Lucene search
+L

9581 matches found

Prion
Prion
added 2022/01/29 11:15 p.m.29 views

Design/Logic Flaw

getsortbytable in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY...

2.1CVSS6.2AI score0.0039EPSS
SaveExploits1References3Affected Software1
UbuntuCve
UbuntuCve
added 2022/01/29 11:15 p.m.38 views

CVE-2021-46657

getsortbytable in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY...

5.5CVSS6.8AI score0.0039EPSS
SaveExploits1References2
MariaDBUnix
MariaDBUnix
added 2022/01/29 10:34 p.m.44 views

CVE-2021-46657

Disclaimer: This data contains information about vulnerable...

5.5CVSS7.5AI score0.0039EPSS
SaveExploits1
Cvelist
Cvelist
added 2022/01/29 10:34 p.m.26 views

CVE-2021-46657

getsortbytable in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY...

6.7AI score0.0039EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2022/01/29 10:34 p.m.23 views

CVE-2021-46657

getsortbytable in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY...

5.5CVSS8.1AI score0.0039EPSS
SaveExploits1
CNNVD
CNNVD
added 2022/01/29 12:0 a.m.5 views

MariaDB 资源管理错误漏洞

MariaDB is a free and open source database management system from the MariaDB Mariadb Foundation and a forked version of MySQL with the Maria storage engine. A security vulnerability exists in MariaDB before 10.6.2 that stems from getsortbytable allowing to crash an application by using certain...

5.5CVSS7.2AI score0.0039EPSS
SaveExploits1References12
CNVD
CNVD
added 2022/01/26 12:0 a.m.41 views

WordPress WooCommerce plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. A cross-site scripting vulnerability exists in versions of the WordPress plugin WooCommerce prior to 1.1.10. The vulnerability stems from the fact that the WooCommerce WordPress plugin's order...

4.3CVSS1.3AI score0.00887EPSS
SaveExploits2Affected Software1
CNVD
CNVD
added 2022/01/26 12:0 a.m.40 views

SourceCodester Purchase Order Management System SQL注入漏洞

Sourcecodester Purchase Order Management System is a simple purchase order management system used to manage the purchase order records of a particular company. SQL injection vulnerability exists in Sourcecodester Purchase Order Management System, which Sourcecodester Purchase Order Management...

9.8CVSS2.1AI score0.02534EPSS
SaveExploits1References1
NVD
NVD
added 2022/01/24 3:15 p.m.17 views

CVE-2021-40908

SQL injection vulnerability in Login.php in Sourcecodester Purchase Order Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter...

9.8CVSS0.02534EPSS
SaveExploits1References1
OSV
OSV
added 2022/01/24 3:15 p.m.7 views

CVE-2021-40908

SQL injection vulnerability in Login.php in Sourcecodester Purchase Order Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter...

9.8CVSS6.1AI score0.02534EPSS
SaveExploits1References1
Prion
Prion
added 2022/01/24 3:15 p.m.25 views

Sql injection

SQL injection vulnerability in Login.php in Sourcecodester Purchase Order Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter...

7.5CVSS9.9AI score0.02534EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/01/24 2:54 p.m.33 views

CVE-2021-40908

SQL injection vulnerability in Login.php in Sourcecodester Purchase Order Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter...

10AI score0.02534EPSS
SaveExploits1References1
EUVD
EUVD
added 2022/01/24 2:54 p.m.8 views

EUVD-2021-28063

SQL injection vulnerability in Login.php in Sourcecodester Purchase Order Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter...

9.8CVSS10AI score0.02534EPSS
SaveExploits1References1
CVE
CVE
added 2022/01/24 2:54 p.m.60 views

CVE-2021-40908

The CVE-2021-40908 issue affects Sourcecodester Purchase Order Management System v1.0, via Login.php where the username parameter is vulnerable to SQL injection. The underlying root cause is improper handling/validation of externally supplied SQL statements, enabling an attacker to run arbitrary ...

9.8CVSS9.9AI score0.02534EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2022/01/24 8:15 a.m.6 views

CVE-2021-24865

The Advanced Custom Fields: Extended WordPress plugin before 0.8.8.7 does not validate the order and orderby parameters before using them in a SQL statement, leading to a SQL Injection issue...

7.2CVSS7.1AI score0.01502EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2022/01/24 12:0 a.m.8 views

Sourcecodester Purchase Order Management System SQL注入漏洞

Sourcecodester Purchase Order Management System is a simple purchase order management system used to manage the purchase order records of a particular company. SQL injection vulnerability exists in Sourcecodester Purchase Order Management System, which Sourcecodester Purchase Order Management...

9.8CVSS6.1AI score0.02534EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2022/01/23 11:30 a.m.32 views

Second-Order - Subdomain Takeover Scanner

Scans web applications for second-order subdomain takeover by crawling the app, and collecting URLs and other data that match certain rules, or respond in a certain way. Installation From binary Download a prebuilt binary from the releases page and unzip it. From source Go version 1.17 is...

7.3AI score
SaveExploits0References7
The Hacker News
The Hacker News
added 2022/01/14 8:23 a.m.23 views

U.K. Hacker Jailed for Spying on Children and Downloading Indecent Images

A man from the U.K. city of Nottingham has been sentenced to more than two years in prison for illegally breaking into the phones and computers of a number of victims, including women and children, to spy on them and amass a collection of indecent images. Robert Davies, 32, is said to have...

0.7AI score
SaveExploits0
OSV
OSV
added 2022/01/10 2:10 p.m.6 views

DEBIAN-CVE-2021-22569

An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small malicious payload can occupy the parser for several minutes by creating large numbers of short-lived objects that cause frequent, repeated...

5.5CVSS6.6AI score0.01655EPSS
SaveExploits1References1
OSV
OSV
added 2022/01/10 2:10 p.m.43 views

CVE-2021-22569

An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small malicious payload can occupy the parser for several minutes by creating large numbers of short-lived objects that cause frequent, repeated...

5.5CVSS5.5AI score
SaveExploits0References6
Rows per page
Query Builder