Lucene search
K

15 matches found

RedhatCVE
RedhatCVE
added 2025/12/16 12:25 a.m.3 views

CVE-2025-55703

An error-based SQL injection vulnerability exists in the Sunbird Power IQ 9.2.0 API. The vulnerability is due to an outdated API endpoint that applied arrays without proper input validation. This can allow attackers to manipulate SQL queries. This has been addressed in Power IQ version 9.2.1, whe...

3.3CVSS8.2AI score0.00117EPSS
Exploits0References1
OSV
OSV
added 2025/12/15 8:15 p.m.1 views

CVE-2025-55703

An error-based SQL injection vulnerability exists in the Sunbird Power IQ 9.2.0 API. The vulnerability is due to an outdated API endpoint that applied arrays without proper input validation. This can allow attackers to manipulate SQL queries. This has been addressed in Power IQ version 9.2.1, whe...

3.3CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2025/12/15 8:15 p.m.3 views

CVE-2025-55703

An error-based SQL injection vulnerability exists in the Sunbird Power IQ 9.2.0 API. The vulnerability is due to an outdated API endpoint that applied arrays without proper input validation. This can allow attackers to manipulate SQL queries. This has been addressed in Power IQ version 9.2.1, whe...

3.3CVSS0.00117EPSS
Exploits0References2
CVE
CVE
added 2025/12/15 12:0 a.m.22 views

CVE-2025-55703

The CVE pertains to Sunbird Power IQ (9.2.0 API). An error-based SQL injection exists due to an outdated API endpoint that mishandled array inputs, allowing manipulation of SQL queries. The issue affects Power IQ prior to version 9.2.1. Remediation is to upgrade to Power IQ 9.2.1 or later, where ...

3.3CVSS7.8AI score0.00117EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2025/12/15 12:0 a.m.2 views

Sunbird Power IQ 安全漏洞

Sunbird Power IQ is a data center infrastructure management software from Sunbird, USA. A security vulnerability exists in Sunbird Power IQ version 9.2.0 that stems from an outdated API endpoint that does not properly validate input and could lead to manipulation of SQL queries...

3.3CVSS7.1AI score0.00117EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/12/15 12:0 a.m.2 views

CVE-2025-55703

An error-based SQL injection vulnerability exists in the Sunbird Power IQ 9.2.0 API. The vulnerability is due to an outdated API endpoint that applied arrays without proper input validation. This can allow attackers to manipulate SQL queries. This has been addressed in Power IQ version 9.2.1, whe...

2.5CVSS7.8AI score0.00117EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/15 12:0 a.m.5 views

PT-2025-51283

Name of the Vulnerable Software and Affected Versions Sunbird Power IQ versions prior to 9.2.1 Description An error-based SQL injection issue exists in the Power IQ API due to insufficient input validation when handling arrays in an outdated API endpoint. This allows manipulation of SQL queries...

3.3CVSS7.6AI score0.00117EPSS
Exploits0References6
Cvelist
Cvelist
added 2025/12/15 12:0 a.m.21 views

CVE-2025-55703

An error-based SQL injection vulnerability exists in the Sunbird Power IQ 9.2.0 API. The vulnerability is due to an outdated API endpoint that applied arrays without proper input validation. This can allow attackers to manipulate SQL queries. This has been addressed in Power IQ version 9.2.1, whe...

2.5CVSS0.00117EPSS
Exploits0References2
CVE
CVE
added 2025/12/04 9:10 p.m.7 views

CVE-2025-66238

CVE-2025-66238 affects Sunbird DCIM dcTrack. An authenticated user with access to the appliance’s virtual console can misuse remote access features to redirect network traffic, potentially accessing restricted services or data on the host. The Red Hat/NVD/CISA entries corroborate a high-severity ...

7.4CVSS6.5AI score0.00294EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2014-8921

Malware in sbrugna...

7.5CVSS6.4AI score0.02348EPSS
Exploits1References5
NVD
NVD
added 2014/11/26 3:59 p.m.12 views

CVE-2014-9095

Multiple SQL injection vulnerabilities in Raritan Power IQ 4.1.0 and 4.2.1 allow remote attackers to execute arbitrary SQL commands via the 1 sort or 2 dir parameter to license/records...

7.5CVSS8.5AI score0.02348EPSS
Exploits1References4
Prion
Prion
added 2014/11/26 3:59 p.m.10 views

Sql injection

Multiple SQL injection vulnerabilities in Raritan Power IQ 4.1.0 and 4.2.1 allow remote attackers to execute arbitrary SQL commands via the 1 sort or 2 dir parameter to license/records...

7.5CVSS9.2AI score0.02348EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2014/11/26 3:0 p.m.20 views

CVE-2014-9095

Multiple SQL injection vulnerabilities in Raritan Power IQ 4.1.0 and 4.2.1 allow remote attackers to execute arbitrary SQL commands via the 1 sort or 2 dir parameter to license/records...

8.5AI score0.02348EPSS
Exploits1References4
CVE
CVE
added 2014/11/26 3:0 p.m.41 views

CVE-2014-9095

CVE-2014-9095 affects Raritan Power IQ versions 4.1.0 and 4.2.1, where SQL injection is possible through the sort or dir parameters in license/records. The vulnerability allows remote attackers to execute arbitrary SQL commands. Public references confirm the issue and CVSS v2 base score 7.5 (High...

7.5CVSS8.8AI score0.02348EPSS
Exploits1References4Affected Software1
OpenVAS
OpenVAS
added 2014/08/15 12:0 a.m.11 views

Raritan Power IQ SQL Injection Vulnerability

Raritan Power IQ SQL Injection Vulnerability SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:raritan:poweriq"; ifdescription...

7.5CVSS7.9AI score0.02348EPSS
Exploits1References4
Rows per page
Query Builder