Lucene search
+L

173 matches found

BDU FSTEC
BDU FSTEC
added 2023/12/19 12:0 a.m.11 views

The vulnerability of the Bulk Modification Tool component in Nagios XI allows a hacker to execute arbitrary SQL code.

The vulnerability of the Bulk Modification Tool component in Nagios XI is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

9CVSS8.2AI score0.3374EPSS
SaveExploits2References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.10 views

The vulnerability of the Groundhogg plugin of the WordPress content management system allows a hacker to execute XSS attacks.

The vulnerability of the Groundhogg plugin in the WordPress content management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

8.3CVSS7.3AI score0.0085EPSS
SaveExploits2References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/29 12:0 a.m.8 views

The vulnerability of the Apache Submarine machine learning platform, related to the lack of protection for SQL query structures, allows attackers to execute arbitrary SQL queries.

The vulnerability of the Apache Submarine machine learning platform relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

7.5CVSS8.2AI score0.07167EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/27 12:0 a.m.7 views

The vulnerability of the clearAlertByIds() function in the ProSAFE Network Management System (NMS300) allows a hacker to increase their privileges.

The vulnerability of the clearAlertByIds function in the ProSAFE Network Management System NMS300 for managing, diagnosing, and optimizing network devices is related to the lack of protection for the SQL query structure. Exploiting this vulnerability could allow a malicious actor to increase thei...

9CVSS7.7AI score0.52562EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/17 12:0 a.m.8 views

The vulnerability of Fortinet FortiWLM, a centralized management system for WLAN access points and LAN switches, stems from the lack of protective measures for the SQL query structure. This allows attackers to execute arbitrary SQL queries against the database.

The vulnerability of Fortinet FortiWLM, a centralized management system for WLAN access points and LAN switches, relates to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries against the database remotely...

10CVSS8.2AI score0.28783EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/17 12:0 a.m.9 views

The vulnerability of the IBM Security Guardium information protection mechanism lies in its failure to protect the structure of SQL queries. This allows attackers to view, add, modify, or delete information in the internal database.

The vulnerability of the IBM Security Guardium security tool is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to remotely access, view, add, modify, or delete information in the internal database...

8CVSS6AI score0.00429EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/30 12:0 a.m.12 views

The vulnerability of the Paid Memberships Pro plugin of the WordPress content management system allows a hacker to execute arbitrary SQL queries.

The vulnerability of the Paid Memberships Pro plugin of the WordPress content management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

10CVSS8.1AI score0.9246EPSS
SaveExploits6References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/25 12:0 a.m.8 views

The vulnerability in the Nagios XI monitoring tool’s script for nagiosxi/admin/banner_message-ajaxhelper.php allows a attacker to disclose protected information.

The vulnerability in the nagiosxi/admin/bannermessage-ajaxhelper.php script of Nagios XI relates to the failure to protect the SQL query structure during the processing of the ID parameter. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

6.8CVSS6.9AI score0.11278EPSS
SaveExploits2References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/13 12:0 a.m.10 views

The vulnerability of the `grow_right_pane_tree()` function in the Cacti network monitoring software, which allows a hacker to execute arbitrary SQL queries.

The vulnerability of the growrightpanetree function in the Cacti network monitoring software’s script graphview.php relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using a specially...

10CVSS8.4AI score0.87688EPSS
SaveExploits2References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/04 12:0 a.m.8 views

The vulnerability of the MXSecurity software platform for managing security in industrial networks lies in its failure to protect the SQL query structure. This allows attackers to execute arbitrary commands and gain unauthorized access to protected information.

The vulnerability of the MXSecurity software platform for managing security in industrial networks stems from the lack of protective measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands and gain unauthorized access to protected...

7.5CVSS8AI score0.00516EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/17 12:0 a.m.8 views

The vulnerability of the Siemens RUGGEDCOM CROSSBOW access control system lies in the lack of protection for the SQL query structure, allowing attackers to execute arbitrary SQL queries against the database server.

The vulnerability of the Siemens RUGGEDCOM CROSSBOW access control system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries against the database server remotely...

10CVSS8.1AI score0.00706EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/11 12:0 a.m.9 views

The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management processes, related to the failure to protect the SQL query structure, allows a perpetrator to execute arbitrary code.

The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management processes is related to the lack of protective measures for the SQL request structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

8.6CVSS8.2AI score0.47557EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/11 12:0 a.m.13 views

The vulnerability of component B1i Layer of the SAP Business One resource management system allows a hacker to gain access to read, modify, or delete data.

The vulnerability of component B1i Layer in the SAP Business One resource management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to remotely gain access to read, modify, or delete data by sending...

7.1CVSS7.3AI score0.00477EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/01 12:0 a.m.15 views

The vulnerability of the function com.imc.iview.utils.CUtils.checkSQLInjection() in the system for centralized control of network devices and ports of Advantech iView allows a attacker to execute arbitrary SQL commands.

The vulnerability of the com.imc.iview.utils.CUtils.checkSQLInjection function in the system for managing network devices and ports of Advantech iView is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute...

10CVSS8AI score0.15135EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2023/06/30 12:0 a.m.13 views

The vulnerability of the mod_h5pactivity component in the virtual learning environment Moodle allows a hacker to execute arbitrary SQL queries in the database.

The vulnerability of the modh5pactivity component in the virtual learning environment Moodle is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries in the database...

10CVSS6.7AI score0.44918EPSS
SaveExploits4References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/06/22 12:0 a.m.10 views

The vulnerability of the software for processing and transmitting confidential data in Progress MOVEit Transfer arises from the lack of protective measures for SQL query structures, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the software for processing and transmitting confidential data in Progress MOVEit Transfer is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the...

10CVSS8.2AI score0.96682EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/02/21 12:0 a.m.18 views

The vulnerability of the ExploreIT website content management system, related to the lack of measures to protect the SQL query structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the ExploreIT website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

10CVSS7.6AI score0.04051EPSS
SaveExploits3References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/02/15 12:0 a.m.9 views

The vulnerability of the centralized control system for network devices and ports of Advantech iView, related to the lack of measures taken to protect the SQL query structure, allows attackers to execute arbitrary SQL commands.

The vulnerability of the centralized control system for network devices and ports of Advantech iView relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

9CVSS7.2AI score0.09181EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/01/16 12:0 a.m.7 views

The vulnerability of SAP SQL Anywhere relational database management systems lies in the lack of protective measures for SQL query structures, allowing attackers to trigger service failures.

The vulnerability of SAP SQL Anywhere relational database management systems is related to the lack of measures taken to protect SQL query structures. Exploiting this vulnerability allows a malicious actor to cause service interruptions by using specially crafted queries, utilizing the ARRAY arra...

6.8CVSS6.9AI score0.00716EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/11/22 12:0 a.m.10 views

The vulnerability of the my_decimal::operator database component, which allows a hacker to trigger a service failure.

The vulnerability of the mydecimal::operator component of the MariaDB database lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to trigger service failures through a specially crafted SQL query...

7.8CVSS7.5AI score0.02264EPSS
SaveExploits1References11Affected Software6
Rows per page
Query Builder