Lucene search
+L

784 matches found

Prion
Prion
added 2023/12/20 4:15 p.m.21 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WooCommerce AutomateWoo.This issue affects AutomateWoo: from n/a through 4.9.50...

5.5CVSS7.9AI score0.00644EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/12/20 4:15 p.m.26 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in PenciDesign Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme.This issue affects Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme: from n/a through 8.4.1...

5.5CVSS8AI score0.00528EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/12/20 2:15 p.m.26 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Avirtum iPages Flipbook For WordPress.This issue affects iPages Flipbook For WordPress: from n/a through 1.4.8...

3.3CVSS7.9AI score0.0054EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/12/20 2:15 p.m.35 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MainWP MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance.This issue affects MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance: from n/a through 4.4.3.3...

3.3CVSS8AI score0.00551EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2023/12/19 9:15 p.m.30 views

CVE-2023-48741

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in QuantumCloud AI ChatBot.This issue affects AI ChatBot: from n/a through 4.7.8...

7.6CVSS0.00725EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/19 9:15 p.m.30 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WC Vendors WC Vendors – WooCommerce Multi-Vendor, WooCommerce Marketplace, Product Vendors.This issue affects WC Vendors – WooCommerce Multi-Vendor, WooCommerce Marketplace, Product Vendors: from n...

5.8CVSS7.9AI score0.00725EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/12/18 11:15 p.m.13 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mahlamusa Who Hit The Page – Hit Counter allows SQL Injection.This issue affects Who Hit The Page – Hit Counter: from n/a through 1.4.14.3...

4.7CVSS7.9AI score0.00654EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/12/18 11:15 p.m.18 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPVibes Redirect 404 Error Page to Homepage or Custom Page with Logs allows SQL Injection.This issue affects Redirect 404 Error Page to Homepage or Custom Page with Logs: from n/a through 1.8.7...

5.8CVSS7.8AI score0.00725EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/12/18 11:15 p.m.22 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WooCommerce Product Vendors allows SQL Injection.This issue affects Product Vendors: from n/a through 2.1.76...

5.8CVSS7.9AI score0.00929EPSS
SaveExploits1References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/14 12:00 a.m.15 views

The vulnerability of the microprogrammed software of the FXC AE1021 and FXC AE1021PE routers lies in the failure to take measures to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands.

The vulnerability of the microprogrammed routing devices FXC AE1021 and FXC AE1021PE lies in the lack of measures to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8CVSS8.1AI score0.50447EPSS
SaveExploits1References6Affected Software2
NVD
NVD
added 2023/12/13 7:15 a.m.23 views

CVE-2023-40716

An improper neutralization of special elements used in an OS command vulnerability CWE-78 in the command line interpreter of FortiTester 2.3.0 through 7.2.3 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments when running execute restore/backup...

7.8CVSS0.00247EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/12 12:15 p.m.28 views

CVE-2023-49692

A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 All versions V7.2.2, RUGGEDCOM RM1224 LTE4G NAM 6GK6108-4AM00-2DA2 All versions V7.2.2, SCALANCE M804PB 6GK5804-0AP00-2AA2 All versions V7.2.2, SCALANCE M812-1 ADSL-Router 6GK5812-1AA00-2AA2 All versions V7.2.2,...

7.2CVSS0.00623EPSS
SaveExploits0References3
NVD
NVD
added 2023/12/12 4:15 a.m.30 views

CVE-2023-6709

Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository mlflow/mlflow prior to 2.9.2...

10CVSS0.00937EPSS
SaveExploits1References2
OSV
OSV
added 2023/12/12 4:15 a.m.9 views

PYSEC-2023-281

Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository mlflow/mlflow prior to 2.9.2...

8.8CVSS7.2AI score0.00937EPSS
SaveExploits1References6
PyPA
PyPA
added 2023/12/12 4:15 a.m.14 views

PYSEC-2023-281

Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository mlflow/mlflow prior to 2.9.2...

10CVSS6.7AI score0.00937EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/12 12:00 a.m.12 views

The vulnerability of the Image Horizontal Reel Scroll Slideshow Plugin lies in its lack of measures to neutralize special elements, allowing attackers to execute arbitrary SQL queries.

The vulnerability of the Image Horizontal Reel Scroll Slideshow Plugin exists due to the failure to address the issue of eliminating special elements. Exploiting this vulnerability can allow a remote attacker to execute arbitrary SQL queries...

9CVSS7.5AI score0.01486EPSS
SaveExploits2References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/12 12:00 a.m.14 views

The vulnerability of the PostCSS library arises from the lack of measures taken to neutralize special elements, allowing attackers to execute arbitrary code.

The vulnerability of the PostCSS library exists because measures to neutralize special elements have not been taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

5.3CVSS6.6AI score0.00822EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/12/12 12:00 a.m.12 views

The software for Zoho ManageEngine RecoveryManager Plus is vulnerable because measures taken to eliminate special elements used in the operating system commands have not been implemented. This vulnerability allows attackers to execute arbitrary commands.

The software for Zoho ManageEngine RecoveryManager Plus has vulnerabilities because measures to neutralize specific elements have not been taken. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary commands remotely...

8.3CVSS7.5AI score0.82163EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/11 12:00 a.m.10 views

The vulnerability of the web portal of the microprogramming software for TP-Link Archer VR1600V (AC1600) allows a hacker to gain access to read, modify, or delete files, execute arbitrary commands, or trigger a service failure.

The vulnerability of the web-based software platform of TP-Link Archer VR1600V AC1600 wireless VoIP routers lies in the lack of measures to neutralize special elements used in the operating system’s processing of the variable XTPIfName. Exploiting this vulnerability can allow an attacker to gain...

6.8CVSS6.9AI score0.01756EPSS
SaveExploits2References3
BDU FSTEC
BDU FSTEC
added 2023/12/08 12:00 a.m.15 views

The vulnerability of the DataLogView.php, EventsView.php, and AlarmsView.php scripts of the microprogramming software for Osprey Pump Controller controllers allows a perpetrator to execute arbitrary commands.

The vulnerability of the DataLogView.php, EventsView.php, and AlarmsView.php scripts of the Osprey Pump Controller microprogrammed software exists due to the failure to take measures to neutralize certain special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrar...

10CVSS8.2AI score0.17571EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder