Lucene search
+L

18 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 10:43 a.m.•13 views

CVE-2022-26245

Falcon-plus v0.3 was discovered to contain a SQL injection vulnerability via the parameter grpName in /config/service/host.go...

9.8CVSS8AI score0.14844EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2022-1354

Malicious code in bioql PyPI...

9.8CVSS9.3AI score0.14844EPSS
SaveExploits1References3
NVD
NVD
•added 2023/07/05 6:15 p.m.•32 views

CVE-2023-33335

Cross Site Scripting XSS in Sophos Sophos iView The EOL was December 31st 2020 in grpname parameter that allows arbitrary script to be executed...

6.1CVSS6AI score0.00587EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2023/07/05 6:15 p.m.•9 views

CVE-2023-33335

Cross Site Scripting XSS in Sophos Sophos iView The EOL was December 31st 2020 in grpname parameter that allows arbitrary script to be executed...

6.1CVSS5.8AI score0.00587EPSS
SaveExploits0References3
Prion
Prion
•added 2023/07/05 6:15 p.m.•32 views

Cross site scripting

Cross Site Scripting XSS in Sophos Sophos iView The EOL was December 31st 2020 in grpname parameter that allows arbitrary script to be executed...

5.8CVSS6AI score0.00587EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/07/05 12:00 a.m.•24 views

CVE-2023-33335

Cross Site Scripting XSS in Sophos Sophos iView The EOL was December 31st 2020 in grpname parameter that allows arbitrary script to be executed...

6.3AI score0.00587EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/05 12:00 a.m.•6 views

CVE-2023-33335: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in Sophos Sophos iView The EOL was December 31st 2020 in grpname parameter that allows arbitrary script to be executed...

6.1CVSS6.4AI score0.00587EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/07/05 12:00 a.m.•14 views

PT-2023-24303 · Sophos · Sophos Iview

Name of the Vulnerable Software and Affected Versions: Sophos Sophos iView affected versions not specified Description: The issue is related to Cross Site Scripting XSS that allows arbitrary script to be executed. This is specifically due to a problem in the grpname parameter. There is no...

6.1CVSS5.9AI score0.00587EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2022/03/28 12:00 a.m.•40 views

SQLinjection in falcon-plus

Falcon-plus v0.3 was discovered to contain a SQL injection vulnerability via the parameter grpName in /config/service/host.go...

9.8CVSS4AI score0.14844EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2022/03/28 12:00 a.m.•62 views

GHSA-76J4-GGGQ-7RG9 SQLinjection in falcon-plus

Falcon-plus v0.3 was discovered to contain a SQL injection vulnerability via the parameter grpName in /config/service/host.go...

9.8CVSS9.8AI score0.14844EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/03/27 2:15 p.m.•6 views

CVE-2022-26245

Falcon-plus v0.3 was discovered to contain a SQL injection vulnerability via the parameter grpName in /config/service/host.go...

9.8CVSS5.9AI score0.14844EPSS
SaveExploits1References2
NVD
NVD
•added 2022/03/27 2:15 p.m.•34 views

CVE-2022-26245

Falcon-plus v0.3 was discovered to contain a SQL injection vulnerability via the parameter grpName in /config/service/host.go...

9.8CVSS0.14844EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2022/03/27 1:36 p.m.•38 views

CVE-2022-26245

Falcon-plus v0.3 was discovered to contain a SQL injection vulnerability via the parameter grpName in /config/service/host.go...

10AI score0.14844EPSS
SaveExploits1References1
Mend
Mend
•added 2022/03/27 1:36 p.m.•2 views

CVE-2022-26245

Falcon-plus v0.3 was discovered to contain a SQL injection vulnerability via the parameter grpName in /config/service/host.go...

9.8CVSS0.14844EPSS
SaveExploits1References4
OSV
OSV
•added 2022/03/27 1:36 p.m.•34 views

CVE-2022-26245

Falcon-plus v0.3 was discovered to contain a SQL injection vulnerability via the parameter grpName in /config/service/host.go...

8.2AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/03/27 12:00 a.m.•2 views

PT-2022-17738

Name of the Vulnerable Software and Affected Versions Falcon-plus version 0.3 Description A SQL injection issue was discovered in Falcon-plus, affecting the "grpName" parameter in the "/config/service/host.go" endpoint. This allows for potential SQL injection attacks via the grpName parameter...

9.8CVSS5.7AI score0.14844EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/27 12:00 a.m.•3 views

CVE-2022-26245: Improper Neutralization of Special Elements used in an SQL Command

Falcon-plus v0.3 was discovered to contain a SQL injection vulnerability via the parameter grpName in /config/service/host.go...

9.8CVSS8.2AI score0.14844EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/03/27 12:00 a.m.•14 views

Falcon SQL注入漏洞

Falcon is an embedded programming language. An SQL injection vulnerability exists in Falcon-plus v0.3, which originates from the grpName parameter in /config/service/host.go. An attacker could exploit this vulnerability to cause SQL injection...

9.8CVSS5.9AI score0.14844EPSS
SaveExploits1References2
Rows per page
Query Builder