Lucene search
+L

1476 matches found

osv-cve
osv-cve
•added 2025/01/14 12:00 a.m.•30 views

CVE-2024-57641

An issue in the sqlexp component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.3AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/14 12:00 a.m.•6 views

CVE-2024-57662: Allocation of Resources Without Limits or Throttling

An issue in the sqlghashsource component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS5.8AI score0.00844EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2025/01/14 12:00 a.m.•34 views

CVE-2024-57661

An issue in the sqlodf component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.5AI score0.00836EPSS
SaveExploits1
Mend
Mend
•added 2025/01/14 12:00 a.m.•3 views

CVE-2024-57619

An issue in the atomgetint component of MonetDB Server v11.47.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

8.7CVSS0.00583EPSS
SaveExploits1References1
osv-cve
osv-cve
•added 2025/01/14 12:00 a.m.•21 views

CVE-2024-57652

An issue in the numerictodv component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.3AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/14 12:00 a.m.•5 views

CVE-2024-57646: Improper Neutralization of Special Elements used in an SQL Command

An issue in the psiginfo component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS5.8AI score0.00577EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/01/14 12:00 a.m.•45 views

CVE-2024-57660

An issue in the sqloexpandjts component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

0.00716EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/01/14 12:00 a.m.•42 views

CVE-2024-57650

An issue in the qiinststatefree component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

0.00921EPSS
SaveExploits1References1
CVE
CVE
•added 2025/01/14 12:00 a.m.•125 views

CVE-2024-57660

The sqlo_expand_jts component in openlink virtuoso-opensource version v7.2.11 is vulnerable to a Denial of Service (DoS) attack. This is caused by the improper neutralization of special elements used in SQL commands, which can be triggered by an attacker sending specially crafted SQL statements. ...

7.5CVSS7.6AI score0.00716EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2025/01/14 12:00 a.m.•92 views

CVE-2024-57662

A Denial of Service (DoS) vulnerability exists in the sqlg_hash_source component of openlink virtuoso-opensource v7.2.11 . Attackers can exploit this issue by sending crafted SQL statements , which can trigger service interruptions due to unconstrained and unregulated resource allocation . The vu...

7.5CVSS7.6AI score0.00844EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/14 12:00 a.m.•4 views

CVE-2024-57661: Improper Resource Shutdown or Release

An issue in the sqlodf component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS5.8AI score0.00836EPSS
SaveExploits1References1
Mend
Mend
•added 2025/01/14 12:00 a.m.•4 views

CVE-2024-57661

An issue in the sqlodf component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

8.7CVSS0.00836EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/01/14 12:00 a.m.•59 views

CVE-2024-57662

An issue in the sqlghashsource component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

0.00844EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/12/10 6:56 p.m.•44 views

CVE-2024-11773

SQL injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements...

9.1CVSS0.23454EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/10 12:00 a.m.•4 views

CVE-2024-11773: Improper Neutralization of Special Elements used in an SQL Command

SQL injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements...

9.1CVSS6AI score0.23454EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/19 7:31 p.m.•35 views

CVE-2024-52360 IBM Concert Software SQL injection

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, and 1.0.2.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

7.6CVSS7.7AI score0.0045EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/21 8:15 p.m.•51 views

CVE-2024-48509

Learning with Texts LWT 2.0.3 is vulnerable to SQL Injection. This occurs when the application fails to properly sanitize user inputs, allowing attackers to manipulate SQL queries by injecting malicious SQL statements into URL parameters. By exploiting this vulnerability, an attacker could gain...

9.8CVSS0.00543EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/10/18 12:00 a.m.•19 views

The vulnerability of the dfe_unit_col_loci component in the Virtuoso-opensource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the dfeunitcolloci component in the Virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to trigger a service failure using specially created S...

7.8CVSS7.3AI score0.00905EPSS
SaveExploits1References5Affected Software3
BDU FSTEC
BDU FSTEC
•added 2024/10/18 12:00 a.m.•32 views

The vulnerability of the __nss_database_lookup component in the Virtuoso-opensource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the nssdatabaselookup component in the Virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to trigger a service failure using specially create...

7.8CVSS7.3AI score0.00909EPSS
SaveExploits1References5Affected Software3
BDU FSTEC
BDU FSTEC
•added 2024/10/18 12:00 a.m.•17 views

The vulnerability of the mp_box_copy component in the Virtuoso-opensource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the mpboxcopy component in the Virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to trigger a service failure using specially created SQL...

7.8CVSS7.3AI score0.00905EPSS
SaveExploits1References5Affected Software3
Rows per page
Query Builder