Lucene search
+L

6535 matches found

Positive Technologies
Positive Technologies
added 2025/04/01 12:00 a.m.11 views

PT-2025-37376

Name of the Vulnerable Software and Affected Versions Chamilo versions prior to 1.11.30 Description The Chamilo learning management system has an OS Command Injection issue. This occurs due to a failure to neutralize special elements used in the operating system command. Successful exploitation...

8.7CVSS6.3AI score0.02657EPSS
SaveExploits1References11
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.15 views

The vulnerability of the itc_hash_compare component in the Virtuoso-OpenSource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the itchashcompare component in the Virtuoso-opensource web application development platform is related to the improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially...

7.8CVSS7.3AI score0.00572EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.15 views

The vulnerability of the itc_set_param_row component in the Virtuoso-OpenSource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the itcsetparamrow component in the Virtuoso-OpenSource web application development platform is related to the improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially...

7.8CVSS7.3AI score0.00913EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.18 views

The vulnerability of the `dc_add_int` component in the Virtuoso-OpenSource web application development platform allows a hacker to trigger a service failure.

The vulnerability of the dcaddint component in the virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially crafted SQL...

7.8CVSS7.3AI score0.00674EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.11 views

The vulnerability of the qi_inst_state_free component in the Virtuoso-OpenSource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the qiinststatefree component in the Virtuoso-OpenSource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending specially...

7.8CVSS7.3AI score0.00913EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.10 views

The vulnerability of the itc_sample_row_check component in the Virtuoso-OpenSource web application development platform allows a hacker to trigger a service failure.

The vulnerability of the itcsamplerowcheck component in the Virtuoso-OpenSource web application development platform is related to the improper elimination of special elements used in SQL commands. Exploiting this vulnerability allows an attacker to cause service interruptions by sending speciall...

7.8CVSS7.3AI score0.00877EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.27 views

The vulnerability of the sqlg_hash_source component in the Virtuoso-OpenSource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the sqlghashsource component in the Virtuoso-opensource web application development platform is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending...

7.8CVSS7.3AI score0.00837EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.12 views

The vulnerability of the dfe_body_copy component in the Virtuoso-OpenSource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the dfebodycopy component in the Virtuoso-OpenSource web application development platform is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to cause service interruptions...

7.8CVSS7.3AI score0.00729EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.12 views

The vulnerability of the `box_deserialize_string` component in the Virtuoso-OpenSource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the boxdeserializestring component in the Virtuoso-OpenSource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially...

7.8CVSS7.3AI score0.00913EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.9 views

The vulnerability of the sqlgplace_dpipes component in the Virtuoso-OpenSource web application development platform allows a hacker to trigger a service failure.

The vulnerability of the sqlgplacedpipes component in the Virtuoso-opensource web application development platform involves the distribution of resources without any restrictions or regulations. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially...

7.8CVSS7.3AI score0.00687EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.12 views

The vulnerability of the qi_inst_state_free component in the Virtuoso-OpenSource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the qiinststatefree component in the Virtuoso-OpenSource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending specially...

7.8CVSS7.3AI score0.00572EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.12 views

The vulnerability of the dfe_unit_gb_dependant component in the Virtuoso-OpenSource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the dfeunitgbdependant component in the virtuoso-opensource web application development platform is related to the improper elimination of special elements used in SQL commands. Exploiting this vulnerability allows an attacker to cause service interruptions by sending special...

7.8CVSS7.3AI score0.00729EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.10 views

The vulnerability of the chash_array component in the virtuoso-opensource web application development platform allows a hacker to trigger a service failure.

The vulnerability of the chasharray component in the virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially crafted SQ...

7.8CVSS7.3AI score0.00729EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.13 views

The vulnerability of the dfe_inx_op_col_def_table component in the Virtuoso-OpenSource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the dfeinxopcoldeftable component in the Virtuoso-OpenSource web application development platform is related to the improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending...

7.8CVSS7.3AI score0.00749EPSS
SaveExploits1References4Affected Software2
Positive Technologies
Positive Technologies
added 2025/03/31 12:00 a.m.8 views

PT-2025-13715 · WordPress · Aphotrax Uptime Robot Plugin

Name of the Vulnerable Software and Affected Versions: Aphotrax Uptime Robot Plugin for WordPress versions n/a through 2.3 Description: The issue is related to an SQL Injection vulnerability, allowing attackers to manipulate database queries. This is due to the improper neutralization of special...

8.5CVSS9.6AI score0.00325EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.15 views

The vulnerability of the sqlo_df component in the virtuoso-opensource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the sqlodf component in the virtuoso-opensource web application development platform is related to the improper disabling or release of resources. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted SQL queries...

7.8CVSS7.3AI score0.00829EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.16 views

The vulnerability of the sqlexp component in the Virtuoso-OpenSource web application development platform allows a hacker to trigger a service failure.

The vulnerability of the sqlexp component in the virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability allows an attacker to cause service interruptions by sending specially crafted SQL...

7.8CVSS7.3AI score0.00674EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.9 views

The vulnerability of the sqlg_group_nodeng component in the Virtuoso-OpenSource web application development platform allows a attacker to cause a service failure.

The vulnerability of the sqlggroupnode component in the virtuoso-opensource web application development platform involves the distribution of resources without any restrictions or regulations. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending special...

7.8CVSS7.3AI score0.00568EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.12 views

The vulnerability of the sqlo_expand_jts component in the Virtuoso-OpenSource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the sqloexpandjts component in the Virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially crafted...

7.8CVSS7.3AI score0.0071EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.14 views

The vulnerability of the qst_vec_set_copy component in the Virtuoso-OpenSource web application development platform allows a hacker to trigger a service failure.

The vulnerability of the qstvecsetcopy component in the Virtuoso-OpenSource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially crafted...

7.8CVSS7.3AI score0.00749EPSS
SaveExploits1References4Affected Software2
Rows per page
Query Builder