Lucene search
+L

13 matches found

NVD
NVD
added 2026/09/18 6:18 p.m.7 views

CVE-2026-92701

trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS aTLS Intel TDX verification path does not copy the expected current-session freshness value into the TDX quote-body policy before quote validation, so structurally valid TDX QuoteV4 Evidence is...

9.1CVSS0.00221EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/18 5:06 p.m.5 views

CVE-2026-92701 Cocos AI: Intra-handshake attested TLS implementation is vulnerable to session-misbinding attacks for Intel TDX verifier path

trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS aTLS Intel TDX verification path does not copy the expected current-session freshness value into the TDX quote-body policy before quote validation, so structurally valid TDX QuoteV4 Evidence is...

9.1CVSS
SaveExploits0References4
CVE
CVE
added 2026/09/18 5:02 p.m.10 views

CVE-2026-92702

Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2 , the intra-handshake attested TLS (aTLS) AMD SEV-SNP verification path does not enforce attestation freshness when the expected reportData value is ni...

9.1CVSS0.00205EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.12 views

EUVD-2022-5040

Malicious code in bioql PyPI...

8.8CVSS8.5AI score0.01262EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2025/05/22 3:15 p.m.12 views

CVE-2020-15886

A SQL injection vulnerability in reportdatacontroller.php in the reportdata module before 3.5 for MunkiReport allows attackers to execute arbitrary SQL commands via the req parameter of the /module/reportdata/ip endpoint...

8.8CVSS8.6AI score0.01262EPSS
SaveExploits0
OSV
OSV
added 2022/05/24 5:24 p.m.54 views

GHSA-QVW9-6567-WQ78 MunkiReport reportdata module SQL injection vulnerability

A SQL injection vulnerability in reportdatacontroller.php in the reportdata module before 3.5 for MunkiReport allows attackers to execute arbitrary SQL commands via the req parameter of the /module/reportdata/ip endpoint...

8.8CVSS9.2AI score0.01262EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2022/05/24 5:24 p.m.22 views

MunkiReport reportdata module SQL injection vulnerability

A SQL injection vulnerability in reportdatacontroller.php in the reportdata module before 3.5 for MunkiReport allows attackers to execute arbitrary SQL commands via the req parameter of the /module/reportdata/ip endpoint...

8.8CVSS8.6AI score0.01262EPSS
SaveExploits0References6Affected Software1
CNVD
CNVD
added 2020/07/27 12:00 a.m.10 views

Munkireport reportdata SQL Injection Vulnerability

Munkireport is a reporting tool for the Munki software management program. reportdata is one of the widget modules. A SQL injection vulnerability exists in the reportdatacontroller.php file in MunkiReport prior to version 3.5. The vulnerability can be exploited to execute arbitrary SQL commands...

8.8CVSS8.5AI score0.01262EPSS
SaveExploits0References1
OSV
OSV
added 2020/07/23 2:15 p.m.23 views

CVE-2020-15886

A SQL injection vulnerability in reportdatacontroller.php in the reportdata module before 3.5 for MunkiReport allows attackers to execute arbitrary SQL commands via the req parameter of the /module/reportdata/ip endpoint...

8.8CVSS8.6AI score
SaveExploits0References4
NVD
NVD
added 2020/07/23 2:15 p.m.30 views

CVE-2020-15886

A SQL injection vulnerability in reportdatacontroller.php in the reportdata module before 3.5 for MunkiReport allows attackers to execute arbitrary SQL commands via the req parameter of the /module/reportdata/ip endpoint...

8.8CVSS9.2AI score0.01262EPSS
SaveExploits0References4
Prion
Prion
added 2020/07/23 2:15 p.m.16 views

Sql injection

A SQL injection vulnerability in reportdatacontroller.php in the reportdata module before 3.5 for MunkiReport allows attackers to execute arbitrary SQL commands via the req parameter of the /module/reportdata/ip endpoint...

6.5CVSS9.1AI score0.01262EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2020/07/23 1:37 p.m.30 views

CVE-2020-15886

A SQL injection vulnerability in reportdatacontroller.php in the reportdata module before 3.5 for MunkiReport allows attackers to execute arbitrary SQL commands via the req parameter of the /module/reportdata/ip endpoint...

9.2AI score0.01262EPSS
SaveExploits0References4
CVE
CVE
added 2020/07/23 1:37 p.m.51 views

CVE-2020-15886

MunkiReport’s reportdata module (reportdata_controller.php) is vulnerable to SQL injection before version 3.5 via the req parameter to /module/reportdata/ip. The issue allows attackers to execute arbitrary SQL commands. Exploitation details are not provided beyond this vector in the supplied docu...

8.8CVSS9.2AI score0.01262EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder