Lucene search
+L

173 matches found

BDU FSTEC
BDU FSTEC
added 2025/05/05 12:0 a.m.9 views

The vulnerability of TP-Link M7200 4G LTE Mobile Wi-Fi Router’s microprogramming software lies in the lack of measures taken to protect the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of TP-Link M7200 4G LTE Mobile Wi-Fi Router’s microprogramming software is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by introducing specially crafted SQL code remotel...

6.5CVSS6.1AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/27 12:0 a.m.11 views

The vulnerability of the UnlockUser method in the software for managing and monitoring deleted objects in telemetry and telemechanics systems of the TeleControl Server Basic allows a hacker to circumvent security restrictions and gain access to write and read arbitrary files.

The vulnerability of the UnlockUser method in software for managing and monitoring remote devices in telemetry and telemechanics systems related to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to bypass security...

9CVSS5.8AI score0.00733EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/25 12:0 a.m.13 views

The vulnerability of the GetGateways method in the software for managing and monitoring remote devices in telemetry and telemechanics systems allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the GetGateways method in the software for managing and monitoring remote devices in telemetering and telemechanics systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the...

9CVSS5.7AI score0.00733EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:0 a.m.26 views

The vulnerability of the software for managing and monitoring remote devices in telemetry and telemechanics systems, related to the lack of measures taken to protect the SQL query structure, allows a perpetrator to execute arbitrary SQL queries.

The vulnerability of software for managing and monitoring remote devices in telemetry and telemechanics systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

9CVSS6AI score0.00733EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:0 a.m.11 views

The vulnerability of the UpdateGateways method in the software for managing and monitoring remote devices in telemetering and telemechanics systems allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the UpdateGateways method in the software for managing and monitoring remote devices in telemetering and telemechanics systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the...

9CVSS6.7AI score0.00733EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:0 a.m.15 views

The vulnerability of the ImportDatabase method in software for managing and monitoring deleted objects in telemetry and telemechanics systems allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ImportDatabase method in software for managing and monitoring removed objects in telemetry and telemechanics systems related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality,...

9CVSS6.7AI score0.00787EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/07 12:0 a.m.13 views

The vulnerability of the Apache Fineract digital financial services platform, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL code.

The vulnerability of the Apache Fineract digital financial services platform lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary SQL code...

9.1CVSS8.5AI score0.01473EPSS
SaveExploits0References3Affected Software1
Redos
Redos
added 2025/04/03 12:0 a.m.21 views

ROS-20250403-03

Vulnerability of SQLite hints and ETRN serialization functions of Exim mail server is related to failure to take measures to protect SQL query structure. SQL query structure protection. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service by sendi...

9.8CVSS7.7AI score0.77173EPSS
SaveExploits6
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:0 a.m.10 views

The vulnerability of the dfe_body_copy component in the Virtuoso-OpenSource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the dfebodycopy component in the Virtuoso-OpenSource web application development platform is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to cause service interruptions...

7.8CVSS7.3AI score0.00715EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:0 a.m.13 views

The vulnerability of the sqlgvec_upd component in the Virtuoso-OpenSource web application development platform allows a attacker to cause a service failure.

The vulnerability of the sqlgvecupd component in the Virtuoso-OpenSource web application development platform is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to cause service interruptions remotely...

7.8CVSS7.2AI score0.00895EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/21 12:0 a.m.7 views

The vulnerability of the “Emergency Call-112” module, related to the failure to protect the SQL query structure, allows attackers to execute arbitrary SQL code.

The vulnerability of the “Emergency Call-112” module is related to the failure to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

10CVSS6AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/20 12:0 a.m.7 views

The vulnerability of the VMmanager 6 virtualization tool, related to the lack of protective measures for the SQL query structure, allows attackers to execute arbitrary SQL queries against the database.

The vulnerability of VMmanager 6’s virtualization mechanism is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries against the database remotely...

9CVSS5.9AI score
SaveExploits0Affected Software1
Redos
Redos
added 2025/03/11 12:0 a.m.11 views

ROS-20250311-07

PQescapeLiteral, PQescapeIdentifier, PQescapeString and PQescapeStringConn functions are vulnerable to vulnerability libpq library of PostgreSQL database management system is related to failure to take measures to protect SQL query structure. Exploitation of the vulnerability could allow an...

8.1CVSS8.4AI score0.9003EPSS
SaveExploits10
BDU FSTEC
BDU FSTEC
added 2025/03/06 12:0 a.m.9 views

The vulnerability of the ArcGIS Server server, related to the lack of measures taken to protect the SQL query structure, allows attackers to enhance their privileges and execute arbitrary code.

The vulnerability of the ArcGIS Server server is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code...

8.7CVSS6AI score0.00492EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/12 12:0 a.m.8 views

The vulnerability of the Centreon-web component of the Centreon software for monitoring IT infrastructure allows a perpetrator to influence the confidentiality, accessibility, and integrity of the protected information.

The vulnerability of the centreon-web component of the IT infrastructure monitoring software relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to influence the confidentiality, accessibility, and integrity of the protect...

9.1CVSS7.8AI score0.01109EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/03 12:0 a.m.13 views

The vulnerability in the host_templates.php script of the Cacti network monitoring software allows a hacker to execute arbitrary code.

The vulnerability of the hosttemplates.php script of the Cacti network monitoring software is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

8CVSS6AI score0.40996EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/03 12:0 a.m.10 views

The vulnerability of the IBM Sterling B2B Integrator software for automating business processes lies in the lack of protective measures for the SQL query structure. This allows attackers to gain unauthorized access to read, modify, add, or delete data.

The vulnerability of the IBM Sterling B2B Integrator software for automating business processes is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to gain unauthorized access to read, modify, add, or...

6.5CVSS5.6AI score0.00347EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/28 12:0 a.m.6 views

The vulnerability of the web interface for managing microprogramming software-based network storage devices STEALTHONE D220 and D340 allows a intruder to gain unauthorized access to protected information.

The vulnerability of the web interface for managing microprogramming software-based network storage devices STEALTHONE D220 and D340 is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...

7.8CVSS7.8AI score0.00392EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/01/21 12:0 a.m.12 views

The vulnerability of the Amazon Redshift Python Connector driver lies in the lack of security measures for SQL query structures, allowing attackers to exploit their privileges.

The vulnerability of the Amazon Redshift Python Connector driver is related to the lack of security measures for SQL query structures. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

9CVSS5.5AI score0.0053EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/17 12:0 a.m.17 views

The vulnerability of the Ivanti EPM endpoint management software lies in the lack of protective measures for the SQL query structure, allowing a hacker to execute malicious code remotely.

The vulnerability of the Ivanti EPM endpoint management software relates to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a remote attacker to execute malicious code remotely...

9CVSS7.8AI score0.64176EPSS
SaveExploits0References2
Rows per page
Query Builder