Lucene search
K

15 matches found

RedhatCVE
RedhatCVE
added 2025/10/14 1:51 p.m.5 views

CVE-2025-6919

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cats Information Technology Software Development Technologies Aykome License Tracking System allows SQL Injection.This issue affects Aykome License Tracking System: before Version dated 06.10.2025...

9.8CVSS7.6AI score0.00038EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/13 3:31 p.m.2 views

EUVD-2025-34064

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cats Information Technology Software Development Technologies Aykome License Tracking System allows SQL Injection.This issue affects Aykome License Tracking System: before Version dated 06.10.2025...

9.8CVSS7.1AI score0.00038EPSS
Exploits0References2
NVD
NVD
added 2025/10/13 1:15 p.m.5 views

CVE-2025-6919

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cats Information Technology Software Development Technologies Aykome License Tracking System allows SQL Injection. This issue affects Aykome License Tracking System: before Version dated 06.10.2025...

9.8CVSS0.00038EPSS
Exploits0References2
CVE
CVE
added 2025/10/13 12:46 p.m.13 views

CVE-2025-6919

The CVE-2025-6919 entry describes an SQL Injection in Aykome License Tracking System (Cats Information Technology Software Development Technologies). Affected: License Tracking System before version dated 06.10.2025. Root cause: improper neutralization of special elements in SQL commands. Impact ...

9.8CVSS7.3AI score0.00038EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/10/13 12:46 p.m.9 views

CVE-2025-6919 SQLi in Cats Informatics' Aykome

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cats Information Technology Software Development Technologies Aykome License Tracking System allows SQL Injection. This issue affects Aykome License Tracking System: before Version dated 06.10.2025...

9.8CVSS0.00038EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/13 12:46 p.m.3 views

CVE-2025-6919 SQLi in Cats Informatics' Aykome

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cats Information Technology Software Development Technologies Aykome License Tracking System allows SQL Injection. This issue affects Aykome License Tracking System: before Version dated 06.10.2025...

9.8CVSS5.6AI score0.00038EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2025/10/13 12:46 p.m.2 views

CVE-2025-6919

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cats Information Technology Software Development Technologies Aykome License Tracking System allows SQL Injection. This issue affects Aykome License Tracking System: before Version dated 06.10.2025...

9.8CVSS5.6AI score0.00038EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/10/13 12:0 a.m.1 views

Aykome License Tracking System 安全漏洞

Aykome License Tracking System is a license management system from Aykome Turkey. A security vulnerability exists in Aykome License Tracking System versions prior to 06.10.2025, which stems from improper neutralization of a special element and could lead to an SQL injection attack...

9.8CVSS7.6AI score0.00038EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2023-46902

Malicious code in bioql PyPI...

9.1CVSS8.9AI score0.0071EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-41832

Malicious code in bioql PyPI...

4.3CVSS6.1AI score0.00162EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-25895

Malicious code in bioql PyPI...

7.5CVSS6.3AI score0.00132EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/08/27 12:0 a.m.3 views

PT-2025-34874 · Glpi · Glpi

Name of the Vulnerable Software and Affected Versions: GLPI versions 10.0.0 through 10.0.18 Description: GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. A connected user without administration rights can...

7.5CVSS6.4AI score0.00132EPSS
Exploits0References5
OSV
OSV
added 2022/11/03 12:0 a.m.28 views

CVE-2022-39277 Cross-Site Scripting (XSS) in external links in GLPI

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. External links are not properly sanitized and can therefore be used for a Cross-Site Scripting XSS...

4.5CVSS5.9AI score0.00309EPSS
Exploits1References4
CVE
CVE
added 2022/11/03 12:0 a.m.51 views

CVE-2022-39373

CVE-2022-39373 affects GLPI where an administrator can store malicious code in an entity name; the issue has been patched and users should upgrade to GLPI 10.0.4 to remediate.

4.9CVSS5.2AI score0.00315EPSS
Exploits0References1Affected Software1
n0where
n0where
added 2018/02/23 7:52 a.m.36 views

Intelligent Software Composition Analysis Platform: Dependency-Track

Modern applications leverage the availability of existing components for use as building blocks in application development. By using existing components, organizations can dramatically decrease time-to-market. Reusing existing components however, comes at a cost. Organizations that build on top o...

Exploits0References3
Rows per page
Query Builder