Lucene search
+L

29205 matches found

OSV
OSV
added 2026/01/21 6:16 p.m.9 views

DEBIAN-CVE-2021-47853

phpPgAdmin 7.13.0 contains a remote command execution vulnerability that allows authenticated attackers to execute arbitrary system commands through SQL query manipulation. Attackers can create a custom table, upload a malicious .txt file, and use the COPY FROM PROGRAM command to execute operatin...

8.8CVSS6.5AI score0.00262EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/21 6:16 p.m.12 views

CVE-2021-47748

Hasura GraphQL 1.3.3 contains a remote code execution vulnerability that allows attackers to execute arbitrary shell commands through SQL query manipulation. Attackers can inject commands into the runsql endpoint by crafting malicious GraphQL queries that execute system commands through...

9.8CVSS0.0102EPSS
SaveExploits1References3
OSV
OSV
added 2026/01/21 6:16 p.m.11 views

CVE-2021-47748

Hasura GraphQL 1.3.3 contains a remote code execution vulnerability that allows attackers to execute arbitrary shell commands through SQL query manipulation. Attackers can inject commands into the runsql endpoint by crafting malicious GraphQL queries that execute system commands through...

9.3CVSS6.9AI score
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/01/21 6:16 p.m.10 views

CVE-2021-47853

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

5.7AI score0.00262EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/01/21 5:27 p.m.23 views

CVE-2021-47869 BRAdmin Professional 3.75 - 'BRA_Scheduler' Unquoted Service Path

Brother BRAdmin Professional 3.75 contains an unquoted service path vulnerability in the BRAScheduler service that allows local users to potentially execute arbitrary code. Attackers can place a malicious executable named 'BRAdmin' in the C:\Program Files x86\Brother\ directory to gain local syst...

8.5CVSS0.00129EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/01/21 5:27 p.m.10 views

EUVD-2026-3636

phpPgAdmin 7.13.0 contains a remote command execution vulnerability that allows authenticated attackers to execute arbitrary system commands through SQL query manipulation. Attackers can create a custom table, upload a malicious .txt file, and use the COPY FROM PROGRAM command to execute operatin...

8.8CVSS6.5AI score0.00262EPSS
SaveExploits0References4
CVE
CVE
added 2026/01/21 5:27 p.m.22 views

CVE-2021-47853

phpPgAdmin 7.13.0 is affected by a remote command execution vulnerability described in Red Hat CVE-2021-47853, where an authenticated attacker can manipulate SQL queries to run arbitrary operating system commands via COPY FROM PROGRAM after creating a table and uploading a crafted .txt file. This...

6.5AI score0.00262EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/01/21 5:27 p.m.4 views

CVE-2021-47853

...

5.9AI score0.00262EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/01/21 5:27 p.m.22 views

CVE-2021-47853

...

0.00262EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/01/21 5:27 p.m.10 views

CVE-2021-47853

Removed by vendor...

5.9AI score0.00262EPSS
SaveExploits0
CVE
CVE
added 2026/01/21 5:27 p.m.31 views

CVE-2021-47748

CVE-2021-47748 concerns Hasura GraphQL 1.3.3, describing a remote code execution via SQL query manipulation. Attackers can inject commands into the run_sql endpoint, leveraging PostgreSQL COPY FROM PROGRAM to execute system commands. Connected sources corroborate the RCE vector and affected compo...

9.8CVSS7AI score0.0102EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/21 5:27 p.m.7 views

CVE-2021-47748 Hasura GraphQL 1.3.3 - Remote Code Execution

Hasura GraphQL 1.3.3 contains a remote code execution vulnerability that allows attackers to execute arbitrary shell commands through SQL query manipulation. Attackers can inject commands into the runsql endpoint by crafting malicious GraphQL queries that execute system commands through...

9.8CVSS7AI score0.0102EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2026/01/21 5:27 p.m.7 views

CVE-2021-47748

Hasura GraphQL 1.3.3 contains a remote code execution vulnerability that allows attackers to execute arbitrary shell commands through SQL query manipulation. Attackers can inject commands into the runsql endpoint by crafting malicious GraphQL queries that execute system commands through...

9.8CVSS6.9AI score0.0102EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2026/01/21 5:27 p.m.30 views

CVE-2021-47748 Hasura GraphQL 1.3.3 - Remote Code Execution

Hasura GraphQL 1.3.3 contains a remote code execution vulnerability that allows attackers to execute arbitrary shell commands through SQL query manipulation. Attackers can inject commands into the runsql endpoint by crafting malicious GraphQL queries that execute system commands through...

9.8CVSS0.0102EPSS
SaveExploits1References3
EUVD
EUVD
added 2026/01/21 5:27 p.m.12 views

EUVD-2026-3661

Hasura GraphQL 1.3.3 contains a remote code execution vulnerability that allows attackers to execute arbitrary shell commands through SQL query manipulation. Attackers can inject commands into the runsql endpoint by crafting malicious GraphQL queries that execute system commands through...

9.8CVSS7AI score0.0102EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2026/01/21 12:0 a.m.8 views

PT-2026-3806

Name of the Vulnerable Software and Affected Versions phpPgAdmin version 7.13.0 Description An authenticated attacker can execute arbitrary system commands through SQL query manipulation. This is achieved by creating a custom table, uploading a malicious .txt file, and utilizing the COPY FROM...

8.8CVSS6.1AI score0.00262EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/01/21 12:0 a.m.20 views

PT-2026-3821

Brother BRAdmin Professional 3.75 contains an unquoted service path vulnerability in the BRA Scheduler service that allows local users to potentially execute arbitrary code. Attackers can place a malicious executable named 'BRAdmin' in the C:Program Files x86Brother directory to gain local system...

8.5CVSS5.9AI score0.00129EPSS
SaveExploits0References6
Redos
Redos
added 2026/01/20 12:0 a.m.11 views

ROS-20260120-7335

A vulnerability in the bpfprogram function of the driver drivers/net/ppp/pppgeneric.c of the Linux kernel is related to the use of an uninitialized pointer. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

5.5CVSS6.5AI score0.002EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:0 a.m.6 views

MiracleLinux 9 : firefox-102.15.0-1.el9.ML.1 (AXSA:2023-6389:32)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6389:32 advisory. Mozilla: Memory corruption in IPC CanvasTranslator CVE-2023-4573 Mozilla: Memory corruption in IPC ColorPickerShownCallback CVE-2023-4574 Mozilla:...

8.8CVSS5.8AI score0.00791EPSS
SaveExploits0References13
Wordfence Blog
Wordfence Blog
added 2026/01/19 9:23 p.m.17 views

100,000 WordPress Sites Affected by Privilege Escalation Vulnerability in Advanced Custom Fields: Extended WordPress Plugin

On December 10th, 2025, we received a submission for a Privilege Escalation vulnerability in Advanced Custom Fields: Extended, a WordPress plugin with more than 100,000+ active installations. This vulnerability makes it possible for an unauthenticated attacker to grant themselves administrative...

9.8CVSS5.7AI score0.00982EPSS
SaveExploits0
Rows per page
Query Builder