Lucene search
+L

257 matches found

Redos
Redos
•added 2026/04/17 12:00 a.m.•23 views

ROS-20260417-73-0047

Vulnerability in glpi related to failure to take measures to protect sql query structure. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

9.8CVSS8.6AI score0.004EPSS
SaveExploits0
Redos
Redos
•added 2026/04/17 12:00 a.m.•16 views

ROS-20260417-73-0036

Vulnerability in zabbix7.4 related to failure to take measures to protect sql query structure. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code...

8.8CVSS8.4AI score0.03942EPSS
SaveExploits1
Redos
Redos
•added 2026/04/17 12:00 a.m.•16 views

ROS-20260417-73-0034

Vulnerability in zabbix7-lts related to failure to take measures to protect sql query structure. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code...

8.8CVSS8.4AI score0.03942EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2026/04/15 12:00 a.m.•13 views

The vulnerability of the Microsoft SQL Server database management system lies in the lack of measures taken to protect SQL query structures, allowing attackers to enhance their privileges.

The vulnerability of the Microsoft SQL Server database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.8CVSS7.1AI score0.00324EPSS
SaveExploits0References2Affected Software10
BDU FSTEC
BDU FSTEC
•added 2026/04/14 12:00 a.m.•20 views

The vulnerability of the FortiAnalyzer and FortiAnalyzer-BigData software tools for monitoring and analyzing security events arises from the lack of protective measures for the SQL query structure. This allows attackers to execute arbitrary code.

The vulnerability of the FortiAnalyzer and FortiAnalyzer-BigData security event monitoring and analysis software lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted netwo...

9CVSS6.2AI score0.00462EPSS
SaveExploits0References3Affected Software2
Positive Technologies
Positive Technologies
•added 2026/04/13 12:00 a.m.•2 views

PT-2026-65333

Уязвимость платформы для создания индивидуальных веб-приложений CRM Руководитель связана с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

9CVSS5.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/13 12:00 a.m.•2 views

PT-2026-65334

Уязвимость платформы для создания индивидуальных веб-приложений CRM Руководитель связана с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

8.7CVSS5.8AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/04/08 12:00 a.m.•19 views

The vulnerability of the centreon-web component of the Centreon software for monitoring IT infrastructure allows a perpetrator to execute arbitrary code.

The vulnerability of the centreon-web component of the Centreon software for monitoring IT infrastructure is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created SQL que...

8.7CVSS6.2AI score0.00497EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/04/03 12:00 a.m.•13 views

The vulnerability of the application software interface of TrueConf Server allows a perpetrator to execute arbitrary code.

The vulnerability of the application software interface of TrueConf Server is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS7.6AI score0.02134EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/03/12 12:00 a.m.•17 views

The vulnerability of the Django web application framework lies in its lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the Django web application framework lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

5CVSS7.4AI score0.00923EPSS
SaveExploits0References8Affected Software10
BDU FSTEC
BDU FSTEC
•added 2026/03/11 12:00 a.m.•17 views

The vulnerability of the Microsoft SQL Server database management system lies in the lack of measures taken to protect SQL query structures, allowing attackers to enhance their privileges.

The vulnerability of the Microsoft SQL Server database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

9CVSS5.8AI score0.01026EPSS
SaveExploits0References2Affected Software2
Redos
Redos
•added 2026/03/10 12:00 a.m.•16 views

ROS-20260310-73-0047

Vulnerability in python-django related to failure to protect sql query structure. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

8.3CVSS7.5AI score0.00856EPSS
SaveExploits0
Redos
Redos
•added 2026/03/10 12:00 a.m.•22 views

ROS-20260310-73-0045

Vulnerability in python-django related to failure to protect sql query structure. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

8.3CVSS7.5AI score0.12819EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2026/02/20 12:00 a.m.•15 views

The vulnerability of the data processing application Dell Unisphere for PowerMax and the virtualization software Dell Unisphere for PowerMax Virtual Appliance lies in the lack of security measures for the SQL query structure. This allows attackers to execute arbitrary commands.

The vulnerability of the data processing application Dell Unisphere for PowerMax and the virtualization software Dell Unisphere for PowerMax Virtual Appliance is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute...

9CVSS6AI score0.00654EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/02/16 12:00 a.m.•19 views

The vulnerability of the ws_user_gerList() function in the pwg.users.php script of the Piwigo content management system allows a hacker to perform SQL injections.

The vulnerability of the wsusergerList function in the pwg.users.php script of the Piwigo content management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to perform SQL injections...

6.4CVSS5.8AI score0.00295EPSS
SaveExploits3References3Affected Software1
Positive Technologies
Positive Technologies
•added 2026/02/03 12:00 a.m.•1 views

PT-2026-28869

Уязвимость программной платформы для веб-приложений Django связана с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

8.3CVSS5.8AI score0.00856EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
•added 2026/02/02 12:00 a.m.•13 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the fileid parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

7.7CVSS6.2AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/02/02 12:00 a.m.•11 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the gettest parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

7.7CVSS6.2AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/02/02 12:00 a.m.•28 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures to protect the SQL query structure during the processing of the search parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

7.7CVSS6.1AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/02/02 12:00 a.m.•7 views

The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the id parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

7.7CVSS6.2AI score
SaveExploits0Affected Software1
Rows per page
Query Builder