits0References1
Rows per page
Query Builder