Lucene search
K

13 matches found

Cvelist
Cvelist
added 2026/05/27 7:49 a.m.23 views

CVE-2026-40819 Unauthenticated SQLi in sync_data24 task

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the syncdata24 task due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

8.7CVSS0.00064EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/27 7:49 a.m.5 views

CVE-2026-40819

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the syncdata24 task due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

8.7CVSS5.9AI score0.00064EPSS
Exploits0References2Affected Software4
EUVD
EUVD
added 2026/05/27 7:49 a.m.4 views

EUVD-2026-32124

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the syncdata24 task due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

8.7CVSS5.9AI score0.00064EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/27 7:49 a.m.5 views

CVE-2026-40819 Unauthenticated SQLi in sync_data24 task

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the syncdata24 task due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

8.7CVSS5.9AI score0.00064EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/05/27 12:0 a.m.4 views

MB Connect Line mbCONNECT24和MB Connect Line mymbCONNECT24 SQL注入漏洞

MB Connect Line mbCONNECT24 and MB Connect Line mymb CONNECTION24 are products of the German company MB Connect Line. MB Connect Line mbCONNECT24 is a remote service portal. This product supports features such as remote access, data recording, and alerts. MB Connect Line mymb CONNECTION24 is an...

8.7CVSS5.9AI score0.00064EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/12 4:29 a.m.1 views

EUVD-2025-121491

Malicious code in sync-yaml-elara-hercules npm...

6.6AI score
Exploits0
Vivaldi Security Advisories
Vivaldi Security Advisories
added 2024/05/17 5:46 a.m.5 views

Minor update(3) for Vivaldi Android Browser 6.7

Head to the Google Play Store and download the browser. Alternatively, you can download Vivaldi from Uptodown, the Android app store. Your rating for our browser matters. ⭐️ ⭐️ ⭐️ ⭐️ ⭐️ Enjoy! Changelog The following is a list of changes since the second 6.7 stable, minor update: Sync Avoid...

9.6CVSS5.8AI score0.01063EPSS
Exploits2References1
Vivaldi Security Advisories
Vivaldi Security Advisories
added 2024/05/15 12:51 p.m.4 views

Minor update (6) for Vivaldi Desktop Browser 6.7

Download Vivaldi The following improvements were made since the fifth 6.7 minor update: Chromium Upgraded 124.0.6367.221 CVE-2024-4947: NB. Chromium updates may include security enhancements or fixes, crash fixes, or website compatibility updates. Sync Avoid removing data needed for the sync back...

9.6CVSS5.8AI score0.01063EPSS
Exploits2References1
OSV
OSV
added 2023/09/11 8:43 p.m.6 views

GHSA-36XM-35QQ-795W Inventory exposes reference to non-Sync data to an arbitrary thread

Affected versions do not enforce a Sync bound on the type of caller-provided value held in the plugin registry. References to these values are made accessible to arbitrary threads other than the one that constructed them. A caller could use this flaw to submit thread-unsafe data into inventory,...

7AI score
Exploits0References4
OSV
OSV
added 2021/08/25 9:0 p.m.12 views

GHSA-83R8-P8V6-6GFM Slock<T> allows sending non-Send types across thread boundaries

Slock unconditionally implements Send/Sync. Affected versions of this crate allows sending non-Send types to other threads, which can lead to data races and memory corruption due to the data race...

8.1CVSS8.2AI score0.00513EPSS
Exploits1References3
OSV
OSV
added 2021/07/02 6:15 p.m.0 views

CVE-2021-31874

Zoho ManageEngine ADSelfService Plus before 6104, in rare situations, allows attackers to obtain sensitive information about the password-sync database application...

5.9CVSS6.2AI score0.01096EPSS
Exploits1References2
RustSec
RustSec
added 2020/10/31 12:0 p.m.14 views

GenericMutexGuard allows data races of non-Sync types across threads

GenericMutexGuard was given the Sync auto trait as long as T is Send due to its contained members. However, since the guard is supposed to represent an acquired lock and allows concurrent access to the underlying data from different threads, it should only be Sync when the underlying data is. Thi...

5.5CVSS1.8AI score0.00054EPSS
Exploits1Affected Software1
OSV
OSV
added 2014/09/29 11:11 p.m.7 views

SUSE-SU-2015:0928-1 Recommended update for sm-ncc-sync-data

This update for sm-ncc-sync-data contains the following changes: Add SUSE Cloud 4 channels. bnc883057 Fix parent label of the LTSS channel for SLMS...

7.5CVSS7.5AI score0.00606EPSS
Exploits0References34
Rows per page
Query Builder