MongoDB 3.6 < 3.6.10, 4.0 < 4.0.5 DoS Vulnerability - Windows

MongoDB is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mongodb:mongodb"; if...

SQL Injection Vulnerability in Jinwei Mobile Mall v0.3.7

Jinwei mobile mall system is a micro-business customers with a public number, imitation hand Tao page layout, support embedded video playback. Support customized model specifications, the main specifications support attached pictures, each subdivided model support inventory control, subdivided...

Ocean CMS suffers from SQL injection vulnerability (CNVD-2020-71642)

Ocean CMS is a web content management system based on PHP+MYSQL architecture that can run across platforms. Ocean CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

B&r Automation APROL SQL Injection Vulnerability

B&r Automation APROL is a Linux-based process control system for industrial control applications from B&r Automation Australia. A SQL injection vulnerability exists in versions prior to B&R Industrial Automation APROL R4.2 V7.08, which makes EnMon PHP scripts susceptible to SQL injection attacks...

CVE-2020-27662

In GLPI before 9.5.3, ajax/comments.php has an Insecure Direct Object Reference IDOR vulnerability that allows an attacker to read data from any database table e.g., glpitickets, glpiusers, etc...

SQL injection vulnerability in TEMMOKUMVC in***.php file

TEMMOKUMVC is Pizhou Tianmu Network Technology Co., Ltd. developed a professional PHP MySQL products , using independent MVC framework for large and medium-sized enterprises and open source MVC. TEMMOKUMVC in.php file has a SQL injection vulnerability . Attackers can exploit the vulnerability to...

Vulnerability of the Server component: The MySQL Server database management system component, which allows a hacker to cause service interruptions.

Vulnerability of the MySQL Server component: The DDL system for database management of MySQL Server is vulnerable due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

Vulnerability of the MySQL Server component: Security: Roles of the database management system, allowing attackers to access, modify, add, or delete data.

Vulnerability of the MySQL Server component: Security: Roles of the database management system are related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to gain access to modify, add, or delete data...

GBase 8s database suffers from a local boost vulnerability (CNVD-2020-69447)

GBase 8s is a mature and stable enterprise-level domestic transactional database independently developed by Tianjin Nanda General Data Technology Co. GBase 8s database has a local privilege vulnerability, which can be exploited by an attacker to gain control of the server...

IBM DB2 Arbitrary Code Execution Vulnerability

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM DB2 suffers from an arbitrary code execution vulnerability that can be exploited by an attacker to...

Command Execution Vulnerability in the Backend of Wild Rain Novel CMS (CNVD-2020-68554)

Wild Rain Fiction Content Management System provides a lightweight fiction website solution based on ThinkPHP 5.1+MySQL. Rain Novel cms backend command execution vulnerability , attackers can use the vulnerability to obtain server privileges...

Vulnerability fixed in IBM Db2

IBM has fixed a vulnerability in Db2, Db2 Connect Server and Db2 Accessories Suite. An authenticated malicious person with access to the system could potentially exploit the vulnerability to execute arbitrary code under a user's privileges. IBM has released updates to fix the vulnerability. For...

SQL Vulnerability in KKCMS

KKCMS is an open source video capture and playback system. The system is mainly used to automatically collect film and television resources and provide online playback capabilities. KKCMS has a SQL vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Multimedia Library of Jiangsu Suqian Jindian Technology Co.

Jiangsu Suqian Jindian Technology Co., Ltd. is a private high-tech company, the company is committed to education informatization, library management informatization and library equipment research and development and production, and provide comprehensive solutions. A SQL injection vulnerability...

CVE-2020-4655

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM...

SQL Injection Vulnerability in Website Building System of Chiton Group Co.

hereinafter referred to as "Chitong Group" was formerly known as Guizhou Chitong Network Technology Co. As an Internet business ecological service provider, Chitong Group focuses on the use of marketing service data in various industries, takes data activation as the basis of operation, and...

CVE-2020-26805

In Sentrifugo 3.2, admin can edit employee's informations via this endpoint -- /sentrifugo/index.php/empadditionaldetails/edit/userid/2. In this POST request, "employeeNumId" parameter is affected by SQLi vulnerability. Attacker can inject SQL commands into query, read data from database or write...

Sql injection

In Sentrifugo 3.2, admin can edit employee's informations via this endpoint -- /sentrifugo/index.php/empadditionaldetails/edit/userid/2. In this POST request, "employeeNumId" parameter is affected by SQLi vulnerability. Attacker can inject SQL commands into query, read data from database or write...

Elevation of Privilege Vulnerability in GBase 8s Database of Tianjin Nanda General Data Technology Co.

GBase 8s is a mature and stable enterprise-level domestic transactional database independently developed by Tianjin Nanda General Data Technology Co. A privilege elevation vulnerability exists in the gbase 8s database of Tianjin Nanda General Data Technology Co. Ltd, which can be exploited by...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...