Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2026/03/05 1:57 a.m.5 views

CVE-2025-66944

SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote attacker to execute arbitrary code via the query parameter in the search API endpoint...

9.8CVSS6.3AI score0.00767EPSS
Exploits1References1
EUVD
EUVD
added 2026/03/04 6:31 p.m.3 views

EUVD-2025-208283

SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote attacker to execute arbitrary code via the query parameter in the search API endpoint...

6.3AI score0.00767EPSS
Exploits1References3
OSV
OSV
added 2026/03/04 5:16 p.m.2 views

CVE-2025-66944

SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote attacker to execute arbitrary code via the query parameter in the search API endpoint...

9.8CVSS6.3AI score0.00767EPSS
Exploits1References2
CVE
CVE
added 2026/03/04 12:0 a.m.6 views

CVE-2025-66944

CVE-2025-6694 (typo in ID in input; actual CVE-2025-66944) has a confirmed SQL Injection in the product vran-dev databaseir v1.0.7 and earlier. The vulnerability allows a remote attacker to execute arbitrary code via the query parameter in the search API endpoint, indicating a server-side injecti...

9.8CVSS6.3AI score0.00767EPSS
Exploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/04 12:0 a.m.3 views

CVE-2025-66944

SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote attacker to execute arbitrary code via the query parameter in the search API endpoint...

6.3AI score0.00767EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/03/04 12:0 a.m.3 views

CVE-2025-66944

SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote attacker to execute arbitrary code via the query parameter in the search API endpoint...

6.3AI score0.00767EPSS
Exploits1References2
Cvelist
Cvelist
added 2026/03/04 12:0 a.m.30 views

CVE-2025-66944

SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote attacker to execute arbitrary code via the query parameter in the search API endpoint...

0.00767EPSS
Exploits1References2
Rows per page
Query Builder