CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

8872 matches found

Snyk•added 2025/10/06 8:16 p.m.•5 views

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the orderField parameter in the REST API. An attacker can execute arbitrary HQL statements by injecting crafted input, potentially leading to unauthorized data access or manipulation. Remediation Upgrade...

9.8CVSS8AI score0.02365EPSS

SaveExploits1References2

Vulnrichment•added 2025/10/06 1:02 a.m.•10 views

CVE-2025-11313 Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 findRolePage.do findRolePage sql injection

A flaw has been found in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. This impacts the function findRolePage of the file findRolePage.do. This manipulation of the argument sort causes sql injection. The attack may be initiated remotely. The exploit has been published and may...

7.5CVSS7AI score0.00502EPSS

SaveExploits1References4

CVE•added 2025/10/06 1:02 a.m.•38 views

CVE-2025-11313

Tipray Data Leakage Prevention System 1.0 has a SQL injection in findRolePage.do (findRolePage) caused by improper handling of the sort parameter. The flaw can be exploited remotely; exploit published. Vendor contact noted with no response. No remediation details are provided in the supplied docu...

9.8CVSS7AI score0.00502EPSS

SaveExploits1References4Affected Software1

Cvelist•added 2025/10/06 12:32 a.m.•31 views

CVE-2025-11312 Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 findModulePage.do findModulePage sql injection

A vulnerability was detected in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. This affects the function findModulePage of the file findModulePage.do. The manipulation of the argument sort results in sql injection. The attack can be launched remotely. The exploit is now public...

7.5CVSS0.00502EPSS

SaveExploits1References4

Positive Technologies•added 2025/10/06 12:00 a.m.•38 views

PT-2025-40935

Name of the Vulnerable Software and Affected Versions code-projects Online Course Registration version 1.0 Description A flaw exists in code-projects Online Course Registration 1.0 that allows for SQL injection. The issue is located in the file /admin/edit-course.php and involves manipulation of...

9.8CVSS5.5AI score0.00414EPSS

SaveExploits1References11

EUVD•added 2025/10/05 9:30 a.m.•22 views

EUVD-2025-32450

A security flaw has been discovered in CRMEB up to 5.6. This issue affects some unknown processing of the file /adminapi/product/product of the component GET Parameter Handler. Performing manipulation of the argument cateid results in sql injection. Remote exploitation of the attack is possible...

6.5CVSS6.2AI score0.00332EPSS

SaveExploits0References5

Positive Technologies•added 2025/10/05 12:00 a.m.•22 views

PT-2025-40825

Name of the Vulnerable Software and Affected Versions Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 version 1.0 Description A security flaw exists in the doFilter function of the findDeptPage.do file. Manipulation of the sort argument can lead to SQL injection. This issue can be...

7.5CVSS7.4AI score0.00495EPSS

SaveExploits1References8

RedhatCVE•added 2025/10/03 8:57 p.m.•28 views

CVE-2025-61605

WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain an SQL Injection vulnerability which was identified in the /pet/profilepet.php endpoint, specifically in the idpet parameter. This vulnerability allows attackers to execute arbitrary SQL...

9.4CVSS6.7AI score0.00425EPSS

SaveExploits1References1

EUVD•added 2025/10/03 8:07 p.m.•24 views

EUVD-2025-24548