Lucene search
+L

5521 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/19 12:00 a.m.•5 views

CVE-2026-25451: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in boldthemes Bold Page Builder bold-page-builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through = 5.6.9...

6.5CVSS5.8AI score0.00238EPSS
SaveExploits0References1
Snyk
Snyk
•added 2026/02/18 10:40 p.m.•7 views

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Overview @langchain/langgraph-checkpoint-mongodb is a LangGraph Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' via the list method in the RedisSaver and ShallowRedisSaver classes when...

7.1CVSS6AI score0.00505EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/02/18 7:30 p.m.•20 views

CVE-2025-13867

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3 could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic...

6.5CVSS5.5AI score0.00247EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/02/18 3:20 p.m.•32 views

Security Bulletin: IBM® Db2® is vulnerable to a denial of service due to insufficient validation in data query logic (CVE-2025-36427)

Summary IBM® Db2® is vulnerable to a denial of service due to insufficient validation in data query logic Vulnerability Details CVEID:CVE-2025-36427 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server could allow a user to cause a denial of service due to insufficient...

6.5CVSS6AI score0.00373EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2026/02/18 1:28 p.m.•15 views

CVE-2025-7631

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Tumeva Internet Technologies Software Information Advertising and Consulting Services Trade Ltd. Co. Tumeva Prime News Software allows SQL Injection.This issue affects Tumeva Prime News Software:...

8.6CVSS5.8AI score0.00289EPSS
SaveExploits0References1
OSV
OSV
•added 2026/02/17 6:20 p.m.•10 views

CVE-2025-13867

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3 could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic...

6.5CVSS5.8AI score0.00247EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/17 6:20 p.m.•24 views

CVE-2025-13867

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3 could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic...

6.5CVSS0.00247EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/02/17 5:13 p.m.•8 views

CVE-2025-13867 IBM Db2 Denial of Service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3 could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic...

6.5CVSS5.8AI score0.00247EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/02/17 8:00 a.m.•28 views

Security Bulletin: IBM® Db2® is vulnerable to a denial of service with a specially crafted query that uses ALTER TABLE operations.(CVE-2025-36407)

Summary IBM® Db2® is vulnerable to a denial of service due to improper neutralization of special elements in data query logic. Vulnerability Details CVEID:CVE-2025-36407 DESCRIPTION: IBM® Db2® is vulnerable to a denial of service with a specially crafted query that uses ALTER TABLE operations...

6.5CVSS5.9AI score0.00312EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/16 12:00 a.m.•4 views

CVE-2025-65717: Improper Neutralization of Input During Web Page Generation

An issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files via user interaction with a crafted HTML page...

4.3CVSS5.9AI score0.00571EPSS
SaveExploits1References1
GithubExploit
GithubExploit
•added 2026/02/15 1:06 a.m.•206 views

Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server

No d...

10CVSS8.3AI score0.93884EPSS
SaveExploits24
Snyk
Snyk
•added 2026/02/12 8:56 p.m.•6 views

Improper Neutralization

Overview Affected versions of this package are vulnerable to Improper Neutralization via the columns output mode, which renders string fields from eBPF events to the terminal without sanitizing control characters or ANSI escape sequences. An attacker can manipulate terminal behavior or display by...

9.8CVSS7.9AI score0.00797EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/02/12 12:50 p.m.•45 views

CVE-2025-10969 SQLi in Farktor Software's E-Commerce Package

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Blind SQL Injection. This issue affects E-Commerce Package: through 27112025...

9.8CVSS0.00392EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/02/11 7:44 p.m.•9 views

CVE-2026-21516

Improper neutralization of special elements used in a command 'command injection' in Github Copilot allows an unauthorized attacker to execute code over a network...

8.8CVSS8AI score0.00916EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/11 12:00 a.m.•38 views

PT-2026-7557

An improper neutralization of directives in statically saved code 'Static Code Injection' vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to access restricted data / files. We have already fixed the...

4.8CVSS5.7AI score0.00738EPSS
SaveExploits0References2
CNVD
CNVD
•added 2026/02/11 12:00 a.m.•52 views

IBM Db2 Denial of Service Vulnerability (CNVD-2026-14678)

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM Db2, which arises from improper neutralization of speci...

5.3CVSS6.8AI score0.00341EPSS
SaveExploits0References1
CNVD
CNVD
•added 2026/02/11 12:00 a.m.•52 views

IBM Db2 Denial of Service Vulnerability (CNVD-2026-14675)

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM Db2 suffers from a denial of service vulnerability that originates from improper neutralization of...

6.5CVSS6.1AI score0.00273EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/11 12:00 a.m.•1 views

CVE-2025-8668: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in E-Kalite Software Hardware Engineering Design and Internet Services Industry and Trade Ltd. Co. Turboard allows Reflected XSS. This issue affects Turboard: from 2025.07 before 2026.02. NOTE:...

9.4CVSS5.9AI score0.00413EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/11 12:00 a.m.•5 views

CVE-2026-2337: Improper Neutralization of Input During Web Page Generation

A vulnerability in Plunet Plunet BusinessManager allows session hijacking, data theft, unauthorized actions on behalf of the user.This issue affects Plunet BusinessManager: 10.15.1...

8.7CVSS5.8AI score0.00384EPSS
SaveExploits0References1
CNVD
CNVD
•added 2026/02/11 12:00 a.m.•20 views

IBM Db2 Denial of Service Vulnerability (CNVD-2026-14673)

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM Db2 suffers from a denial of service vulnerability that originates from improper neutralization of...

6.5CVSS6AI score0.00373EPSS
SaveExploits0References1
Rows per page
Query Builder