Lucene search
K

15 matches found

CNNVD
CNNVD
added 2026/05/12 12:0 a.m.3 views

SAP HANA Deployment Infrastructure deploy library SQL注入漏洞

SAP HANA Deployment Infrastructure deploy library is a deployment support library developed by SAP, a German company, for the deployment and lifecycle management of SAP HANA applications. The SAP HANA Deployment Infrastructure deploy library contains a SQL injection vulnerability. This...

3.4CVSS5.9AI score0.00007EPSS
Exploits0References1
OSV
OSV
added 2026/02/20 5:25 p.m.3 views

CVE-2026-26745

OpenSourcePOS 3.4.1 has a second order SQL Injection vulnerability in the handling of the currencysymbol configuration field. Although the input is initially stored without immediate execution, it is later concatenated into a dynamically constructed SQL query without proper sanitization or...

5.3CVSS6.2AI score0.00065EPSS
Exploits1References2
CVE
CVE
added 2026/02/20 12:0 a.m.6 views

CVE-2026-26745

OpenSourcePOS 3.4.1 is affected by a second‑order SQLi in the currency_symbol configuration field. The input is stored without sanitization and later concatenated into a dynamically constructed SQL query, allowing an attacker who can modify currency_symbol to inject arbitrary SQL that is executed...

5.3CVSS6.1AI score0.00065EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2025/12/09 4:17 p.m.0 views

CVE-2025-10655

SQL Injection in Frappe HelpDesk in the dashboard getdashboarddata due to unsafe concatenation of user-controlled parameters into dynamic SQL statements.This issue affects Frappe HelpDesk: 1.14.0...

8.6CVSS5.8AI score0.00033EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/11/27 6:2 p.m.5 views

CVE-2025-11461

Multiple SQL Injections in Frappe CRM Dashboard Controller due to unsafe concatenation of user-controlled parameters into dynamic SQL statements. This issue affects Frappe CRM: 1.53.1...

8.8CVSS7.5AI score0.00045EPSS
Exploits1References1
EUVD
EUVD
added 2025/11/26 6:31 p.m.1 views

EUVD-2025-199743

Multiple SQL Injections in Frappe CRM Dashboard Controller due to unsafe concatenation of user-controlled parameters into dynamic SQL statements. This issue affects Frappe CRM: 1.53.1...

7.1CVSS7AI score0.00045EPSS
Exploits1References4
OSV
OSV
added 2024/08/15 12:0 p.m.7 views

RUSTSEC-2024-0363 Binary Protocol Misinterpretation caused by Truncating or Overflowing Casts

The following presentation at this year's DEF CON was brought to our attention on the SQLx Discord: SQL Injection isn't Dead: Smuggling Queries at the Protocol Level Archive link for posterity. Essentially, encoding a value larger than 4GiB can cause the length prefix in the protocol to overflow,...

8.4AI score
Exploits0References3
Fedora
Fedora
added 2018/10/10 9:55 p.m.22 views

[SECURITY] Fedora 27 Update: mongodb-3.4.11-4.fc27

Mongo from "humongous" is a high-performance, open source, schema-free document-oriented database. MongoDB is written in C++ and offers the follow ing features: Collection oriented storage: easy storage of object/JSON-style data Dynamic queries Full index support, including on inner objects and...

5.5CVSS0.3AI score0.00776EPSS
Exploits1
Fedora
Fedora
added 2016/10/06 10:23 p.m.23 views

[SECURITY] Fedora 24 Update: mongodb-3.2.8-2.fc24

Mongo from "humongous" is a high-performance, open source, schema-free document-oriented database. MongoDB is written in C++ and offers the follow ing features: Collection oriented storage: easy storage of object/JSON-style data Dynamic queries Full index support, including on inner objects and...

5.5CVSS0.3AI score0.00073EPSS
Exploits0
Fedora
Fedora
added 2016/10/03 8:22 p.m.23 views

[SECURITY] Fedora 23 Update: mongodb-3.0.12-2.fc23

Mongo from "humongous" is a high-performance, open source, schema-free document-oriented database. MongoDB is written in C++ and offers the follow ing features: Collection oriented storage: easy storage of object/JSON-style data Dynamic queries Full index support, including on inner objects and...

5.5CVSS0.3AI score0.00073EPSS
Exploits0
Fedora
Fedora
added 2016/09/27 12:55 a.m.30 views

[SECURITY] Fedora 25 Update: mongodb-3.2.8-2.fc25

Mongo from "humongous" is a high-performance, open source, schema-free document-oriented database. MongoDB is written in C++ and offers the follow ing features: Collection oriented storage: easy storage of object/JSON-style data Dynamic queries Full index support, including on inner objects and...

5.5CVSS0.3AI score0.00073EPSS
Exploits0
Fedora
Fedora
added 2015/03/29 4:57 a.m.27 views

[SECURITY] Fedora 21 Update: mongodb-2.4.13-1.fc21

Mongo from "humongous" is a high-performance, open source, schema-free document-oriented database. MongoDB is written in C++ and offers the follow ing features: Collection oriented storage: easy storage of object/JSON-style data Dynamic queries Full index support, including on inner objects and...

5CVSS0.3AI score0.01693EPSS
Exploits0
Fedora
Fedora
added 2015/03/21 5:1 a.m.28 views

[SECURITY] Fedora 22 Update: mongodb-2.6.8-1.fc22

Mongo from "humongous" is a high-performance, open source, schema-free document-oriented database. MongoDB is written in C++ and offers the follow ing features: Collection oriented storage: easy storage of object/JSON-style data Dynamic queries Full index support, including on inner objects and...

5CVSS0.3AI score0.01693EPSS
Exploits0
OpenVAS
OpenVAS
added 2013/04/08 12:0 a.m.39 views

Fedora Update for mongodb FEDORA-2013-4531

Check for the Version of mongodb OpenVAS Vulnerability Test Fedora Update for mongodb FEDORA-2013-4531 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

6CVSS8.1AI score0.52168EPSS
Exploits7References2
Fedora
Fedora
added 2013/04/07 12:32 a.m.31 views

[SECURITY] Fedora 18 Update: mongodb-2.2.3-4.fc18

Mongo from "humongous" is a high-performance, open source, schema-free document-oriented database. MongoDB is written in C++ and offers the follow ing features: Collection oriented storage: easy storage of object/JSON-style data Dynamic queries Full index support, including on inner objects and...

6CVSS0.3AI score0.52168EPSS
Exploits7
Rows per page
Query Builder