Lucene search
+L

784 matches found

BDU FSTEC
BDU FSTEC
added 2025/04/22 12:00 a.m.12 views

The vulnerability of TOTOLINK A7100RU router’s microprogramming software, which exists due to the lack of measures to neutralize special elements, allows intruders to inject arbitrary commands.

The vulnerability of TOTOLINK A7100RU router microprogramming software exists due to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to inject arbitrary commands...

10CVSS7.9AI score0.02063EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/22 12:00 a.m.11 views

The vulnerability of the SafeInspect privilege control system lies in its failure to eliminate special elements used in the operating system’s command set, allowing a violator to execute arbitrary commands.

The vulnerability of the SafeInspect privilege control system lies in the lack of measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to remotely execute arbitrary commands...

9.1CVSS5.8AI score
SaveExploits0Affected Software1
Cvelist
Cvelist
added 2025/04/21 7:31 p.m.24 views

CVE-2025-3841 wix-incubator jam Jinja2 Template jam.py special elements used in a template engine

A vulnerability, which was classified as problematic, was found in wix-incubator jam up to e87a6fd85cf8fb5ff37b62b2d68f917219d07ae9. This affects an unknown part of the file jam.py of the component Jinja2 Template Handler. The manipulation of the argument config'template' leads to improper...

4.8CVSS0.00417EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2025/04/14 12:00 a.m.14 views

The vulnerability of the EMACS text editor arises from the lack of measures taken to eliminate special elements, allowing attackers to execute arbitrary commands.

The vulnerability of the EMACS text editor exists because measures to neutralize special elements have not been taken. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

10CVSS7.9AI score0.02581EPSS
SaveExploits0References7Affected Software6
RedhatCVE
RedhatCVE
added 2025/04/12 8:52 a.m.31 views

CVE-2025-32687

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Magnigenie Review Stars Count For WooCommerce review-stars-count-for-woocommerce allows SQL Injection.This issue affects Review Stars Count For WooCommerce: from n/a through = 2.0...

8.5CVSS7.3AI score0.00331EPSS
SaveExploits0References1
SUSE Linux
SUSE Linux
added 2025/04/09 10:12 a.m.4 views

Security update for azure-cli-core

This update for azure-cli-core fixes the following issues: CVE-2025-24049: Fixed improper neutralization of special elements used in a command allows an unauthorized attacker to elevate privileges locally bsc1239460 Patch Instructions: To install this SUSE update use the SUSE recommended...

8.6CVSS7.2AI score0.00422EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:00 a.m.15 views

The vulnerability of the software for multifunctional measuring instruments used to measure parameters of electrical networks from Siemens SENTRON 7KT PAC1260 lies in the lack of measures to neutralize special elements, allowing a violator to execute arbitrary codes.

The vulnerability of the software for multifunctional measuring instruments used to measure parameters of electrical networks from Siemens SENTRON 7KT PAC1260 is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow a remote attacker to...

9.1CVSS6.4AI score0.00893EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:00 a.m.16 views

The vulnerability of the software for multifunctional measuring instruments used to measure parameters of electrical networks from Siemens SENTRON 7KT PAC1260 lies in the lack of measures to neutralize special elements, allowing a violator to execute arbitrary codes.

The vulnerability of the software for multifunctional measuring instruments used to measure parameters of electrical networks from Siemens SENTRON 7KT PAC1260 is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow a remote attacker to...

9.1CVSS6.4AI score0.00893EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:00 a.m.24 views

The vulnerability of the software for multifunctional measuring instruments used to measure parameters of electrical networks from Siemens SENTRON 7KT PAC1260 lies in the lack of measures to neutralize special elements, allowing a violator to execute arbitrary codes.

The vulnerability of the software for multifunctional measuring instruments used to measure parameters of electrical networks from Siemens SENTRON 7KT PAC1260 is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow a remote attacker to...

9.1CVSS6.4AI score0.00893EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:00 a.m.11 views

The vulnerability of the ColdFusion software platform, related to the lack of measures to neutralize special elements, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8CVSS8.3AI score0.02587EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:00 a.m.12 views

The vulnerability of the ColdFusion software platform, related to the lack of measures to neutralize special elements, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.5CVSS8.3AI score0.05341EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/01 12:00 a.m.16 views

The vulnerability of the graphical user interface of the FortiIsolator browser platform allows a hacker to execute arbitrary code.

The vulnerability of the graphical user interface of the FortiIsolator browser platform exists due to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS5.9AI score0.01001EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2025/03/31 1:15 p.m.9 views

CVE-2025-31547

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aphotrax Uptime Robot Plugin for WordPress uptime-robot-monitor allows SQL Injection.This issue affects Uptime Robot Plugin for WordPress: from n/a through = 2.3...

8.5CVSS0.00325EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.11 views

The vulnerability of the Dell Unity Operating Environment’s operating environment for managing and maintaining data storage allows attackers to enhance their privileges, execute arbitrary commands, and gain full control over the application. This vulnerability arises from the lack of measures taken to neutralize special elements used in the operating system’s command set.

The vulnerability of the Dell Unity Operating Environment’s operating system for data storage management and operation is related to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability can allow a malicious actor to...

10CVSS5.8AI score0.02022EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.16 views

The vulnerability of the itc_hash_compare component in the Virtuoso-OpenSource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the itchashcompare component in the Virtuoso-opensource web application development platform is related to the improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially...

7.8CVSS7.3AI score0.00577EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.12 views

The vulnerability of the qi_inst_state_free component in the Virtuoso-OpenSource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the qiinststatefree component in the Virtuoso-OpenSource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending specially...

7.8CVSS7.3AI score0.00921EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.12 views

The vulnerability of the operating environment for managing and maintaining the Dell Unity Operating Environment (OE) storage system lies in the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows attackers to enhance their privileges and execute arbitrary commands.

The vulnerability of the Dell Unity Operating Environment’s operating environment for data storage management and operation is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow attackers to enhance...

7.8CVSS5.8AI score0.00572EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.10 views

The vulnerability of the row_insert_cast component in the virtuoso-opensource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the rowinsertcast component in the virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially crafted...

7.8CVSS7.3AI score0.0068EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.14 views

The vulnerability of the qst_vec_set component in the virtuoso-opensource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the qstvecset component in the virtuoso-opensource web application development platform is related to the improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially crafted...

7.8CVSS7.3AI score0.00577EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.12 views

The vulnerability of the operating environment for managing and maintaining the Dell Unity Operating Environment (DELL Unity OE) lies in the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows attackers to enhance their privileges and execute arbitrary commands.

The vulnerability of the Dell Unity Operating Environment’s operating environment for data storage management and operation is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow attackers to enhance...

7.8CVSS5.8AI score0.00586EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder