Lucene search
+L

784 matches found

BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.10 views

The vulnerability of the chash_array component in the virtuoso-opensource web application development platform allows a hacker to trigger a service failure.

The vulnerability of the chasharray component in the virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially crafted SQ...

7.8CVSS7.3AI score0.00735EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.13 views

The vulnerability of the sqlc_add_distinct_node component in the Virtuoso-OpenSource web application development platform allows a attacker to cause a service failure.

The vulnerability of the sqlcadddistinctnode component in the Virtuoso-OpenSource web application development platform is related to the improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending...

7.8CVSS7.3AI score0.00755EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.16 views

The vulnerability of the sqlexp component in the Virtuoso-OpenSource web application development platform allows a hacker to trigger a service failure.

The vulnerability of the sqlexp component in the virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability allows an attacker to cause service interruptions by sending specially crafted SQL...

7.8CVSS7.3AI score0.0068EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.12 views

The vulnerability of the sqlo_expand_jts component in the Virtuoso-OpenSource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the sqloexpandjts component in the Virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially crafted...

7.8CVSS7.3AI score0.00716EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.12 views

The vulnerability of the sql_tree_hash_1 component in the Virtuoso-OpenSource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the sqltreehash1 component in the Virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending specially...

7.8CVSS7.3AI score0.00755EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.13 views

The vulnerability of the numeric_to_dv component in the virtuoso-opensource web application development platform allows a hacker to trigger a service failure.

The vulnerability of the numerictodv component in the virtuoso-opensource web application development platform is related to the improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially craft...

7.8CVSS7.3AI score0.00755EPSS
SaveExploits1References4Affected Software2
RedhatCVE
RedhatCVE
added 2025/03/29 11:35 a.m.11 views

CVE-2025-30879

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Moreconvert Team MC Woocommerce Wishlist smart-wishlist-for-more-convert allows SQL Injection.This issue affects MC Woocommerce Wishlist: from n/a through = 1.8.9...

7.6CVSS7.3AI score0.00572EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/27 11:15 a.m.10 views

CVE-2025-30879

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Moreconvert Team MC Woocommerce Wishlist smart-wishlist-for-more-convert allows SQL Injection.This issue affects MC Woocommerce Wishlist: from n/a through = 1.8.9...

7.6CVSS0.00572EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/27 5:09 a.m.22 views

CVE-2024-45481

An Incomplete Filtering of Special Elements vulnerability in scripts using the SSH server on B APROL 4.4-00P5 may allow an authenticated local attacker to authenticate as another legitimate user...

8.5CVSS6.8AI score0.00147EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/03/18 12:00 a.m.17 views

The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software lies in the lack of measures to neutralize special elements, allowing attackers to execute arbitrary code.

The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS5.9AI score0.00715EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/18 12:00 a.m.20 views

The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software lies in the lack of measures to neutralize special elements, allowing attackers to execute arbitrary code.

The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS5.9AI score0.00715EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2025/03/17 10:15 a.m.12 views

CVE-2024-12971

Improper Neutralization of Special Elements used in a Command vulnerability allows OS Command Injection.This issue affects Pandora FMS from 700 to 777.6...

8.8CVSS5.8AI score0.60602EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2025/03/17 12:00 a.m.14 views

Dell SmartFabric OS10 命令注入漏洞

Dell SmartFabric OS10 is a software-defined network operating system from Dell Networking, based on Linux and open source technologies, designed to enable flexible management and automated deployment of data center network resources. Dell SmartFabric OS10 suffers from a command injection...

7.8CVSS8AI score0.00735EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2025/03/15 12:00 a.m.39 views

The vulnerability of the Trusted Execution Environment (TEE) for the deployment of Intel Trust Domain Extensions (Intel TDX) allows a perpetrator to exploit their privileges by exploiting incomplete filtering of special elements.

The vulnerability of the Trusted Execution Environment TEE for the deployment of Intel Trust Domain Extensions virtual machines is related to incomplete filtering of special elements. Exploiting this vulnerability can allow an attacker to enhance their privileges...

6.2CVSS5.5AI score0.00182EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2025/03/11 3:15 p.m.17 views

CVE-2024-52961

An improper neutralization of special elements used in an OS Command vulnerability CWE-78 vulnerability in Fortinet FortiSandbox 5.0.0, FortiSandbox 4.4.0 through 4.4.6, FortiSandbox 4.2.1 through 4.2.7, FortiSandbox 4.0.0 through 4.0.5, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all version...

8.8CVSS0.00528EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:00 a.m.11 views

The vulnerability of the IAM and user directory management software of IBM Security Verify Directory, which exists due to the failure to take measures to neutralize special elements, allows a perpetrator to execute arbitrary commands.

The vulnerability of the IAM and user directory management software of IBM Security Verify Directory exists due to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands through a specially crafted request...

9.1CVSS5.8AI score0.01077EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:00 a.m.14 views

The vulnerability of the AngularJS JavaScript framework for developing single-page applications lies in its incomplete filtering of special elements. This allows attackers to bypass existing security restrictions and perform spear-phishing attacks.

The vulnerability of the AngularJS framework for developing single-page applications is related to incomplete filtering of special elements. Exploiting this vulnerability can allow attackers to bypass existing security restrictions and perform spear-phishing attacks...

4.8CVSS7AI score0.00635EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/14 12:00 a.m.22 views

The vulnerability of Mendix LDAP module in the deployment and application testing software platform of Mendix allows a hacker to bypass security restrictions.

The vulnerability of Mendix LDAP in the software deployment and application testing platform relates to the failure to eliminate special elements in LDAP requests. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

7.4CVSS5.4AI score0.00499EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:00 a.m.14 views

The vulnerability of Git’s version control extension for large Git files arises from improper elimination of special elements in the output data used by the incoming component. This allows a malicious actor to gain unauthorized access to user credentials.

The vulnerability of Git’s version control extension for large Git files is related to incorrect elimination of special elements in the output data used by the incoming component. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to user...

10CVSS7.4AI score0.01079EPSS
SaveExploits0References6Affected Software3
RedhatCVE
RedhatCVE
added 2025/02/05 11:35 a.m.18 views

CVE-2024-7261

The improper neutralization of special elements in the parameter "host" in the CGI program of Zyxel NWA1123ACv3 firmware version 6.70ABVT.4 and earlier, WAC500 firmware version 6.70ABVS.4 and earlier, WAX655E firmware version 7.00ACDO.1 and earlier, WBE530 firmware version 7.00ACLE.1 and earlier,...

9.8CVSS7.5AI score0.11408EPSS
SaveExploits0References1
Rows per page
Query Builder