Lucene search
+L

774 matches found

BDU FSTEC
BDU FSTEC
added 2025/04/09 12:00 a.m.11 views

The vulnerability of the ColdFusion software platform, related to the lack of measures to neutralize special elements, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8CVSS8.3AI score0.02349EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/01 12:00 a.m.16 views

The vulnerability of the graphical user interface of the FortiIsolator browser platform allows a hacker to execute arbitrary code.

The vulnerability of the graphical user interface of the FortiIsolator browser platform exists due to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS5.9AI score0.01001EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2025/03/31 1:15 p.m.8 views

CVE-2025-31547

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aphotrax Uptime Robot Plugin for WordPress uptime-robot-monitor allows SQL Injection.This issue affects Uptime Robot Plugin for WordPress: from n/a through = 2.3...

8.5CVSS0.00311EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.11 views

The vulnerability of the qi_inst_state_free component in the Virtuoso-OpenSource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the qiinststatefree component in the Virtuoso-OpenSource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending specially...

7.8CVSS7.3AI score0.00913EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.11 views

The vulnerability of the qst_vec_set component in the virtuoso-opensource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the qstvecset component in the virtuoso-opensource web application development platform is related to the improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially crafted...

7.8CVSS7.3AI score0.00572EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.11 views

The vulnerability of the operating environment for managing and maintaining the Dell Unity Operating Environment (OE) storage system lies in the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows attackers to enhance their privileges and execute arbitrary commands.

The vulnerability of the Dell Unity Operating Environment’s operating environment for data storage management and operation is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow attackers to enhance...

7.8CVSS5.8AI score0.0055EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.11 views

The vulnerability of the Dell Unity Operating Environment’s operating environment for managing and maintaining data storage allows attackers to enhance their privileges, execute arbitrary commands, and gain full control over the application. This vulnerability arises from the lack of measures taken to neutralize special elements used in the operating system’s command set.

The vulnerability of the Dell Unity Operating Environment’s operating system for data storage management and operation is related to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability can allow a malicious actor to...

10CVSS5.8AI score0.02131EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.15 views

The vulnerability of the itc_hash_compare component in the Virtuoso-OpenSource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the itchashcompare component in the Virtuoso-opensource web application development platform is related to the improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially...

7.8CVSS7.3AI score0.00572EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.10 views

The vulnerability of the row_insert_cast component in the virtuoso-opensource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the rowinsertcast component in the virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially crafted...

7.8CVSS7.3AI score0.00674EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.13 views

The vulnerability of the sqlc_add_distinct_node component in the Virtuoso-OpenSource web application development platform allows a attacker to cause a service failure.

The vulnerability of the sqlcadddistinctnode component in the Virtuoso-OpenSource web application development platform is related to the improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending...

7.8CVSS7.3AI score0.00749EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.12 views

The vulnerability of the operating environment for managing and maintaining the Dell Unity Operating Environment (DELL Unity OE) lies in the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows attackers to enhance their privileges and execute arbitrary commands.

The vulnerability of the Dell Unity Operating Environment’s operating environment for data storage management and operation is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow attackers to enhance...

7.8CVSS5.8AI score0.00563EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.9 views

The vulnerability of the chash_array component in the virtuoso-opensource web application development platform allows a hacker to trigger a service failure.

The vulnerability of the chasharray component in the virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially crafted SQ...

7.8CVSS7.3AI score0.00729EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.10 views

The vulnerability of the sql_tree_hash_1 component in the Virtuoso-OpenSource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the sqltreehash1 component in the Virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending specially...

7.8CVSS7.3AI score0.00749EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.12 views

The vulnerability of the sqlo_expand_jts component in the Virtuoso-OpenSource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the sqloexpandjts component in the Virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially crafted...

7.8CVSS7.3AI score0.0071EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.14 views

The vulnerability of the sqlexp component in the Virtuoso-OpenSource web application development platform allows a hacker to trigger a service failure.

The vulnerability of the sqlexp component in the virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability allows an attacker to cause service interruptions by sending specially crafted SQL...

7.8CVSS7.3AI score0.00674EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.13 views

The vulnerability of the numeric_to_dv component in the virtuoso-opensource web application development platform allows a hacker to trigger a service failure.

The vulnerability of the numerictodv component in the virtuoso-opensource web application development platform is related to the improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially craft...

7.8CVSS7.3AI score0.00749EPSS
SaveExploits1References4Affected Software2
RedhatCVE
RedhatCVE
added 2025/03/29 11:35 a.m.11 views

CVE-2025-30879

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Moreconvert Team MC Woocommerce Wishlist smart-wishlist-for-more-convert allows SQL Injection.This issue affects MC Woocommerce Wishlist: from n/a through = 1.8.9...

7.6CVSS7.3AI score0.00548EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/27 11:15 a.m.10 views

CVE-2025-30879

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Moreconvert Team MC Woocommerce Wishlist smart-wishlist-for-more-convert allows SQL Injection.This issue affects MC Woocommerce Wishlist: from n/a through = 1.8.9...

7.6CVSS0.00548EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/27 5:09 a.m.21 views

CVE-2024-45481

An Incomplete Filtering of Special Elements vulnerability in scripts using the SSH server on B APROL 4.4-00P5 may allow an authenticated local attacker to authenticate as another legitimate user...

8.5CVSS6.8AI score0.00147EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/03/18 12:00 a.m.15 views

The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software lies in the lack of measures to neutralize special elements, allowing attackers to execute arbitrary code.

The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS5.9AI score0.00715EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder