Lucene search
+L

1048 matches found

Mend
Mend
•added 2022/01/17 3:15 p.m.•3 views

CVE-2022-0258

pimcore is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...

8.8CVSS0.01658EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2022/01/17 12:00 a.m.•3 views

PT-2022-13076

Name of the Vulnerable Software and Affected Versions pimcore affected versions not specified Description The issue is related to Improper Neutralization of Special Elements used in an SQL Command. This means that pimcore does not properly handle special elements in SQL commands, which could lead...

8.8CVSS0.01658EPSS
SaveExploits1References10
CNVD
CNVD
•added 2022/01/16 12:00 a.m.•86 views

Zoho ManageEngine O365 Manager Plus Remote Code Execution Vulnerability

A security vulnerability exists in Zoho ManageEngine O365 Manager Plus, a software for auditing, monitoring and managing Office 365 from ZOHO, Inc. prior to Build 4416, which stems from an external input data during the construction of a code segment, and the network system or product fails to...

7.8CVSS3.2AI score0.02565EPSS
SaveExploits0References1
Mend
Mend
•added 2022/01/14 5:35 p.m.•2 views

CVE-2022-0224

dolibarr is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...

9.8CVSS0.01979EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/14 12:00 a.m.•2 views

CVE-2022-0224: Improper Neutralization of Special Elements used in an SQL Command

dolibarr is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...

9.8CVSS5.8AI score0.01979EPSS
SaveExploits1References3
CNVD
CNVD
•added 2021/12/19 12:00 a.m.•56 views

emlog Remote Code Execution Vulnerability (CNVD-2021-101689)

Emlog is a PHP and MySQL-based CMS builder from the Emlog personal developer. Emlog in version 5.3.1 contains a remote code execution vulnerability that stems from the failure of a network system or product to properly filter special elements in the process of constructing code segments from...

9.8CVSS5.4AI score0.0307EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/12/09 11:15 a.m.•9 views

CVE-2021-3817

wbcecms is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...

9.8CVSS7.3AI score0.38418EPSS
SaveExploits4References4
Cvelist
Cvelist
•added 2021/12/09 10:50 a.m.•61 views

CVE-2021-3817 SQL Injection in wbce/wbce_cms

wbcecms is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...

9.8CVSS10AI score0.38418EPSS
SaveExploits4References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/06 12:00 a.m.•4 views

CVE-2021-43469: Improper Neutralization of Special Elements used in a Command

VINGA WR-N300U 77.102.1.4853 is affected by a command execution vulnerability in the goahead component...

8.8CVSS6AI score0.02383EPSS
SaveExploits1References2
OSV
OSV
•added 2021/11/16 4:15 p.m.•13 views

CVE-2021-43362

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MedData HBYS allows SQL Injection.This issue affects HBYS: from unspecified before 1.1...

9.8CVSS7.4AI score0.007EPSS
SaveExploits0References1
NVD
NVD
•added 2021/11/12 12:15 p.m.•25 views

CVE-2021-3934

ohmyzsh is vulnerable to Improper Neutralization of Special Elements used in an OS Command...

7.8CVSS0.00618EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/11/12 12:15 p.m.•8 views

CVE-2021-3934

ohmyzsh is vulnerable to Improper Neutralization of Special Elements used in an OS Command...

7.8CVSS7.1AI score0.00618EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2021/11/10 12:00 a.m.•21 views

The vulnerability of the txtID parameter in the xp_cmdshell procedure of the BillQuick Web Suite’s time and attendance system allows a perpetrator to execute arbitrary code.

The vulnerability of the txtID parameter in the xpcmdshell procedure of the BillQuick Web Suite payroll and accounting system is related to errors during the elimination of special elements in SQL queries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.5AI score0.74426EPSS
SaveExploits3References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/10/29 12:00 a.m.•14 views

The vulnerability of the urllib3 module in the Python programming language lies in its insufficient ability to neutralize special elements in requests. This allows attackers to gain access to sensitive data and compromise its integrity.

The vulnerability of the urllib3 method in the Python programming language lies in the insufficient neutralization of special elements in HTTP requests. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity...

6.5CVSS7.1AI score0.02269EPSS
SaveExploits0References17Affected Software7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/15 12:00 a.m.•5 views

CVE-2021-40995: Improper Neutralization of Special Elements used in a Command

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for...

6.5CVSS6.1AI score0.0117EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/15 12:00 a.m.•6 views

CVE-2021-40994: Improper Neutralization of Special Elements used in a Command

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for...

6.5CVSS6.1AI score0.0117EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/15 12:00 a.m.•5 views

CVE-2021-40998: Improper Neutralization of Special Elements used in a Command

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for...

9CVSS6.1AI score0.02905EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/10/13 12:00 a.m.•34 views

The vulnerability of the Moxa MXView network control software lies in its failure to eliminate special elements, allowing a violator to execute arbitrary code.

The vulnerability of the Moxa MXView network control software lies in the lack of measures taken to neutralize special elements in the output data used by the incoming component. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted reques...

10CVSS8.5AI score0.01816EPSS
SaveExploits0References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/28 12:00 a.m.•8 views

CVE-2021-38124: Improper Neutralization of Special Elements used in a Command

Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager ESM product, affecting versions 7.0.2 through 7.5. The vulnerability could be exploited resulting in remote code execution...

9.8CVSS6.3AI score0.0208EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/09/23 12:00 a.m.•22 views

The vulnerability of the CLI component of the Cisco IOS XR operating system, allowing a hacker to execute arbitrary commands

The vulnerability of the CLI component of the Cisco IOS XR operating system exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...

6.8CVSS6.9AI score0.00282EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder