Lucene search
+L

6982 matches found

CNNVD
CNNVD
added 2025/01/13 12:00 a.m.10 views

MonetDB 安全漏洞

MonetDB is an open source column-oriented relational database management system from MonetDB Open Source. A security vulnerability exists in MonetDB version v11.47.11, which stems from an issue contained in the atomgetint component. An attacker exploiting this vulnerability could cause a denial o...

7.5CVSS7AI score0.00583EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/01/13 12:00 a.m.4 views

MonetDB 安全漏洞

MonetDB is an open source column-oriented relational database management system from MonetDB Open Source. A security vulnerability exists in MonetDB version v11.47.11, which stems from an issue contained in the GDKanalyticalcorrelation component. An attacker exploiting this vulnerability could...

7.5CVSS7.1AI score0.00785EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/01/13 12:00 a.m.10 views

Virtuoso Open-Source Edition 安全漏洞

Virtuoso Open-Source Edition is a high-performance and scalable multi-model RDBMS, data integration middleware, linked data deployment, and HTTP application server platform open-sourced by OpenLink Software. A security vulnerability exists in Virtuoso Open-Source Edition version v7.2.11, which...

7.5CVSS7.5AI score0.00572EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
added 2025/01/10 12:37 a.m.6 views

SUSE CVE-2024-45387

An SQL injection vulnerability in Traffic Ops in Apache Traffic Control = 8.0.0 allows a privileged user with role "admin", "federation", "operations", "portal", or "steering" to execute arbitrary SQL against the database by sending a specially-crafted PUT request. Users are recommended to upgrad...

8.8CVSS8.4AI score0.41542EPSS
SaveExploits0References4
CNVD
CNVD
added 2025/01/10 12:00 a.m.6 views

Online Shoe Store details2.php file SQL Injection Vulnerability

Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from the id parameter in the /details2.php page that lacks validation of externally-entered SQL statements. An attacker can exploit this vulnerability to execute illegal...

9.8CVSS8.3AI score0.00529EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/01/09 12:00 a.m.6 views

PT-2025-1070 · Dell · Dell Powerscale Insightiq

Name of the Vulnerable Software and Affected Versions: Dell PowerScale InsightIQ affected versions not specified Description: The issue is related to a lack of protection for the SQL query structure in the Dell PowerScale InsightIQ software for performance monitoring and reporting. Exploitation o...

4.3CVSS7.4AI score
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/09 12:00 a.m.10 views

cy-fast 注入漏洞

cy-fast is a SpringBoot based rapid development framework by chenyi personal developer. An injection vulnerability exists in cy-fast version 1.0, which is caused by SQL injection in the parameter order...

8.8CVSS7AI score0.00484EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/01/09 12:00 a.m.6 views

WordPress plugin Google Maps Travel Route SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Google Map...

8.5CVSS8.9AI score0.00375EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/09 12:00 a.m.11 views

PT-2025-3840 · Unknown · Leiyuxi Cy-Fast

Name of the Vulnerable Software and Affected Versions: leiyuxi cy-fast version 1.0 Description: A critical vulnerability exists in the listData function within the /sys/menu/listData file. Manipulation of the argument order leads to a SQL injection, potentially allowing for remote attacks. The...

8.8CVSS6.3AI score0.00484EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2025/01/09 12:00 a.m.9 views

cy-fast 注入漏洞

cy-fast is a SpringBoot based rapid development framework by chenyi personal developer. An injection vulnerability exists in cy-fast version 1.0, which is caused by SQL injection in the parameter order...

8.8CVSS7AI score0.00484EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/01/09 12:00 a.m.8 views

PT-2025-3839 · Unknown · Leiyuxi Cy-Fast

Name of the Vulnerable Software and Affected Versions: leiyuxi cy-fast version 1.0 Description: A critical vulnerability exists in the listData function within the /commpara/listData file. Manipulation of the argument order leads to a SQL injection, which can be exploited remotely. The exploit fo...

8.8CVSS6.4AI score0.00518EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2025/01/09 12:00 a.m.10 views

BigAntSoft BigAnt office messenger 安全漏洞

BigAntSoft BigAnt office messenger is a server/client instant messaging program for enterprise environments from BigAntSoft Australia. A SQL injection vulnerability exists in BigAntSoft BigAnt office messenger. The vulnerability can be exploited to conduct a SQL injection attack via the "devcode"...

6.3CVSS7.9AI score0.01779EPSS
SaveExploits6References3
CNNVD
CNNVD
added 2025/01/09 12:00 a.m.6 views

WordPress plugin Virtual Bot SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

9.3CVSS9AI score0.00391EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/08 12:00 a.m.28 views

WordPress plugin MDTF SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

6.5CVSS8.8AI score0.00517EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/01/08 12:00 a.m.10 views

WeGIA SQL注入漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A security vulnerability exists in WeGIA versions prior to 3.2.8 that stems from the presence of a SQL injection vulnerability that allows an attacker to execute arbitrary SQL commands, thereby compromisi...

9.4CVSS8AI score0.00699EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2025/01/08 12:00 a.m.11 views

The vulnerability of the query_to_xml_and_xmlschema/table_to_xml/table_to_xml_and_xmlschema function in the Apache Superset data visualization software allows a hacker to execute arbitrary SQL code.

The vulnerability of the querytoxmlandxmlschema/tabletoxml/tabletoxmlandxmlschema function exists due to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

6.5CVSS6AI score0.00806EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2025/01/07 12:00 a.m.7 views

WordPress plugin WordPress Auction Plugin SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. WordPress plugin...

7.6CVSS8.7AI score0.00475EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/07 12:00 a.m.8 views

Code-Projects Online Book Shop 注入漏洞

Code-Projects Online Book Shop is a Code-Projects open source online bookstore. An injection vulnerability exists in Code-Projects Online Book Shop version 1.0, which stems from an SQL injection vulnerability in the cat parameter of the /subcat.php page...

8.8CVSS7AI score0.00545EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/01/07 12:00 a.m.10 views

WordPress plugin ClickWhale SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

8.5CVSS8.8AI score0.00384EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/06 12:00 a.m.7 views

编号撤回

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. This CVE number has...

6.8AI score
SaveExploits0References3
Rows per page
Query Builder