Lucene search
+L

17 matches found

RedhatCVE
RedhatCVE
•added 2025/12/16 12:25 a.m.•13 views

CVE-2025-55703

An error-based SQL injection vulnerability exists in the Sunbird Power IQ 9.2.0 API. The vulnerability is due to an outdated API endpoint that applied arrays without proper input validation. This can allow attackers to manipulate SQL queries. This has been addressed in Power IQ version 9.2.1, whe...

3.3CVSS5.8AI score0.00142EPSS
SaveExploits0References1
OSV
OSV
•added 2025/12/15 8:15 p.m.•16 views

CVE-2025-55703

An error-based SQL injection vulnerability exists in the Sunbird Power IQ 9.2.0 API. The vulnerability is due to an outdated API endpoint that applied arrays without proper input validation. This can allow attackers to manipulate SQL queries. This has been addressed in Power IQ version 9.2.1, whe...

3.3CVSS5.8AI score0.00142EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/15 8:15 p.m.•12 views

CVE-2025-55703

An error-based SQL injection vulnerability exists in the Sunbird Power IQ 9.2.0 API. The vulnerability is due to an outdated API endpoint that applied arrays without proper input validation. This can allow attackers to manipulate SQL queries. This has been addressed in Power IQ version 9.2.1, whe...

3.3CVSS0.00142EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/15 12:00 a.m.•4 views

CVE-2025-55703

An error-based SQL injection vulnerability exists in the Sunbird Power IQ 9.2.0 API. The vulnerability is due to an outdated API endpoint that applied arrays without proper input validation. This can allow attackers to manipulate SQL queries. This has been addressed in Power IQ version 9.2.1, whe...

2.5CVSS5.8AI score0.00142EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/15 12:00 a.m.•42 views

CVE-2025-55703

The CVE pertains to Sunbird Power IQ (9.2.0 API). An error-based SQL injection exists due to an outdated API endpoint that mishandled array inputs, allowing manipulation of SQL queries. The issue affects Power IQ prior to version 9.2.1. Remediation is to upgrade to Power IQ 9.2.1 or later, where ...

3.3CVSS5.8AI score0.00142EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/12/15 12:00 a.m.•18 views

PT-2025-51283

Name of the Vulnerable Software and Affected Versions Sunbird Power IQ versions prior to 9.2.1 Description An error-based SQL injection issue exists in the Power IQ API due to insufficient input validation when handling arrays in an outdated API endpoint. This allows manipulation of SQL queries...

3.3CVSS7.6AI score0.00142EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/15 12:00 a.m.•0 views

CVE-2025-55703: Improper Neutralization of Special Elements used in an SQL Command

An error-based SQL injection vulnerability exists in the Sunbird Power IQ 9.2.0 API. The vulnerability is due to an outdated API endpoint that applied arrays without proper input validation. This can allow attackers to manipulate SQL queries. This has been addressed in Power IQ version 9.2.1, whe...

3.3CVSS5.9AI score0.00142EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/15 12:00 a.m.•39 views

CVE-2025-55703

An error-based SQL injection vulnerability exists in the Sunbird Power IQ 9.2.0 API. The vulnerability is due to an outdated API endpoint that applied arrays without proper input validation. This can allow attackers to manipulate SQL queries. This has been addressed in Power IQ version 9.2.1, whe...

2.5CVSS0.00142EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/12/15 12:00 a.m.•17 views

Sunbird Power IQ 安全漏洞

Sunbird Power IQ is a data center infrastructure management software from Sunbird, USA. A security vulnerability exists in Sunbird Power IQ version 9.2.0 that stems from an outdated API endpoint that does not properly validate input and could lead to manipulation of SQL queries...

3.3CVSS7.1AI score0.00142EPSS
SaveExploits0References3
CVE
CVE
•added 2025/12/04 9:10 p.m.•30 views

CVE-2025-66238

CVE-2025-66238 affects Sunbird DCIM dcTrack. An authenticated user with access to the appliance’s virtual console can misuse remote access features to redirect network traffic, potentially accessing restricted services or data on the host. The Red Hat/NVD/CISA entries corroborate a high-severity ...

7.4CVSS5.9AI score0.00342EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•10 views

EUVD-2014-8921

Malware in sbrugna...

7.5CVSS6.4AI score0.02348EPSS
SaveExploits2References5
NVD
NVD
•added 2014/11/26 3:59 p.m.•18 views

CVE-2014-9095

Multiple SQL injection vulnerabilities in Raritan Power IQ 4.1.0 and 4.2.1 allow remote attackers to execute arbitrary SQL commands via the 1 sort or 2 dir parameter to license/records...

7.5CVSS8.5AI score0.02348EPSS
SaveExploits2References4
Prion
Prion
•added 2014/11/26 3:59 p.m.•18 views

Sql injection

Multiple SQL injection vulnerabilities in Raritan Power IQ 4.1.0 and 4.2.1 allow remote attackers to execute arbitrary SQL commands via the 1 sort or 2 dir parameter to license/records...

7.5CVSS9.2AI score0.02348EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
•added 2014/11/26 3:00 p.m.•32 views

CVE-2014-9095

Multiple SQL injection vulnerabilities in Raritan Power IQ 4.1.0 and 4.2.1 allow remote attackers to execute arbitrary SQL commands via the 1 sort or 2 dir parameter to license/records...

8.5AI score0.02348EPSS
SaveExploits2References4
CVE
CVE
•added 2014/11/26 3:00 p.m.•54 views

CVE-2014-9095

CVE-2014-9095 affects Raritan Power IQ versions 4.1.0 and 4.2.1, where SQL injection is possible through the sort or dir parameters in license/records. The vulnerability allows remote attackers to execute arbitrary SQL commands. Public references confirm the issue and CVSS v2 base score 7.5 (High...

7.5CVSS8.8AI score0.02348EPSS
SaveExploits2References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/11/26 12:00 a.m.•8 views

CVE-2014-9095: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Raritan Power IQ 4.1.0 and 4.2.1 allow remote attackers to execute arbitrary SQL commands via the 1 sort or 2 dir parameter to license/records...

7.5CVSS6.4AI score0.02348EPSS
SaveExploits2References2
OpenVAS
OpenVAS
•added 2014/08/15 12:00 a.m.•36 views

Raritan Power IQ SQL Injection Vulnerability

Raritan Power IQ SQL Injection Vulnerability SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:raritan:poweriq"; ifdescription...

7.5CVSS7.9AI score0.02348EPSS
SaveExploits2References4
Rows per page
Query Builder