1048 matches found
CVE-2022-0258
pimcore is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...
PT-2022-13076
Name of the Vulnerable Software and Affected Versions pimcore affected versions not specified Description The issue is related to Improper Neutralization of Special Elements used in an SQL Command. This means that pimcore does not properly handle special elements in SQL commands, which could lead...
Zoho ManageEngine O365 Manager Plus Remote Code Execution Vulnerability
A security vulnerability exists in Zoho ManageEngine O365 Manager Plus, a software for auditing, monitoring and managing Office 365 from ZOHO, Inc. prior to Build 4416, which stems from an external input data during the construction of a code segment, and the network system or product fails to...
CVE-2022-0224
dolibarr is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...
CVE-2022-0224: Improper Neutralization of Special Elements used in an SQL Command
dolibarr is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...
emlog Remote Code Execution Vulnerability (CNVD-2021-101689)
Emlog is a PHP and MySQL-based CMS builder from the Emlog personal developer. Emlog in version 5.3.1 contains a remote code execution vulnerability that stems from the failure of a network system or product to properly filter special elements in the process of constructing code segments from...
CVE-2021-3817
wbcecms is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...
CVE-2021-3817 SQL Injection in wbce/wbce_cms
wbcecms is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...
CVE-2021-43469: Improper Neutralization of Special Elements used in a Command
VINGA WR-N300U 77.102.1.4853 is affected by a command execution vulnerability in the goahead component...
CVE-2021-43362
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MedData HBYS allows SQL Injection.This issue affects HBYS: from unspecified before 1.1...
CVE-2021-3934
ohmyzsh is vulnerable to Improper Neutralization of Special Elements used in an OS Command...
CVE-2021-3934
ohmyzsh is vulnerable to Improper Neutralization of Special Elements used in an OS Command...
The vulnerability of the txtID parameter in the xp_cmdshell procedure of the BillQuick Web Suite’s time and attendance system allows a perpetrator to execute arbitrary code.
The vulnerability of the txtID parameter in the xpcmdshell procedure of the BillQuick Web Suite payroll and accounting system is related to errors during the elimination of special elements in SQL queries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the urllib3 module in the Python programming language lies in its insufficient ability to neutralize special elements in requests. This allows attackers to gain access to sensitive data and compromise its integrity.
The vulnerability of the urllib3 method in the Python programming language lies in the insufficient neutralization of special elements in HTTP requests. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity...
CVE-2021-40995: Improper Neutralization of Special Elements used in a Command
A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for...
CVE-2021-40994: Improper Neutralization of Special Elements used in a Command
A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for...
CVE-2021-40998: Improper Neutralization of Special Elements used in a Command
A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for...
The vulnerability of the Moxa MXView network control software lies in its failure to eliminate special elements, allowing a violator to execute arbitrary code.
The vulnerability of the Moxa MXView network control software lies in the lack of measures taken to neutralize special elements in the output data used by the incoming component. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted reques...
CVE-2021-38124: Improper Neutralization of Special Elements used in a Command
Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager ESM product, affecting versions 7.0.2 through 7.5. The vulnerability could be exploited resulting in remote code execution...
The vulnerability of the CLI component of the Cisco IOS XR operating system, allowing a hacker to execute arbitrary commands
The vulnerability of the CLI component of the Cisco IOS XR operating system exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...