Lucene search
+L

2341 matches found

EUVD
EUVD
•added 2026/03/04 6:31 p.m.•13 views

EUVD-2019-19730

NCrypted Jobgator contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the experience parameter. Attackers can send POST requests to the agents Find-Jobs endpoint with malicious experience values to extract...

8.8CVSS6.1AI score0.00241EPSS
SaveExploits0References3
NVD
NVD
•added 2026/03/04 6:16 p.m.•25 views

CVE-2019-25504

NCrypted Jobgator contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the experience parameter. Attackers can send POST requests to the agents Find-Jobs endpoint with malicious experience values to extract...

8.8CVSS0.00241EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/03/04 5:15 p.m.•13 views

CVE-2019-25504 NCrypted Jobgator Lastest SQL Injection via agents Find-Jobs

NCrypted Jobgator contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the experience parameter. Attackers can send POST requests to the agents Find-Jobs endpoint with malicious experience values to extract...

8.8CVSS5.9AI score0.00241EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/03/04 5:15 p.m.•5 views

CVE-2019-25504

NCrypted Jobgator contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the experience parameter. Attackers can send POST requests to the agents Find-Jobs endpoint with malicious experience values to extract...

8.8CVSS6.1AI score0.00241EPSS
SaveExploits0References2
CVE
CVE
•added 2026/03/04 5:15 p.m.•25 views

CVE-2019-25504

NCrypted Jobgator contains an SQL injection vulnerability in the Find-Jobs endpoint. The vulnerability is triggered via the experience parameter, allowing unauthenticated attackers to manipulate database queries and extract sensitive data. An attacker can send crafted POST requests to the agents ...

8.8CVSS5.9AI score0.00241EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/04 12:00 a.m.•2 views

CVE-2019-25504: Improper Neutralization of Special Elements used in an SQL Command

NCrypted Jobgator contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the experience parameter. Attackers can send POST requests to the agents Find-Jobs endpoint with malicious experience values to extract...

8.8CVSS5.9AI score0.00241EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/04 12:00 a.m.•14 views

PT-2026-22959

NCrypted Jobgator contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the experience parameter. Attackers can send POST requests to the agents Find-Jobs endpoint with malicious experience values to extract...

8.8CVSS6.1AI score0.00241EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/03/03 1:37 p.m.•15 views

CVE-2025-10350

SQL Injection vulnerability in "imageserver" module when processing C-FIND queries in CGM NETRAAD software allows attacker connected to PACS gaining access to database, including data processed by GCM CLININET software.This issue affects CGM NETRAAD with imageserver module in versions before 7.9....

8.8CVSS5.8AI score0.00195EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/03/03 12:00 a.m.•15 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005537)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005537 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: check if leafidx greater than num leaves per dmap tree syzbot report a out of bounds in...

7.8CVSS6.2AI score0.00287EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/03/03 12:00 a.m.•11 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005534)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005534 advisory. In the Linux kernel, the following vulnerability has been resolved: vfs: fix race between eviceinodes and findinode&iput Hi, all Recently I noticed a bug1 in btrfs,...

7.8CVSS6AI score0.00203EPSS
SaveExploits0References3
NVD
NVD
•added 2026/03/02 12:15 p.m.•21 views

CVE-2025-10350

SQL Injection vulnerability in "imageserver" module when processing C-FIND queries in CGM NETRAAD software allows attacker connected to PACS gaining access to database, including data processed by GCM CLININET software.This issue affects CGM NETRAAD with imageserver module in versions before 7.9....

8.8CVSS0.00195EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/03/02 11:09 a.m.•46 views

CVE-2025-10350 SQL injection in CGM NETRAAD

SQL Injection vulnerability in "imageserver" module when processing C-FIND queries in CGM NETRAAD software allows attacker connected to PACS gaining access to database, including data processed by GCM CLININET software.This issue affects CGM NETRAAD with imageserver module in versions before 7.9....

8.8CVSS0.00195EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/03/02 11:09 a.m.•42 views

CVE-2025-10350

SQL Injection vulnerability in "imageserver" module when processing C-FIND queries in CGM NETRAAD software allows attacker connected to PACS gaining access to database, including data processed by GCM CLININET software.This issue affects CGM NETRAAD with imageserver module in versions before 7.9....

8.8CVSS5.8AI score0.00195EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/03/02 11:09 a.m.•10 views

CVE-2025-10350 SQL injection in CGM NETRAAD

SQL Injection vulnerability in "imageserver" module when processing C-FIND queries in CGM NETRAAD software allows attacker connected to PACS gaining access to database, including data processed by GCM CLININET software.This issue affects CGM NETRAAD with imageserver module in versions before 7.9....

8.8CVSS5.8AI score0.00195EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/03/02 12:00 a.m.•23 views

PT-2026-22572

Name of the Vulnerable Software and Affected Versions CGM NETRAAD versions prior to 7.9.0 Description A SQL Injection issue exists in the "imageserver" module when processing C-FIND queries. This affects CGM NETRAAD software and potentially allows an attacker connected to a PACS system to gain...

8.8CVSS5.8AI score0.00195EPSS
SaveExploits0References16
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/02 12:00 a.m.•3 views

CVE-2025-10350: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in "imageserver" module when processing C-FIND queries in CGM NETRAAD software allows attacker connected to PACS gaining access to database, including data processed by GCM CLININET software.This issue affects CGM NETRAAD with imageserver module in versions before 7.9....

8.8CVSS5.8AI score0.00195EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/03/02 12:00 a.m.•18 views

The vulnerability of the find_and_map_user_pages() function in the drivers/accel/qaic/qaic_control.c file of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the findandmapuserpages function in the Linux kernel’s drivers/accel/qaic/qaiccontrol.c file is related to incorrect validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS7.2AI score0.00142EPSS
SaveExploits0References10Affected Software8
CNNVD
CNNVD
•added 2026/03/02 12:00 a.m.•23 views

CGM NETRAAD SQL注入漏洞

CGM NETRAAD is a radiology information system and imaging archiving system developed by the German company CGM. Versions of CGM NETRAAD prior to 7.9.0 contained a SQL injection vulnerability. This vulnerability arises from handling C-FIND queries, potentially allowing unauthorized access to the...

8.8CVSS5.9AI score0.00195EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/03/02 12:00 a.m.•30 views

MiracleLinux 8 : kernel-4.18.0-553.107.1.el8_10 (AXSA:2026-222:15)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-222:15 advisory. kernel: pagepool: Fix use-after-free in pagepoolrecycleinring CVE-2025-38129 kernel: Linux kernel:A use-after-free in bridge multicast in...

7.8CVSS7.1AI score0.0028EPSS
SaveExploits1References6
OSV
OSV
•added 2026/02/26 10:40 p.m.•13 views

CVE-2026-28225 Manyfold has IDOR in ModelFilesController

Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. Prior to version 0.133.1, the getmodel method in ModelFilesController line 158-160 loads models using Model.findparamparams:modelid without policyscope, bypassing...

5.3CVSS5.8AI score
SaveExploits0References4
Rows per page
Query Builder