Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2026/03/05 1:57 a.m.•17 views

CVE-2025-66944

SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote attacker to execute arbitrary code via the query parameter in the search API endpoint...

9.8CVSS6.3AI score0.00797EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/03/04 6:31 p.m.•15 views

EUVD-2025-208283

SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote attacker to execute arbitrary code via the query parameter in the search API endpoint...

6.3AI score0.00797EPSS
SaveExploits1References3
CVE
CVE
•added 2026/03/04 12:00 a.m.•24 views

CVE-2025-66944

CVE-2025-6694 (typo in ID in input; actual CVE-2025-66944) has a confirmed SQL Injection in the product vran-dev databaseir v1.0.7 and earlier. The vulnerability allows a remote attacker to execute arbitrary code via the query parameter in the search API endpoint, indicating a server-side injecti...

9.8CVSS6.8AI score0.00797EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2026/03/04 12:00 a.m.•49 views

CVE-2025-66944

SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote attacker to execute arbitrary code via the query parameter in the search API endpoint...

0.00797EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/03/04 12:00 a.m.•7 views

CVE-2025-66944

SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote attacker to execute arbitrary code via the query parameter in the search API endpoint...

6.8AI score0.00797EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2026/03/04 12:00 a.m.•10 views

CVE-2025-66944

SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote attacker to execute arbitrary code via the query parameter in the search API endpoint...

6.3AI score0.00797EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/04 12:00 a.m.•1 views

CVE-2025-66944: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote attacker to execute arbitrary code via the query parameter in the search API endpoint...

9.8CVSS6.6AI score0.00797EPSS
SaveExploits1References1
OSV
OSV
•added 2026/03/04 12:00 a.m.•12 views

CVE-2025-66944

SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote attacker to execute arbitrary code via the query parameter in the search API endpoint...

9.8CVSS6.3AI score
SaveExploits0References4
Rows per page
Query Builder