CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

79 matches found

NVD•added 2022/06/01 6:15 p.m.•37 views

CVE-2022-24848

DHIS2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection security vulnerability affects the /api/programs/orgUnits?programs= API endpoint in DHIS2 versions prior to 2.36.10.1 and 2.37.6.1. The system is vulnerable to attack only from...

8.8CVSS0.01087EPSS

SaveExploits0References4

Prion•added 2022/06/01 6:15 p.m.•19 views

Sql injection

6.5CVSS8.8AI score0.01087EPSS

SaveExploits0References4Affected Software1

Cvelist•added 2022/06/01 5:20 p.m.•42 views

CVE-2022-24848 SQL Injection in DHIS2's in OrgUnit program association

8.8CVSS9.1AI score0.01087EPSS

SaveExploits0References4

CVE•added 2022/06/01 5:20 p.m.•748 views

CVE-2022-24848

DHIS2 SQL Injection (CVE-2022-24848) affects the API endpoint /api/programs/orgUnits?programs= for DHIS2 versions prior to 2.36.10.1 and 2.37.6.1. The vulnerability requires the attacker to be logged in as a DHIS2 user and could allow reading, editing, or deleting data in the instance’s database....

8.8CVSS8.9AI score0.01087EPSS

SaveExploits0References4Affected Software1

Vulnrichment•added 2022/06/01 5:20 p.m.•11 views

CVE-2022-24848 SQL Injection in DHIS2's in OrgUnit program association

8.8CVSS8.9AI score0.01087EPSS

SaveExploits0References4

OSV•added 2022/06/01 5:20 p.m.•35 views

CVE-2022-24848 SQL Injection in DHIS2's in OrgUnit program association

8.8CVSS8.7AI score

SaveExploits0References6

OSV•added 2021/11/01 10:15 p.m.•15 views

CVE-2021-41187

DHIS 2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection security vulnerability has been found in specific versions of DHIS2. This vulnerability affects the API endpoints for /api/trackedEntityInstances and api/events in DHIS2. The...

8.8CVSS7.6AI score

SaveExploits0References1

NVD•added 2021/11/01 10:15 p.m.•19 views

CVE-2021-41187

8.8CVSS0.00827EPSS

SaveExploits0References1

Prion•added 2021/11/01 10:15 p.m.•16 views

Sql injection

6.5CVSS8.9AI score0.00827EPSS

SaveExploits0References1Affected Software1

CVE•added 2021/11/01 9:20 p.m.•53 views

CVE-2021-41187

CVE-2021-41187 concerns DHIS 2. A SQL injection vulnerability exists in specific DHIS2 versions (2.32, 2.33, 2.34, 2.35, 2.36) affecting the REST endpoints for /api/trackedEntityInstances and /api/events . Exploitation requires the attacker to be an authenticated DHIS2 user, and successful exploi...

8.8CVSS8.8AI score0.00827EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2021/11/01 9:20 p.m.•26 views

CVE-2021-41187 SQL Injection in DHIS2 Tracker API

8.1CVSS9.1AI score0.00827EPSS

SaveExploits0References1

NVD•added 2021/10/29 2:15 p.m.•18 views

CVE-2021-39179

DHIS 2 is an information system for data capture, management, validation, analytics and visualization. A SQL Injection vulnerability in the Tracker component in DHIS2 Server allows authenticated remote attackers to execute arbitrary SQL commands via unspecified vectors. This vulnerability affects...

8.8CVSS0.01859EPSS

SaveExploits1References3

OSV•added 2021/10/29 2:15 p.m.•17 views

CVE-2021-39179

8.8CVSS8.3AI score

SaveExploits0References3

Prion•added 2021/10/29 2:15 p.m.•16 views

Sql injection

6.5CVSS8.9AI score0.01859EPSS

SaveExploits1References3Affected Software1

Cvelist•added 2021/10/29 1:20 p.m.•32 views

CVE-2021-39179 SQL Injection in DHIS2 Tracker API

8.8CVSS9.2AI score0.01859EPSS

SaveExploits1References3

OSV•added 2021/06/24 4:15 p.m.•15 views

CVE-2021-32704

DHIS 2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection security vulnerability has been found in specific versions of DHIS2. This vulnerability affects the /api/trackedEntityInstances API endpoint in DHIS2 versions 2.34.4, 2.35.2,...

8.8CVSS7.6AI score

SaveExploits0References1

NVD•added 2021/06/24 4:15 p.m.•21 views

CVE-2021-32704

DHIS 2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection security vulnerability has been found in specific versions of DHIS2. This vulnerability affects the /api/trackedEntityInstances API endpoint in DHIS2 versions 2.34.4, 2.35.2,...

8.8CVSS0.00769EPSS

SaveExploits0References1

Cvelist•added 2021/06/24 4:10 p.m.•29 views

CVE-2021-32704 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in dhis2-core

DHIS 2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection security vulnerability has been found in specific versions of DHIS2. This vulnerability affects the /api/trackedEntityInstances API endpoint in DHIS2 versions 2.34.4, 2.35.2,...

8.5CVSS9.1AI score0.00769EPSS

SaveExploits0References1

CVE•added 2021/06/24 4:10 p.m.•68 views

CVE-2021-32704

DHIS 2 SQL injection (CVE-2021-32704) affects the API endpoint /api/trackedEntityInstances in DHIS2 versions 2.34.4, 2.35.2, 2.35.3, 2.35.4, and 2.36.0. The vulnerability is a SQL injection that can be exploited by a logged-in DHIS2 user, potentially allowing reading, editing, and deleting data w...

8.8CVSS9AI score0.00769EPSS

SaveExploits0References1Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by