Lucene search
+L

257 matches found

Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•3 views

PT-2026-84057

Уязвимость системы управления содержимым сайта DIAFAN.CMS связана с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

8.7CVSS5.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•4 views

PT-2026-84056

Уязвимость системы управления содержимым сайта DIAFAN.CMS связана с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

9.7CVSS5.8AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/07/22 12:00 a.m.•17 views

The vulnerability of the XML analysis mechanism in security systems and the Nessus vulnerability assessment tool allows attackers to execute arbitrary SQL queries.

The vulnerability of the XML analysis mechanism of the security system and the Nessus vulnerability assessment tool is related to the lack of measures taken to protect the SQL query structure during the processing of the nessus file. Exploiting this vulnerability allows an attacker to execute...

3.3CVSS6.1AI score0.0033EPSS
SaveExploits3References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/07/17 12:00 a.m.•12 views

The vulnerability of the Apache Fineract digital financial services platform, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL code.

The vulnerability of the Apache Fineract digital financial services platform lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary SQL code...

8.5CVSS6.2AI score0.00743EPSS
SaveExploits1References3Affected Software1
Redos
Redos
•added 2026/07/06 12:00 a.m.•13 views

ROS-20260706-73-0041

The vulnerability of the refint module in the PostgreSQL database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8.8CVSS8.5AI score0.0037EPSS
SaveExploits0
Redos
Redos
•added 2026/07/06 12:00 a.m.•14 views

ROS-20260706-73-0042

The vulnerability of the refint module in the PostgreSQL database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8.8CVSS8.5AI score0.0037EPSS
SaveExploits0
Redos
Redos
•added 2026/07/06 12:00 a.m.•13 views

ROS-20260706-73-0043

The vulnerability of the refint module in the PostgreSQL database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8.8CVSS8.5AI score0.0037EPSS
SaveExploits0
Redos
Redos
•added 2026/07/06 12:00 a.m.•17 views

ROS-20260706-73-0001

The vulnerability of the pgcreatesubscriber function in the PostgreSQL database management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

7.2CVSS7.9AI score0.00287EPSS
SaveExploits0
Redos
Redos
•added 2026/07/06 12:00 a.m.•18 views

ROS-20260706-73-0044

The vulnerability of the refint module in the PostgreSQL database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8.8CVSS8.5AI score0.0037EPSS
SaveExploits0
Redos
Redos
•added 2026/07/06 12:00 a.m.•19 views

ROS-20260706-73-0045

The vulnerability of the refint module in the PostgreSQL database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8.8CVSS8.5AI score0.0037EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/06/15 12:00 a.m.•19 views

The vulnerability of the Ghost content management system, related to the lack of measures taken to protect the SQL query structure, allows attackers to gain unauthorized access to the protected information.

The vulnerability of the Ghost content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

9.7CVSS6.7AI score0.04953EPSS
SaveExploits8References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/06/08 12:00 a.m.•19 views

The vulnerability of the contact search component in the SOGo software for collaborative work allows a hacker to execute arbitrary code or gain unauthorized access to protected information.

The vulnerability of the contact search component in the SOGo software for collaborative work is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or gain unauthorized access to protected...

10CVSS7.3AI score0.00266EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/06/03 12:00 a.m.•13 views

The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management processes, related to the failure to protect the SQL request structure, allows attackers to execute arbitrary code.

The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management processes is related to the lack of measures taken to protect the SQL request structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

9CVSS6.1AI score0.00449EPSS
SaveExploits0References3Affected Software2
Redos
Redos
•added 2026/05/24 12:00 a.m.•25 views

ROS-20260524-73-0052

Vulnerability in glpi related to failure to take measures to protect sql query structure. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

8.8CVSS8.3AI score0.00449EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/05/24 12:00 a.m.•20 views

The vulnerability of the export module of the Glances monitoring tool allows a hacker to execute arbitrary code.

The vulnerability of the export module of the Glances monitoring tool relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9.4CVSS6.1AI score0.00403EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/22 12:00 a.m.•17 views

The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management processes, related to the failure to protect the SQL request structure, allows attackers to execute arbitrary code.

The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management processes is related to the lack of measures taken to protect the SQL request structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

9CVSS7.3AI score0.00446EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/18 12:00 a.m.•17 views

The vulnerability of the Snowflake Node and MySQL Node components of the N8n automation platform allows unauthorized access for reading, modifying, and deleting protected information.

The vulnerability of the Snowflake Node and MySQL Node components of the N8n automation platform for workflow processes is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to gain unauthorized access to read, modify, and...

8.2CVSS5.8AI score0.00439EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/04/24 12:00 a.m.•17 views

The vulnerability in the web interface for managing the Cisco Unity Connection integrated messaging system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Web interface for managing the Cisco Unity Connection integrated messaging system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

4.3CVSS5.8AI score0.00228EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2026/04/20 12:00 a.m.•3 views

PT-2026-65336

Уязвимость платформы для создания индивидуальных веб-приложений CRM Руководитель связана с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

8.7CVSS5.8AI score
SaveExploits0References3
Redos
Redos
•added 2026/04/17 12:00 a.m.•28 views

ROS-20260417-73-0009

Vulnerability in glpi-plugin-mreporting related to failure to take measures to protect sql query structure. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code...

6.5CVSS7.5AI score0.00257EPSS
SaveExploits0
Rows per page
Query Builder