Lucene search
+L

6535 matches found

CNNVD
CNNVD
added 2025/01/21 12:00 a.m.10 views

Elastic Elasticsearch 安全漏洞

Elastic Elasticsearch is a search engine based on the Lucene library from the Dutch company Elastic. A security vulnerability exists in Elastic Elasticsearch that stems from the presence of unrestricted or throttled resource allocation, which could lead to a crash through the use of specially...

7.5CVSS7.2AI score0.00619EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2025/01/20 12:00 a.m.11 views

The vulnerability of PowerStore T OS’ microprogramming software lies in the lack of protective measures for SQL query structures. This allows attackers to gain access to read, modify, or delete data, or execute arbitrary commands.

The vulnerability of the microprogramming software in the PowerStore data storage system’s T OS lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to gain access to read, modify, or delete data, or to execute arbitrary...

9CVSS6AI score
SaveExploits0References5Affected Software1
GithubExploit
GithubExploit
added 2025/01/17 12:20 p.m.195 views

Exploit for SQL Injection in Microsoft

CVE-2024-43468 SCCM SQL Injection Exploit mTLS client certs f...

9.8CVSS9.8AI score0.82148EPSS
SaveExploits3
BDU FSTEC
BDU FSTEC
added 2025/01/16 12:00 a.m.12 views

The vulnerability of Dell PowerScale InsightIQ software for performance monitoring and reporting lies in its lack of protection against SQL query structures, allowing attackers to disclose sensitive information.

The vulnerability of the software for performance monitoring and report generation in Dell PowerScale InsightIQ is related to the lack of security measures in the SQL query structure. Exploiting this vulnerability can allow attackers to disclose sensitive information...

5.3CVSS5.5AI score
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2025/01/16 12:00 a.m.9 views

Selesta Visual Access Manager SQL Injection Vulnerability (CNVD-2025-22658)

Selesta Visual Access Manager is a visual access manager from Selesta. Selesta Visual Access Manager suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in /common/vamSql.php. An attacker can exploit this vulnerability to perform...

5.4CVSS8.1AI score0.0024EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/14 2:08 p.m.11 views

CVE-2024-55593

A improper neutralization of special elements used in an sql command 'sql injection' in Fortinet FortiWeb versions 6.3.17 through 7.6.1 allows attacker to gain information disclosure via crafted SQL queries...

2.7CVSS4.3AI score0.00407EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/14 1:15 a.m.6 views

DEBIAN-CVE-2024-57663

An issue in the sqlgplacedpipes component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.5AI score0.00687EPSS
SaveExploits1References1
OSV
OSV
added 2025/01/14 1:15 a.m.3 views

DEBIAN-CVE-2024-57645

An issue in the qiinststatefree component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.5AI score0.00572EPSS
SaveExploits1References1
OSV
OSV
added 2025/01/14 1:15 a.m.6 views

DEBIAN-CVE-2024-57643

An issue in the boxdeserializestring component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.5AI score0.00913EPSS
SaveExploits1References1
OSV
OSV
added 2025/01/14 1:15 a.m.12 views

CVE-2024-57626

An issue in the matjoin2 component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS5.8AI score0.00583EPSS
SaveExploits1References1
OSV
OSV
added 2025/01/14 1:15 a.m.11 views

CVE-2024-57634

An issue in the expcopy component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS5.8AI score0.00785EPSS
SaveExploits1References1
OSV
OSV
added 2025/01/14 1:15 a.m.10 views

CVE-2024-57625

An issue in the mergetablepruneandunionize component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS5.8AI score0.00785EPSS
SaveExploits1References1
OSV
OSV
added 2025/01/14 1:15 a.m.7 views

CVE-2024-57620

An issue in the trimchars component of MonetDB Server v11.47.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS5.8AI score0.00583EPSS
SaveExploits1References1
OSV
OSV
added 2025/01/14 1:15 a.m.7 views

CVE-2024-57615

An issue in the BATcalcbetweenintern component of MonetDB Server v11.47.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS5.8AI score0.00632EPSS
SaveExploits1References1
OSV
OSV
added 2025/01/14 1:15 a.m.11 views

UBUNTU-CVE-2024-57650

An issue in the qiinststatefree component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS5.9AI score0.00913EPSS
SaveExploits1References3
OSV
OSV
added 2025/01/14 1:15 a.m.13 views

UBUNTU-CVE-2024-57653

An issue in the qstvecsetcopy component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS5.9AI score0.00749EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/01/14 12:00 a.m.10 views

PT-2025-3492 · Monetdb · Monetdb Server

Name of the Vulnerable Software and Affected Versions: MonetDB Server version 11.49.1 Description: An issue in the merge table prune and unionize component allows attackers to cause a Denial of Service DoS via crafted SQL statements. Recommendations: For MonetDB Server version 11.49.1, consider...

7.5CVSS7.8AI score0.00785EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/01/14 12:00 a.m.20 views

Fortinet FortiPortal SQL注入漏洞

Fortinet FortiPortal is an advanced, feature-rich hosted security analysis and management support tool for Fortinet's FortiGate, FortiWiFi and FortiAP product lines, available as a virtual machine for MSPs. Fortinet FortiPortal suffers from a SQL injection vulnerability that stems from improper...

4.3CVSS7.7AI score0.00372EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/14 12:00 a.m.14 views

PT-2025-3490 · Monetdb · Monetdb Server

Name of the Vulnerable Software and Affected Versions: MonetDB Server version 11.49.1 Description: The issue in the HEAP malloc component allows attackers to cause a Denial of Service DoS via crafted SQL statements. Recommendations: For MonetDB Server version 11.49.1, consider disabling the HEAP...

7.5CVSS7.5AI score0.00726EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/01/13 12:00 a.m.13 views

CVE-2023-42243

In Selesta Visual Access Manager 4.42.2, an authenticated user can access the administrative page /common/vamSql.php, which allows for arbitrary SQL queries...

5.8AI score0.0024EPSS
SaveExploits0References1
Rows per page
Query Builder