Lucene search
+L

1794 matches found

Cvelist
Cvelist
•added 2026/10/07 10:18 a.m.•45 views

CVE-2026-96408

A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the affected product...

9.4CVSS0.00643EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/07 10:18 a.m.•15 views

EUVD-2026-94281

A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the affected product...

9.4CVSS8.3AI score0.00643EPSS
SaveExploits0References3
CVE
CVE
•added 2026/10/07 10:18 a.m.•36 views

CVE-2026-96408

A code injection vulnerability exists in the upgrade script of Movable Type . This flaw could enable an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the affected product. No specific exploit information or remediation versions are provided in the documents.

9.4CVSS8.3AI score0.00643EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/07 12:00 a.m.•11 views

CVE-2026-103668: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary SQL query on the affected product...

8.8CVSS8.1AI score0.00435EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/07 12:00 a.m.•12 views

CVE-2026-96408: Improper Control of Generation of Code

A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the affected product...

9.4CVSS8.3AI score0.00643EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/07 12:00 a.m.•15 views

PT-2026-107475

A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the affected product...

9.4CVSS8.3AI score0.00643EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/07 12:00 a.m.•16 views

PT-2026-107472

An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary SQL query on the affected product...

8.8CVSS8.1AI score0.00435EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2026/10/05 12:00 a.m.•13 views

Adobe Campaign Classic SQL Injection

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9.9CVSS7.7AI score0.00427EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/10/05 12:00 a.m.•16 views

Adobe Campaign Classic SQL Injection

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

9.1CVSS7.7AI score0.00991EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/10/05 12:00 a.m.•15 views

Adobe Campaign Classic SQL Injection

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

9.1CVSS6.8AI score0.00553EPSS
SaveExploits0References3
Redos
Redos
•added 2026/10/02 12:00 a.m.•16 views

ROS-20261002-73-0031

The vulnerability of the EXTRACT function in the PostgreSQL database management system is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

8.8CVSS8.6AI score0.00466EPSS
SaveExploits0
Redos
Redos
•added 2026/10/02 12:00 a.m.•27 views

ROS-20261002-73-0147

The vulnerability of the contact search component in the SOGo collaborative work software is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain unauthorized access to protected information...

6.3CVSS9.3AI score0.00266EPSS
SaveExploits0
Redos
Redos
•added 2026/10/02 12:00 a.m.•20 views

ROS-20261002-73-0033

The vulnerability of the EXTRACT function in the PostgreSQL database management system is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

8.8CVSS8.6AI score0.00466EPSS
SaveExploits0
Redos
Redos
•added 2026/10/01 12:00 a.m.•16 views

ROS-20261001-73-0056

The vulnerability of the SOGo collaborative software server lies in the lack of protective measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

7.1CVSS6.3AI score0.00368EPSS
SaveExploits0
Redos
Redos
•added 2026/10/01 12:00 a.m.•17 views

ROS-20261001-73-0057

The vulnerability of the SOGo collaborative software server lies in the lack of protective measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

7.1CVSS6.3AI score0.00368EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/09/30 12:00 a.m.•11 views

Crosswork Data Gateway SQL Injection

The vulnerability of the Crosswork Data Gateway data collection platform is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.5AI score0.00546EPSS
SaveExploits0References2Affected Software4
BDU FSTEC
BDU FSTEC
•added 2026/09/30 12:00 a.m.•17 views

Azure SQL Database SQL Injection

The vulnerability of the Azure SQL Database cloud relational database model is related to the lack of security measures for SQL query structures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

9.9CVSS6.7AI score0.00987EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/09/30 12:00 a.m.•14 views

Azure SQL Database SQL Injection

The vulnerability of the Azure SQL Database cloud relational database model is related to the lack of security measures for SQL query structures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

9.9CVSS6.7AI score0.00987EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/09/29 12:00 a.m.•11 views

Adobe Connect SQL Injection Code Execution

The vulnerability of the Adobe Connect instant messaging program relates to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9.9CVSS7.5AI score0.00547EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/09/23 12:00 a.m.•15 views

Cisco Identity Services Engine SQL Injection

The vulnerability of the Cisco Identity Services Engine ISE platform relates to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

7.5CVSS7.5AI score0.00292EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder