Lucene search
+L

749 matches found

CNNVD
CNNVD
added 2023/08/07 12:0 a.m.8 views

Joomla! Proforms Basic SQL Injection Vulnerability

Joomla! is a set of forum components used in the Joomla! content management system. A security vulnerability exists in Joomla! Proforms Basic that stems from improper neutralization of special elements, which can lead to SQL injection...

9.8CVSS7.4AI score0.00504EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/08/07 12:0 a.m.5 views

BA Gallery SQL Injection Vulnerability in Joomla!

Joomla! is a set of forum components used in the Joomla! content management system. A security vulnerability exists in Joomla! BA Gallery that stems from improper neutralization of special elements, which can lead to SQL injection...

9.8CVSS7.4AI score0.00504EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/08/07 12:0 a.m.8 views

Joomla! Creative Gallery SQL Injection Vulnerability

Joomla! is a set of forum components used in the Joomla! content management system. A security vulnerability exists in Joomla! Creative Gallery that stems from improper neutralization of special elements, which can lead to SQL injection...

9.8CVSS7.4AI score0.00504EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/08/07 12:0 a.m.11 views

PT-2023-7552

Name of the Vulnerable Software and Affected Versions OpenCMS affected versions not specified Description The issue in OpenCMS is related to the failure to neutralize special elements. This could allow a remote attacker to impact the confidentiality, integrity, and availability of information...

10CVSS5.8AI score0.00232EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2023/08/04 5:15 p.m.16 views

CVE-2023-4157 Improper Neutralization of Special Elements in Output Used by a Downstream Component in omeka/omeka-s

CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' in GitHub repository omeka/omeka-s prior to version 4.0.3...

5.2CVSS6.8AI score0.00445EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2023/08/03 12:0 a.m.16 views

The vulnerability of the SAP NetWeaver ABAP software integration platform, related to the failure to take measures to neutralize special elements, allows a perpetrator to execute arbitrary commands.

The vulnerability of the SAP NetWeaver ABAP software integration platform is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

9.1CVSS7.9AI score0.00845EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/01 12:0 a.m.8 views

The vulnerability of Cisco BroadWorks server software arises from the lack of measures taken to neutralize specific elements, allowing attackers to elevate their privileges to the root level.

The vulnerability of Cisco BroadWorks server software exists due to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability can allow attackers to elevate their privileges to the root level...

6CVSS6.2AI score0.00204EPSS
SaveExploits0References3Affected Software2
NVD
NVD
added 2023/07/25 6:15 a.m.21 views

CVE-2023-3046

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Biltay Technology Scienta allows SQL Injection. This issue affects Scienta: before 20230630.1953...

9.8CVSS9.9AI score0.00626EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/07/25 5:46 a.m.18 views

CVE-2023-3046 SQLi in Biltay Technlogys Scienta

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Biltay Technology Scienta allows SQL Injection. This issue affects Scienta: before 20230630.1953...

9.8CVSS7.4AI score0.00626EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.8 views

The vulnerability of the `write_status_text_and_buffer` function in the `prc.c` component of the GnuPG information encryption and digital signatures generation program allows a perpetrator to access confidential data and compromise its integrity.

The vulnerability of the writestatustextandbuffer function in the prc.c component of the GnuPG information encryption and digital signatures generation program involves insufficient elimination of special elements in the request. Exploiting this vulnerability allows a malicious actor to gain acce...

7.8CVSS6.8AI score0.02569EPSS
SaveExploits1References11Affected Software4
Prion
Prion
added 2023/07/17 2:15 p.m.17 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Oliva Expertise Oliva Expertise EKS allows SQL Injection.This issue affects Oliva Expertise EKS: before 1.2...

7.5CVSS9.7AI score0.00626EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/17 1:11 p.m.12 views

CVE-2023-3376 SQLi in Digital Strategys Zekiweb

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Digital Strategy Zekiweb allows SQL Injection. This issue affects Zekiweb: before 2...

9.8CVSS7.4AI score0.00626EPSS
SaveExploits0References2
CNVD
CNVD
added 2023/07/14 12:0 a.m.19 views

SAP NetWeaver Path Traversal Vulnerability (CNVD-2023-65181)

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform mainly for SAP applications to provide development and runtime environment. A path traversal vulnerability exists in SAP NetWeaver, which results from the program failing to properl...

8.7CVSS8AI score0.00974EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/07/13 2:15 p.m.5 views

CVE-2023-35070

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VegaGroup Web Collection allows SQL Injection. This issue affects Web Collection: before 31197...

9.8CVSS7.4AI score0.00626EPSS
SaveExploits0References3
Prion
Prion
added 2023/07/13 8:15 a.m.22 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Elra Parkmatik allows SQL Injection through SOAP Parameter Tampering, Command Line Execution through SQL Injection.This issue affects Parkmatik: before 02.01-a51...

7.5CVSS10AI score0.00706EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/07/13 8:15 a.m.17 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Lisa Software Florist Site allows SQL Injection.This issue affects Florist Site: before 3.0...

7.5CVSS9.7AI score0.0062EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/07/13 7:42 a.m.19 views

CVE-2023-1547 SQLi in Elra Computers Parkmatik

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Elra Parkmatik allows SQL Injection through SOAP Parameter Tampering, Command Line Execution through SQL Injection. This issue affects Parkmatik: before 02.01-a51...

9.8CVSS10AI score0.00706EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/07/13 12:0 a.m.9 views

The vulnerability of the 1Panel Linux server’s control panel, related to the failure to eliminate special elements used in the operating system commands, allows a hacker to execute arbitrary commands.

The vulnerability of the 1Panel Linux server control panel is related to the lack of measures taken to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9CVSS8AI score0.02313EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2023/07/12 6:41 a.m.26 views

CVE-2023-37197

A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command 'SQL Injection' vulnerability exists that could allow a user already authenticated on DCE to access unauthorized content, change, or delete content, or perform unauthorized actions when tampering with the...

8.8CVSS8.9AI score0.00598EPSS
SaveExploits0References1
NVD
NVD
added 2023/07/10 4:15 p.m.26 views

CVE-2023-2852

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Softmed SelfPatron allows SQL Injection. This issue affects SelfPatron : before 2.0...

9.8CVSS9.9AI score0.00879EPSS
SaveExploits1References2
Rows per page
Query Builder