Lucene search
K

11 matches found

OSV
OSV
added 2026/04/03 2:2 p.m.0 views

MINI-RFQ3-F8H8-QCQC

Bulletin has no description...

6.5CVSS5.8AI score0.00041EPSS
Exploits0
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-32006

Malicious code in bioql PyPI...

8.2CVSS6.6AI score0.00048EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/10/02 12:17 a.m.8 views

CVE-2025-52042

In Frappe ERPNext 15.57.5, the function getrfqcontainingsupplier at erpnext/buying/doctype/requestforquotation/requestforquotation.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting SQL query via the txt parameter...

8.2CVSS7.4AI score0.00048EPSS
Exploits1References1
OSV
OSV
added 2025/10/01 3:15 p.m.3 views

CVE-2025-52042

In Frappe ERPNext 15.57.5, the function getrfqcontainingsupplier at erpnext/buying/doctype/requestforquotation/requestforquotation.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting SQL query via the txt parameter...

8.2CVSS7.4AI score
Exploits0References2
CNNVD
CNNVD
added 2025/10/01 12:0 a.m.1 views

ERPNext 安全漏洞

ERPNext is an open source enterprise resource planning solution from ERPNext India. ERPNext suffers from a SQL injection vulnerability that stems from the lack of validation of the txt parameter of the getrfqcontainingsupplier function against externally entered SQL statements. An attacker can...

8.2CVSS8AI score0.00048EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/10/01 12:0 a.m.3 views

PT-2025-40246

Name of the Vulnerable Software and Affected Versions Frappe ERPNext version 15.57.5 Description The get rfq containing supplier function located at erpnext/buying/doctype/request for quotation/request for quotation.py is susceptible to SQL Injection. An attacker can inject a SQL query through th...

8.2CVSS6.9AI score0.00048EPSS
Exploits1References7
Vulnrichment
Vulnrichment
added 2025/10/01 12:0 a.m.3 views

CVE-2025-52042

In Frappe ERPNext 15.57.5, the function getrfqcontainingsupplier at erpnext/buying/doctype/requestforquotation/requestforquotation.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting SQL query via the txt parameter...

6.9AI score0.00048EPSS
Exploits1References2
Cisco Threats
Cisco Threats
added 2017/09/18 2:18 p.m.10 views

Threat Outbreak Alert RuleID30637: Email Messages Distributing Malicious Software on September 18, 2017

Medium Alert ID: 55318 First Published: 2017 September 18 14:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30637 may contain the following files: Name ...

6.9AI score
Exploits0
Cisco Threats
Cisco Threats
added 2017/05/23 3:6 p.m.12 views

Threat Outbreak Alert RuleID29243: Email Messages Distributing Malicious Software on May 23, 2017

Medium Alert ID: 53929 First Published: 2017 May 23 15:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29243 may contain the following files: Name | Size...

0.2AI score
Exploits0
Cisco Threats
Cisco Threats
added 2016/10/06 1:41 p.m.21 views

Threat Outbreak Alert RuleID25329: Email Messages Distributing Malicious Software on October 6, 2016

Medium Alert ID: 49211 First Published: 2016 October 6 13:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25329 may contain the following files: Name |...

0.5AI score
Exploits0
Cisco Threats
Cisco Threats
added 2016/03/30 5:8 p.m.56 views

Threat Outbreak Alert RuleID21982: Email Messages Distributing Malicious Software on June 23, 2016

Medium Alert ID: 44362 First Published: 2016 March 30 17:08 GMT Last Updated: 2016 June 24 13:46 GMT Version: 13 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21982 and...

7AI score
Exploits0
Rows per page
Query Builder