Virtuoso-opensource DoS

The vulnerability of the sinvcheckexp component in the Virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to trigger a service failure using specially created SQL...

Hikvision HikCentral Professional security vulnerabilities

Hikvision HikCentral Professional is a professional version of Hikvision's AI Cloud-based application management intelligence platform for edge domains. A security vulnerability exists in Hikvision HikCentral Professional versions V2.0.0 through V2.6.0, which is rooted in a susceptible SQL...

WordPress plugin Ajax Rating with a custom login system; SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

EsafeNet CDG SQL Injection Vulnerability

EsafeNet CDG is a document security management system from EsafeNet. EsafeNet CDG V5 version has a SQL injection vulnerability, which originates from the parameter id of the file /com/esafenet/servlet/client/MailDecryptApplicationService.java, which can lead to SQL injection...

firefox: thunderbird: Potential memory corruption may occur when cloning certain objects

A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the issue as follows: It is currently unknown if this issue is exploitable, but a condition may arise where the structured clone of certain objects could lead to memory corruption...

firefox: thunderbird: Potential memory corruption may occur when cloning certain objects

A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the issue as follows: It is currently unknown if this issue is exploitable, but a condition may arise where the structured clone of certain objects could lead to memory corruption...

Centreon-web RCE

The vulnerability of the centreon-web component of the IT infrastructure monitoring software lies in the lack of protective measures for the SQL query structure. This allows attackers to enhance their privileges and execute arbitrary code using a specially created SQL query...

Centreon-web RCE

The vulnerability of the centreon-web component of the IT infrastructure monitoring software lies in the lack of protective measures for the SQL query structure. This allows attackers to enhance their privileges and execute arbitrary code using a specially created SQL query...

Dell OpenManage Enterprise SQL Injection Vulnerability

Dell OpenManage Enterprise is an easy-to-use, one-to-many system management console for IT infrastructure management from Dell, Inc. The software supports cost-effective, comprehensive lifecycle management of Dell EMC PowerEdge servers from a single console. A SQL injection vulnerability exists i...

[SECURITY] Fedora 41 Update: libgsf-1.14.53-1.fc41

A library for reading and writing structured files e.g. MS OLE and Zip...

VulnCheck KEV: CVE-2024-8877

Improper neutralization of special elements results in a SQL Injection vulnerability in Riello Netman 204. It is only limited to the SQLite database of measurement data.This issue affects Netman 204: through 4.05...

TAI Smart Factory QPLANT SF SQL Injection Vulnerability

TAI Smart Factory QPLANT SF is a tool for managing and controlling production execution from TAI Smart Factory, Inc. A SQL injection vulnerability exists in TAI Smart Factory QPLANT SF version 1.0, which originates from allowing a remote attacker to retrieve all database information by sending a...

PT-2024-39978 · Formosasoft · Ee-Class

Name of the Vulnerable Software and Affected Versions: FormosaSoft ee-class affected versions not specified Description: The issue concerns a failure to properly validate a specific page parameter in the ee-class from FormosaSoft, allowing remote attackers with regular privileges to inject...

PT-2024-35668

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the f2fs file system in the Linux kernel. It can trigger a system panic when checkpoint disabling and lfs mode are both enabled, causing incorrect accounting of...

NewType FlowMaster BPM Plus has a SQL injection vulnerability

NewType FlowMaster BPM Plus is a business process management system from NewType, a Chinese company. A SQL injection vulnerability exists in NewType FlowMaster BPM Plus, which arises from a specific query function that does not properly restrict user input, allowing a remote attacker with regular...

[SECURITY] Fedora 40 Update: libgsf-1.14.53-1.fc40

A library for reading and writing structured files e.g. MS OLE and Zip...

PT-2024-38074 · Netease Youdao · Qanything

Name of the Vulnerable Software and Affected Versions: netease-youdao/qanything version 1.4.1 Description: The issue concerns a SQL injection vulnerability where unsafe data obtained from user input is concatenated in SQL queries. This affects functions including get knowledge base name, from...

Microsoft Configuration Manager SQL Injection

The vulnerability of Microsoft Configuration Manager software for managing IT infrastructure is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

WordPress plugin Tainacan has a SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

LyLme Spage SQL injection vulnerability

LyLme Spage six zero navigation page is China six zero LyLme open source a navigation page . Dedicated to simple and efficient advertising-free Internet navigation and search portal , support for background links , custom search engine , precipitation of the most valuable links , no commercial...