Denial of Service Vulnerability in GBase 8a Database of Tianjin Nanda General Data Technology Co.

GBase 8a is a column-store relational database management system with efficient and complex statistical and analytical capabilities, capable of managing terabytes of data. A denial-of-service vulnerability exists in the GBase 8a database of Tianjin Nanda General Data Technology Company Limited,...

SQL Injection Vulnerability in the Website Building System of Ruian Uber Technology Co. Ltd (CNVD-2020-48644)

Ltd. is a social mass to provide web design and production, Baidu / Google SEO optimization and promotion, cell phone website, WeChat public platform, foreign trade monitoring enterprise mailboxes and other network information consulting services, product albums catalogs, corporate CD-ROM design...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' in SRS Simple Hits Counter Plugin for WordPress 1.0.3 and 1.0.4 allows a remote, unauthenticated attacker to determine the value of database fields...

SQL Injection Vulnerability in Website Building System of Shanghai Youpin Network Technology Co.

Ltd. is a provider of website development and search engine marketing services. There is a SQL injection vulnerability in the website building system of Shanghai Youpin Network Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

WebChess SQL Injection Vulnerability

WebChess is a web-based online chess game. A SQL injection vulnerability exists in WebChess version 1.0. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit this vulnerability to execute illegal SQL command...

SQL injection vulnerability in ro***.php page of Jinan Ganan Information Technology Co.

Ltd. is a high-tech company engaged in Internet services, mainly for enterprises to provide website construction, website promotion, full network marketing, large-scale mall and platform construction, micro letter development, mobile client development, office OA and other services. Jinan Guanan...

Unspecified Vulnerability in IBM DB2

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A security vulnerability exists in IBM DB2. An attacker can exploit the vulnerability to cause a denia...

IBM DB2 Competitive Conditions Issue Vulnerability

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A security vulnerability exists in IBM DB2 including DB2 Connect Server. A local attacker could exploi...

CVE-2020-4414

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local attacker to perform unauthorized actions on the system, caused by improper usage of shared memory. By sending a specially-crafted request, an attacker could exploit this vulnerabili...

CVE-2020-4363

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. IBM X-Force ID: 178960...

SQL Injection Vulnerability in Decoction Management System of Beijing Donghuayuan Medical Equipment Co.

Beijing Donghuayuan Medical Equipment Co., Ltd. is a national high-tech enterprise and a key high-tech enterprise of the National Torch Program. There is a SQL injection vulnerability in the Decoction Management System of Beijing Donghuayuan Medical Equipment Co., Ltd. which can be exploited by...

SQL Injection Vulnerability in Website Building System of Ningbo Yongguan Network Technology Co.

Ningbo Yongguan Network Technology Co., Ltd. specializes in ningbo website construction company, ningbo website design, ningbo website production company, ningbo website promotion, ningbo do website and other businesses. Ningbo Yongguan Network Technology Co., Ltd. website building system there a...

Multiple SQL Injection Vulnerabilities in DM Enterprise Website System Backend

DM enterprise building system is developed by php + mysql a set of specialized in small and medium-sized enterprise website construction of open source cms. DM enterprise website building system background there are multiple SQL injection vulnerabilities. Attackers can use the vulnerability to...

SQL Injection Vulnerability in the Website Building System of Shenzhen ShuoWin Interactive Information Technology Co.

Shenzhen ShuoWin Interactive Information Technology Co., Ltd. was founded in October 2006, is a web2.0 application website and launched SNS business services. There is a SQL injection vulnerability in the website system of Shenzhen ShuoWin Interactive Information Technology Co., Ltd, which can be...

SQL Injection Vulnerability in YUNUCMS of Zhenjiang Yunyu Network Technology Co., Ltd (CNVD-2020-41337)

CloudYou CMS is a free + open source urban substation content management system based on TP5.0 framework as the core development. Zhenjiang Yunyu Network Technology Co., Ltd. YUNUCMS SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Virtual Airlines Manager

VAM originated as a system developed for the Spanish VA with the goal of having a complete web system independent of other systems. A SQL injection vulnerability exists in Virtual Airlines Manager, which can be exploited by an attacker to obtain sensitive information about a database...

SQL injection vulnerability in new*** page of website building system of Henan Yue Longmen Technology Co.

Henan Yue Longmen Technology Co., Ltd. is a website construction, software development and promotion and marketing of a comprehensive network technology company. Ltd. station building system new page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive...

WatermelonDB SQL Injection Vulnerability

WatermelonDB is the next generation React database for building powerful React and React Native applications that can scale from hundreds to tens of thousands of records while remaining fast. A SQL injection vulnerability in WatermelonDB versions prior to 0.15.1 and prior to 0.16.2, which stems...

CVE-2020-4035

Summary: WatermelonDB (package "@nozbe/watermelondb") before versions 0.15.1 and 0.16.2 is affected by a SQL Injection vulnerability in the iOS adapter that can, via a maliciously crafted record ID, delete all or selected records and render the app unusable. What is affected: WatermelonDB with vu...

SQL Injection Vulnerability in Appform for Leave System

Qixing Leave System includes leave, overtime, approval, annual leave, transfer, work calendar and report modules. SQL injection vulnerability exists in the Leave System Appform, which can be exploited by attackers to obtain sensitive information from the database...