Lucene search
+L

53 matches found

BDU FSTEC
BDU FSTEC
•added 2025/04/27 12:00 a.m.•18 views

The vulnerability of the UnlockUser method in the software for managing and monitoring deleted objects in telemetry and telemechanics systems of the TeleControl Server Basic allows a hacker to circumvent security restrictions and gain access to write and read arbitrary files.

The vulnerability of the UnlockUser method in software for managing and monitoring remote devices in telemetry and telemechanics systems related to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to bypass security...

9CVSS5.8AI score0.00806EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/04/01 12:00 a.m.•17 views

The vulnerability of the CLI component of the Fortinet FortiManager device management software and the FortiAnalyzer and FortiAnalyzer-BigData security event monitoring and analysis tools allows a attacker to execute arbitrary commands or code.

The vulnerability of the CLI component of the Fortinet FortiManager device management software, as well as the FortiAnalyzer and FortiAnalyzer-BigData security event monitoring and analysis tools, is related to the lack of protective measures for the SQL query structure. Exploiting this...

4.3CVSS6AI score0.00182EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
•added 2025/03/24 12:00 a.m.•16 views

The vulnerability of the VMmanager 6 virtualization tool, related to the lack of protective measures for the SQL query structure, allows attackers to execute arbitrary SQL queries against the database.

The vulnerability of VMmanager 6’s virtualization mechanism is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries against the database remotely...

9CVSS5.9AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/02/03 12:00 a.m.•12 views

The vulnerability of the get_discovery_results() function in the Cacti network monitoring software allows a hacker to execute arbitrary code.

The vulnerability of the getdiscoveryresults function in the Cacti network monitoring software is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

6.5CVSS8.2AI score0.00682EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/01/21 12:00 a.m.•18 views

The vulnerability of the Amazon Redshift JDBC driver lies in the lack of security measures for SQL query structures, allowing attackers to exploit this to increase their privileges.

The vulnerability of the Amazon Redshift JDBC driver is related to the lack of security measures for SQL query structures. Exploiting this vulnerability can allow attackers to enhance their privileges...

10CVSS5.6AI score0.00587EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/22 12:00 a.m.•18 views

The vulnerability of the Ivanti Endpoint Manager software for managing endpoints in information networks lies in the lack of security measures regarding SQL query structures. This allows attackers to execute arbitrary code within the root user’s context.

The vulnerability of the Ivanti Endpoint Manager software for managing endpoints in information networks relates to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the root...

9CVSS7.7AI score0.68461EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2024/09/20 12:00 a.m.•16 views

The vulnerability of the updateAssetInfo method in the Ivanti EPM endpoint management software allows a hacker to execute arbitrary code.

The vulnerability of the updateAssetInfo method in the Ivanti EPM endpoint management software is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9.1CVSS8.2AI score0.43356EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/09/20 12:00 a.m.•13 views

The vulnerability of the LoadSlotsTable method in the Ivanti EPM endpoint management software allows a hacker to execute arbitrary code.

The vulnerability of the LoadSlotsTable method in the Ivanti EPM endpoint management software is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.1CVSS8.2AI score0.43356EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/08/01 12:00 a.m.•20 views

The vulnerability of the Zohocorp ManageEngine Exchange Reporter Plus software, which is related to the lack of measures taken to protect the SQL query structure, allows attackers to execute arbitrary SQL queries against the database.

The vulnerability of the monitoring, analysis, and reporting software Zohocorp ManageEngine Exchange Reporter Plus is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries against the database...

8.7CVSS5.9AI score0.03052EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/07/25 12:00 a.m.•14 views

The vulnerability of the getSortString method in the microprogramming software for network devices in the ProSAFE Network Management System (NMS300) allows a perpetrator to execute arbitrary code.

The vulnerability of the getSortString method in the microprogramming software for network devices, the ProSAFE Network Management System NMS300, is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execu...

9CVSS8.1AI score0.01847EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/07/25 12:00 a.m.•23 views

The vulnerability of the setgeneral.php file in the Tailoring Management System (TMS) allows a hacker to execute arbitrary SQL code, gain unauthorized access to read, modify, or delete data, or cause service interruptions.

The vulnerability of the setgeneral.php file in the Tailoring Management System TMS involves a lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL code, gain unauthorized access to read, modify, or delete data, or cause ...

6.5CVSS7AI score0.00591EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/07/05 12:00 a.m.•40 views

The vulnerability of the XStore plugin of the WordPress content management system allows a hacker to execute arbitrary SQL queries against the database.

The vulnerability of the XStore plugin of the WordPress content management system is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries against the database...

9.3CVSS8.2AI score0.03553EPSS
SaveExploits3References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/06/10 12:00 a.m.•20 views

The vulnerability of the GetLogFileRulesSQL method in the Ivanti Endpoint Manager software for managing endpoints in information networks allows a hacker to execute arbitrary code.

The vulnerability of the GetLogFileRulesSQL method in the Ivanti Endpoint Manager software for managing endpoints in information networks is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code usi...

9CVSS8AI score0.08233EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2024/03/26 12:00 a.m.•14 views

The vulnerability of the Advantech WebAccess remote monitoring software lies in the lack of security measures for SQL query structures, allowing attackers to execute arbitrary SQL queries against the database.

The vulnerability of the Advantech WebAccess remote monitoring software lies in the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries against the database remotely...

6.4CVSS6AI score0.003EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/03/14 12:00 a.m.•15 views

The vulnerability of the PostgreSQL data anonymization extension in the PostgreSQL Anonymizer tool lies in the lack of security measures for SQL query structures. This allows attackers to elevate their privileges to superuser levels.

The vulnerability of the PostgreSQL anonymization extension in the PostgreSQL Anonymizer database relates to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor, operating remotely, to elevate their privileges to the level of superuser...

8CVSS7.6AI score0.00461EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/02/25 12:00 a.m.•17 views

The vulnerability of the JDBC driver pgjdbc for connecting Java programs to a PostgreSQL database allows a attacker to execute arbitrary code.

The vulnerability of the JDBC driver pgjdbc, which allows Java programs to connect to PostgreSQL databases, is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted SQL...

10CVSS7.9AI score0.0481EPSS
SaveExploits0References7Affected Software5
BDU FSTEC
BDU FSTEC
•added 2024/02/13 12:00 a.m.•16 views

The vulnerability of the Neshan Maps plugin of the WordPress content management system allows attackers to carry out attacks based on SQL injections.

The vulnerability of the Neshan Maps plugin of the WordPress content management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to carry out attacks based on SQL injections...

10CVSS7.9AI score0.00547EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/12/19 12:00 a.m.•21 views

The vulnerability of the Bulk Modification Tool component in Nagios XI allows a hacker to execute arbitrary SQL code.

The vulnerability of the Bulk Modification Tool component in Nagios XI is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

9CVSS9AI score0.3374EPSS
SaveExploits3References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/12/06 12:00 a.m.•20 views

The vulnerability of the Groundhogg plugin of the WordPress content management system allows a hacker to execute XSS attacks.

The vulnerability of the Groundhogg plugin in the WordPress content management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

8.3CVSS7.3AI score0.0085EPSS
SaveExploits2References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/11/29 12:00 a.m.•18 views

The vulnerability of the Tyk application programming interface, related to the lack of security measures for SQL query structures, allows attackers to execute arbitrary SQL queries.

The vulnerability of the Tyk cloud firewall’s application programming interface is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

10CVSS8.1AI score0.01247EPSS
SaveExploits2References3Affected Software1
Rows per page
Query Builder