PT-2025-3529

Name of the Vulnerable Software and Affected Versions openlink virtuoso-opensource version 7.2.11 Description The issue in the sqlg hash source component allows attackers to cause a Denial of Service DoS via crafted SQL statements. Recommendations For openlink virtuoso-opensource version 7.2.11,...

PT-2025-3528

Name of the Vulnerable Software and Affected Versions openlink virtuoso-opensource version 7.2.11 Description The issue in the sqlo df component of openlink virtuoso-opensource allows attackers to cause a Denial of Service DoS via crafted SQL statements. Recommendations For openlink...

PT-2025-3524

Name of the Vulnerable Software and Affected Versions openlink virtuoso-opensource version 7.2.11 Description The issue in the sqlg vec upd component of openlink virtuoso-opensource allows attackers to cause a Denial of Service DoS via crafted SQL statements. Recommendations For openlink...

PT-2025-3530

Name of the Vulnerable Software and Affected Versions openlink virtuoso-opensource version 7.2.11 Description The issue in the sqlg place dpipes component allows attackers to cause a Denial of Service DoS via crafted SQL statements. Recommendations For openlink virtuoso-opensource version 7.2.11,...

Logic flaw vulnerability in vastbase of Beijing Massive Data Technology Co.

vastbase is a massive database. A logic flaw vulnerability exists in vastbase, which can be exploited by an attacker to bypass all dynamic desensitization policies by constructing special SQL statements to view the original data before desensitization...

PHPGurukul Small CRM 安全漏洞

Small CRM is a customer relationship management system. Small CRM suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the Users login panel. No details of the vulnerability are available at this time...

SQL Injection

Apache Superset is vulnerable to SQL Injection. The vulnerability is due improper user input validation and sanitization in the wherein JINJA macro. This issue can be exploited by an attacker by injecting a quote within the JINJA macro resulting in the execution of arbitrary SQL statements...

PT-2025-3525

Name of the Vulnerable Software and Affected Versions openlink virtuoso-opensource version 7.2.11 Description The issue in the sql tree hash 1 component allows attackers to cause a Denial of Service DoS via crafted SQL statements. Recommendations For openlink virtuoso-opensource version 7.2.11,...

PT-2025-3517

Name of the Vulnerable Software and Affected Versions openlink virtuoso-opensource version 7.2.11 Description The issue in the qi inst state free component allows attackers to cause a Denial of Service DoS via crafted SQL statements. Recommendations For openlink virtuoso-opensource version 7.2.11...

PT-2025-3514

Name of the Vulnerable Software and Affected Versions openlink virtuoso-opensource version 7.2.11 Description The issue in the row insert cast component allows attackers to cause a Denial of Service DoS via crafted SQL statements. Recommendations For openlink virtuoso-opensource version 7.2.11,...

PT-2025-3521

Name of the Vulnerable Software and Affected Versions openlink virtuoso-opensource version 7.2.11 Description The issue in the qst vec get int64 component allows attackers to cause a Denial of Service DoS via crafted SQL statements. Recommendations For openlink virtuoso-opensource version 7.2.11,...

PT-2025-3531

Name of the Vulnerable Software and Affected Versions openlink virtuoso-opensource version 7.2.11 Description The issue in the sqlg group node component allows attackers to cause a Denial of Service DoS via crafted SQL statements. Recommendations For openlink virtuoso-opensource version 7.2.11,...

PT-2025-3520

Name of the Vulnerable Software and Affected Versions openlink virtuoso-opensource version 7.2.11 Description An issue in the qst vec set copy component allows attackers to cause a Denial of Service DoS via crafted SQL statements. Recommendations For openlink virtuoso-opensource version 7.2.11,...

PT-2025-3516

Name of the Vulnerable Software and Affected Versions openlink virtuoso-opensource version 7.2.11 Description The issue in the qst vec set component allows attackers to cause a Denial of Service DoS via crafted SQL statements. Recommendations For openlink virtuoso-opensource version 7.2.11,...

PT-2025-3523

Name of the Vulnerable Software and Affected Versions openlink virtuoso-opensource version 7.2.11 Description The issue in the sqlc add distinct node component allows attackers to cause a Denial of Service DoS via crafted SQL statements. Recommendations For openlink virtuoso-opensource version...

PT-2025-3526

Name of the Vulnerable Software and Affected Versions openlink virtuoso-opensource version 7.2.11 Description An issue in the sqlg parallel ts seq component allows attackers to cause a Denial of Service DoS via crafted SQL statements. Recommendations For openlink virtuoso-opensource version 7.2.1...

Web-Based Student Clearance System SQL注入漏洞

Web-Based Student Clearance System is a web-based student clearance system. A SQL injection vulnerability exists in Web-Based Student Clearance System version 1.0, which originates from the lack of validation of externally entered SQL statements in the parameter Student in /libsystem/login.php. A...

IBM Db2 Input Validation Error Vulnerability (CNVD-2023-9817341)

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM Db2 suffers from an input validation error vulnerability that originates from allowing an attacker ...

CVE-2023-48945

Openlink virtuoso-opensource is vulnerable to stack overflow vulnerability which allows a remote attackers to cause Denial of Service using crafted SQL statements...

Amazon Linux 2 : virtuoso-opensource (ALAS-2023-2360)

The version of virtuoso-opensource installed on the remote host is prior to 7.2.11-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2360 advisory. 2024-03-13: CVE-2023-31618 was added to this advisory. 2024-03-13: CVE-2023-31627 was added to this advisory...