Lucene search
+L

5983 matches found

BDU FSTEC
BDU FSTEC
added 2024/10/18 12:00 a.m.10 views

The vulnerability of the __libc_longjmp component in the Virtuoso-opensource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the libclongjmp component in the Virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to trigger a service failure using specially created SQL...

7.8CVSS7.3AI score0.00905EPSS
SaveExploits1References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/10/18 12:00 a.m.10 views

The vulnerability of the chash_array component in the Virtuoso-opensource web application development platform allows a hacker to trigger a service failure.

The vulnerability of the chasharray component in the Virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to trigger a service failure using specially created SQL...

7.8CVSS7.3AI score0.00905EPSS
SaveExploits1References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/10/18 12:00 a.m.10 views

The vulnerability of the gpf_notice component in the Virtuoso-opensource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the gpfnotice component in the Virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to trigger a service failure using specially created SQL...

7.8CVSS7.3AI score0.00905EPSS
SaveExploits1References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/10/18 12:00 a.m.11 views

The vulnerability of the _IO_default_xsputn component in the Virtuoso-opensource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the IOdefaultxsputn component in the Virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to trigger a service failure using specially created...

7.8CVSS7.3AI score0.00905EPSS
SaveExploits1References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/10/18 12:00 a.m.10 views

The vulnerability of the stricmp component in the Virtuoso-opensource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the stricmp component of the Virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to trigger a service failure using specially created SQL...

7.8CVSS7.3AI score0.00905EPSS
SaveExploits1References5Affected Software3
CNNVD
CNNVD
added 2024/10/17 12:00 a.m.9 views

WordPress plugin Ajax Rating with Custom Login SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

9.3CVSS7.8AI score0.00412EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/10/16 12:00 a.m.12 views

Dell OpenManage Enterprise SQL注入漏洞

Dell OpenManage Enterprise is an easy-to-use, one-to-many system management console for IT infrastructure management from Dell, Inc. The software supports cost-effective, comprehensive lifecycle management of Dell EMC PowerEdge servers from a single console. A SQL injection vulnerability exists i...

6.5CVSS7.6AI score0.00316EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/10/16 12:00 a.m.11 views

The vulnerability of the centreon-web component of the Centreon software for monitoring IT infrastructure allows a perpetrator to enhance their privileges and execute arbitrary code.

The vulnerability of the centreon-web component of the IT infrastructure monitoring software lies in the lack of protective measures for the SQL query structure. This allows attackers to enhance their privileges and execute arbitrary code using a specially created SQL query...

6.5CVSS6.1AI score0.02137EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/16 12:00 a.m.11 views

The vulnerability of the centreon-web component of the Centreon software for monitoring IT infrastructure allows a perpetrator to enhance their privileges and execute arbitrary code.

The vulnerability of the centreon-web component of the IT infrastructure monitoring software lies in the lack of protective measures for the SQL query structure. This allows attackers to enhance their privileges and execute arbitrary code using a specially created SQL query...

6.5CVSS6.1AI score0.01775EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2024/10/15 12:00 a.m.7 views

PT-2024-39978 · Formosasoft · Ee-Class

Name of the Vulnerable Software and Affected Versions: FormosaSoft ee-class affected versions not specified Description: The issue concerns a failure to properly validate a specific page parameter in the ee-class from FormosaSoft, allowing remote attackers with regular privileges to inject...

8.8CVSS7.6AI score0.00644EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2024/10/15 12:00 a.m.9 views

NewType FlowMaster BPM Plus SQL注入漏洞

NewType FlowMaster BPM Plus is a business process management system from NewType, a Chinese company. A SQL injection vulnerability exists in NewType FlowMaster BPM Plus, which arises from a specific query function that does not properly restrict user input, allowing a remote attacker with regular...

8.8CVSS8.1AI score0.00644EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/10/11 12:00 a.m.10 views

The vulnerability of Microsoft Configuration Manager software for managing IT infrastructure lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Configuration Manager software for managing IT infrastructure is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.6AI score0.61508EPSS
SaveExploits3References4Affected Software1
CNNVD
CNNVD
added 2024/10/11 12:00 a.m.8 views

WordPress plugin Tainacan SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

8.5CVSS7.7AI score0.00537EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/10/10 12:00 a.m.7 views

Online Eyewear Shop SQL注入漏洞

Online Eyewear Shop is an online eyewear store by the individual developer Carlo Montero. A SQL injection vulnerability exists in Online Eyewear Shop version 1.0, which originates in the file /classes/Master.php?f=deleteproduct where the parameter id of the function deleteproduct can lead to SQL...

6.5CVSS7AI score0.00435EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2024/10/10 12:00 a.m.7 views

LyLme Spage SQL注入漏洞

LyLme Spage six zero navigation page is China six zero LyLme open source a navigation page . Dedicated to simple and efficient advertising-free Internet navigation and search portal , support for background links , custom search engine , precipitation of the most valuable links , no commercial...

7.2CVSS5.8AI score0.00563EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/10/10 12:00 a.m.9 views

PT-2024-39844 · Unknown · Code-Projects Blood Bank System

Name of the Vulnerable Software and Affected Versions: code-projects Blood Bank System version 1.0 Description: A critical issue was found in the code-projects Blood Bank System, affecting an unknown function of the file register.php. The manipulation of the user argument leads to SQL injection. ...

7.5CVSS8.6AI score0.00633EPSS
SaveExploits1References11
CNNVD
CNNVD
added 2024/10/10 12:00 a.m.11 views

LyLme Spage SQL注入漏洞

LyLme Spage six zero navigation page is China six zero LyLme open source a navigation page . Dedicated to simple and efficient advertising-free Internet navigation and search portal , support for background links , custom search engine , precipitation of the most valuable links , no commercial...

7.2CVSS5.8AI score0.00563EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/10/10 12:00 a.m.9 views

LyLme Spage SQL注入漏洞

LyLme Spage six zero navigation page is China six zero LyLme open source a navigation page . Dedicated to simple and efficient advertising-free Internet navigation and search portal , support for background links , custom search engine , precipitation of the most valuable links , no commercial...

7.2CVSS5.8AI score0.00563EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/10/06 12:00 a.m.13 views

EsafeNet CDG SQL注入漏洞

EsafeNet CDG is a document security management system from EsafeNet. EsafeNet CDG V5 version exists SQL injection vulnerability, the vulnerability stems from the parameter id of the file /CDGServer3/document/Catelogs;logindojojs?command=DelCatelogs will lead to SQL injection...

8.8CVSS7.9AI score0.00656EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/10/06 12:00 a.m.9 views

Cavok SQL注入漏洞

Cavok is an application from Cavok, Inc. Cavok suffers from a SQL injection vulnerability that stems from improper neutralization of special elements...

9.8CVSS8AI score0.00409EPSS
SaveExploits0References2
Rows per page
Query Builder