Lucene search
K

10 matches found

ATTACKERKB
ATTACKERKB
added 2026/04/22 7:45 a.m.1 views

CVE-2026-4119

The Create DB Tables plugin for WordPress is vulnerable to authorization bypass in all versions up to and including 1.2.1. The plugin registers adminpost action hooks for creating tables adminpostaddtable and deleting tables adminpostdeletedbtable without implementing any capability checks via...

9.1CVSS5.8AI score0.0003EPSS
Exploits0References14
EUVD
EUVD
added 2025/10/21 3:30 p.m.2 views

EUVD-2025-35175

SQL injection vulnerability in the fields of warehouse document filtering form in SIMPLE.ERP software allows logged-in user to send a payload of up to 20 characters. Identified use case allows to delete tables with a name of maximum 6 characters. We weren't able to identify a way to exfiltrate da...

7.1CVSS7.4AI score0.00036EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/09/09 2:7 a.m.5 views

CVE-2025-42916 Missing input validation vulnerability in SAP S/4HANA (Private Cloud or On-Premise)

Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbitrary database tables, if the tables are not protected by an authorization group. This leads to a high impact on integrity and availability of the database but no impact on...

8.1CVSS0.00041EPSS
Exploits0References2
CVE
CVE
added 2025/09/09 2:7 a.m.14 views

CVE-2025-42916

CVE-2025-42916 concerns a missing input validation in SAP S/4HANA/ABAP reports that could allow an attacker with high privileges to delete contents of arbitrary database tables not protected by an authorization group. The impact is high on integrity and availability with no confidentiality impact...

8.1CVSS6.4AI score0.00041EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/09/09 2:7 a.m.3 views

CVE-2025-42916 Missing input validation vulnerability in SAP S/4HANA (Private Cloud or On-Premise)

Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbitrary database tables, if the tables are not protected by an authorization group. This leads to a high impact on integrity and availability of the database but no impact on...

8.1CVSS6.4AI score0.00041EPSS
Exploits0References2
WPVulnDB
WPVulnDB
added 2024/04/17 12:0 a.m.14 views

AffiEasy < 1.1.6 - Cross-Site Request Forgery

Description The AffiEasy plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.4. This is due to missing or incorrect nonce validation on the delete-table action. This makes it possible for unauthenticated attackers to delete tables via a forged...

4.3CVSS6.4AI score0.002EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2021/07/20 11:15 a.m.2 views

DEBIAN-CVE-2021-27021

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query...

8.8CVSS8.1AI score0.00626EPSS
Exploits0References1
OSV
OSV
added 2021/07/20 11:15 a.m.1 views

UBUNTU-CVE-2021-27021

A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query...

8.8CVSS5.9AI score0.00626EPSS
Exploits0References3
NVD
NVD
added 2019/08/20 3:15 p.m.11 views

CVE-2015-9332

The uninstall plugin before 1.2 for WordPress has CSRF to delete all tables via the wp-admin/admin-ajax.php?action=uninstall URI...

6.5CVSS6.6AI score0.00103EPSS
Exploits1References1
CNVD
CNVD
added 2018/11/08 12:0 a.m.2 views

TIBCO ActiveSpaces administrative daemon component cross-site request forgery vulnerability

TIBCO ActiveSpaces is a TIBCO solution for in-memory computing, in-memory data grids, and fault-tolerant datastores. administrative daemon tibdgadmind is one of the daemon components. A cross-site request forgery vulnerability exists in the administrative daemon component in TIBCO ActiveSpaces. A...

8.8CVSS8.7AI score0.00127EPSS
Exploits0References1
Rows per page
Query Builder