Lucene search
+L

2140 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 7:2 a.m.8 views

CVE-2024-57620

An issue in the trimchars component of MonetDB Server v11.47.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.4AI score0.00571EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:2 a.m.16 views

CVE-2024-57631

An issue in the expref component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.4AI score0.00571EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:2 a.m.13 views

CVE-2024-57630

An issue in the expscard component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.4AI score0.00571EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:2 a.m.8 views

CVE-2024-57628

An issue in the expvaluessetsupertype component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.4AI score0.00571EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:2 a.m.8 views

CVE-2024-57617

An issue in the dameraulevenshtein component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.4AI score0.00571EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:5 a.m.7 views

CVE-2023-30558

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. User input coming from the dbname in the sql/datadictionary.py tablelist endpoint is passed to the methods that follow in...

6.5CVSS8.2AI score0.00835EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:2 a.m.7 views

CVE-2023-28424

Soko if the code that powers packages.gentoo.org. Prior to version 1.0.2, the two package search handlers, Search and SearchFeed, implemented in pkg/app/handler/packages/search.go, are affected by a SQL injection via the q parameter. As a result, unauthenticated attackers can execute arbitrary SQ...

9.8CVSS9AI score0.0115EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:27 a.m.8 views

CVE-2023-30605

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. User input coming from the variablename and variablevalue parameter value in the sql/instance.py paramedit endpoint is...

6.5CVSS7.9AI score0.00844EPSS
SaveExploits1References1
NVD
NVD
added 2025/05/23 4:15 a.m.15 views

CVE-2025-48701

openDCIM through 23.04 allows SQL injection in peopledepts.php because prepared statements are not used...

5.4CVSS0.00193EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:0 a.m.7 views

CVE-2023-36362

An issue in the relsequences component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.4AI score0.008EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/23 4:0 a.m.9 views

CVE-2023-36371

An issue in the GDKfree component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.4AI score0.0074EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/23 4:0 a.m.7 views

CVE-2023-36364

An issue in the reldeps component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.4AI score0.008EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/23 4:0 a.m.11 views

CVE-2023-36365

An issue in the sqltranscopykey component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.4AI score0.0074EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/23 4:0 a.m.6 views

CVE-2023-36363

An issue in the nssdatabaselookup component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.4AI score0.008EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/23 4:0 a.m.10 views

CVE-2023-36367

An issue in the BLOBcmp component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.4AI score0.0074EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/23 4:0 a.m.9 views

CVE-2023-36366

An issue in the logcreatedelta component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause Denial of Service DoS via crafted SQL statements...

7.5CVSS7.5AI score0.0074EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/23 3:43 a.m.10 views

CVE-2023-30556

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. Affected versions are subject to SQL injection in the optimizesqltuningadvisor method of sqloptimize.py. User input comin...

6.5CVSS7.7AI score0.00835EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:36 a.m.11 views

CVE-2023-30555

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases.Affected versions are subject to SQL injection in the explain method in sqloptimize.py. User input coming from the dbname...

6.5CVSS7.8AI score0.00835EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:55 a.m.6 views

CVE-2023-0579

The YARPP WordPress plugin before 5.30.3 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscribers to perform SQL Injection attacks...

8.8CVSS8.9AI score0.0094EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2025/05/23 12:0 a.m.9 views

WordPress plugin Tourmaster 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.1CVSS7.6AI score0.00542EPSS
SaveExploits0References1
Rows per page
Query Builder