Lucene search
+L

781 matches found

NVD
NVD
added 2023/09/15 9:15 a.m.21 views

CVE-2023-4835

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CF Software Oil Management Software allows SQL Injection. This issue affects Oil Management Software: before 20230912...

9.8CVSS9.9AI score0.0055EPSS
SaveExploits0References2
NVD
NVD
added 2023/09/15 9:15 a.m.28 views

CVE-2023-4661

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Saphira Saphira Connect allows SQL Injection. This issue affects Saphira Connect: before 9...

9.8CVSS9.9AI score0.00819EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/09/15 12:00 a.m.8 views

Ncode Ncep SQL Injection Vulnerability

Ncode Ncep is an application from Ncode, Inc. A SQL injection vulnerability exists in versions prior to Ncode Ncep 20230914 that stems from improper neutralization of special elements...

9.8CVSS7.9AI score0.00534EPSS
SaveExploits0References3
NVD
NVD
added 2023/09/14 7:16 p.m.14 views

CVE-2023-4766

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Movus allows SQL Injection. This issue affects Movus: before 20230913...

9.8CVSS9.9AI score0.0055EPSS
SaveExploits0References2
Prion
Prion
added 2023/09/14 6:15 p.m.29 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aceka Company Management allows SQL Injection.This issue affects Company Management: before 3072...

7.5CVSS9.7AI score0.0055EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2023/09/13 1:15 p.m.29 views

CVE-2022-35849

An improper neutralization of special elements used in an OS command vulnerability CWE-78 in the management interface of FortiADC 7.1.0 through 7.1.1, 7.0.0 through 7.0.3, 6.2.0 through 6.2.5 and 6.1.0 all versions may allow an authenticated attacker to execute unauthorized commands via...

8.8CVSS8.1AI score0.00405EPSS
SaveExploits0References1
Redos
Redos
added 2023/09/12 12:00 a.m.35 views

ROS-20230911-05

Vulnerability in the document processing, conversion and generation software suite Ghostscript exists due to failure to take measures to neutralize special elements used in the operating system command. Exploitation of the vulnerability could allow an attacker to execute arbitrary code by using t...

7.8CVSS7.2AI score0.04345EPSS
SaveExploits4
BDU FSTEC
BDU FSTEC
added 2023/09/07 12:00 a.m.12 views

The vulnerability of the Xwiki Commons modules on the XWiki platform, which is used for creating collaborative web applications. This allows a hacker to execute arbitrary code.

The vulnerability of the XWiki Commons modules on the XWiki platform, which is used for creating collaborative web applications, stems from the failure to address the issue of eliminating special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS7AI score0.01029EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/07 12:00 a.m.10 views

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications. This vulnerability arises due to the failure to take measures to eliminate special elements within it, allowing attackers to execute arbitrary code.

The vulnerability of the XWiki platform lies in its lack of measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8AI score0.01932EPSS
SaveExploits1References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/07 12:00 a.m.9 views

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications. This vulnerability arises due to the failure to take measures to eliminate special elements within it, allowing attackers to execute arbitrary code.

The vulnerability of the XWiki platform lies in its lack of measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS8AI score0.82032EPSS
SaveExploits1References7Affected Software1
OSV
OSV
added 2023/09/05 7:15 p.m.9 views

CVE-2023-4531

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mestav Software E-commerce Software allows SQL Injection.This issue affects E-commerce Software: before 20230901...

9.8CVSS5.8AI score0.00523EPSS
SaveExploits0References1
Prion
Prion
added 2023/09/05 7:15 p.m.30 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mestav Software E-commerce Software allows SQL Injection.This issue affects E-commerce Software: before 20230901...

7.5CVSS9.7AI score0.00523EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/09/05 6:15 p.m.18 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Osoft Paint Production Management allows SQL Injection.This issue affects Paint Production Management: before 2.1...

7.5CVSS9.7AI score0.00519EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/09/02 1:15 p.m.6 views

CVE-2023-39980

A vulnerability that allows the unauthorized disclosure of authenticated information has been identified in MXsecurity versions prior to v1.0.1. This vulnerability arises when special elements are not neutralized correctly, allowing remote attackers to alter SQL commands...

8.1CVSS5.8AI score0.00516EPSS
SaveExploits0References1
NVD
NVD
added 2023/08/31 4:15 p.m.32 views

CVE-2023-31172

An Incomplete Filtering of Special Elements vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated...

7.4CVSS6.2AI score0.00312EPSS
SaveExploits0References2
OSV
OSV
added 2023/08/31 4:15 p.m.12 views

CVE-2023-31172

An Incomplete Filtering of Special Elements vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated...

7.4CVSS5.8AI score0.00312EPSS
SaveExploits0References2
Prion
Prion
added 2023/08/31 4:15 p.m.24 views

Design/Logic Flaw

An Incomplete Filtering of Special Elements vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated...

4.3CVSS7.4AI score0.00312EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2023/08/31 4:15 p.m.19 views

Sql injection

An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See...

4.3CVSS6.8AI score0.00341EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/08/31 3:30 p.m.43 views

CVE-2023-31172 Incomplete Filtering of Special Elements

An Incomplete Filtering of Special Elements vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated...

5.9CVSS7.6AI score0.00312EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/08/28 12:00 a.m.8 views

The vulnerability of microprogramming software in web panels for managing and monitoring processes in industrial systems, PHOENIX CONTACT WP 6xxx – existing due to the lack of measures to neutralize special elements – allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of microprogrammed software in web panels for managing and monitoring processes in industrial systems like PHOENIX CONTACT WP 6xxx exists due to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow a malicious actor to compromise the...

8.3CVSS7.1AI score0.00928EPSS
SaveExploits0References2Affected Software6
Rows per page
Query Builder