CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

OSV•added 2019/09/30 1:15 p.m.•18 views

CVE-2019-16999

CloudBoot through 2019-03-08 allows SQL Injection via a crafted Status field in JSON data to the api/osinstall/v1/device/getNumByStatus URI...

9.8CVSS7.4AI score0.01482EPSS

SaveExploits1References1

NVD•added 2019/09/30 1:15 p.m.•31 views

CVE-2019-16999

CloudBoot through 2019-03-08 allows SQL Injection via a crafted Status field in JSON data to the api/osinstall/v1/device/getNumByStatus URI...

9.8CVSS9.7AI score0.01482EPSS

SaveExploits1References1

Cvelist•added 2019/09/30 12:35 p.m.•32 views

CVE-2019-16999

CloudBoot through 2019-03-08 allows SQL Injection via a crafted Status field in JSON data to the api/osinstall/v1/device/getNumByStatus URI...

9.7AI score0.01482EPSS

SaveExploits1References1

Positive Technologies•added 2019/09/30 12:00 a.m.•8 views

PT-2019-14918

Name of the Vulnerable Software and Affected Versions CloudBoot versions prior to 2019-03-08 Description The issue allows for SQL Injection via a crafted Status field in JSON data to the "api/osinstall/v1/device/getNumByStatus" URI. Recommendations For CloudBoot versions prior to 2019-03-08,...

9.8CVSS0.01482EPSS

SaveExploits1References3

Rapid7 Vulnerability Database (full)•added 2019/09/30 12:00 a.m.•11 views

CVE-2019-16999: Improper Neutralization of Special Elements used in an SQL Command

CloudBoot through 2019-03-08 allows SQL Injection via a crafted Status field in JSON data to the api/osinstall/v1/device/getNumByStatus URI...

9.8CVSS8.2AI score0.01482EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by