Lucene search
K

42 matches found

OSV
OSV
added 2025/12/23 5:15 p.m.2 views

CVE-2024-57521

SQL Injection vulnerability in RuoYi v.4.7.9 and before allows a remote attacker to execute arbitrary code via the createTable function in SqlUtil.java...

10CVSS8.4AI score0.0043EPSS
Exploits2References4
Cvelist
Cvelist
added 2025/12/23 12:0 a.m.21 views

CVE-2024-57521

SQL Injection vulnerability in RuoYi v.4.7.9 and before allows a remote attacker to execute arbitrary code via the createTable function in SqlUtil.java...

0.0043EPSS
Exploits2References4
Cvelist
Cvelist
added 2025/10/24 8:24 a.m.5 views

CVE-2025-10901 Originality.ai AI Checker <= 1.0.16 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via 'ai_get_table'

The Originality.ai AI Checker plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'aigettable' function in all versions up to, and including, 1.0.16. This makes it possible for authenticated attackers, with Subscriber-level access and above, ...

4.3CVSS0.00041EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-8375

Malware in sbrugna...

5.3CVSS5.3AI score0.00522EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2005-4732

Malware in sbrugna...

6.8CVSS6.4AI score0.00583EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-34716

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.0016EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2020-24825

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the linetable::linetable function of Libelfin v0.3 allows attackers to cause a denial of service DOS through a segmentation fault via a craft...

5.5CVSS6.1AI score0.00155EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/05/23 9:13 a.m.1 views

CVE-2024-31870

IBM Db2 for i 7.2, 7.3, 7.4, and 7.5 supplies user defined table function is vulnerable to user enumeration by a local authenticated attacker, without having authority to the related USRPRF objects. This can be used by a malicious actor to gather information about users that can be targeted in...

3.3CVSS6AI score0.00058EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:21 a.m.3 views

CVE-2019-18657

ClickHouse before 19.13.5.44 allows HTTP header injection via the url table function...

5.3CVSS7.2AI score0.00522EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:13 a.m.3 views

CVE-2005-4739

IBM DB2 Universal Database UDB 820 before version 8 FixPak 10 s050811 allows remote authenticated users to cause a denial of service application crash by using a table function for an instance of snapshottbreorg, which triggers a trap in sqlnrEStoEaction...

6.8CVSS6.4AI score0.00583EPSS
Exploits0References1
OSV
OSV
added 2024/11/01 5:15 p.m.3 views

CVE-2024-51245

In DrayTek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the renametable function...

8.8CVSS6AI score
Exploits0References1
CNNVD
CNNVD
added 2024/11/01 12:0 a.m.1 views

DrayTek Vigor 3900 安全漏洞

The DrayTek Vigor 3900 is a high-performance router for enterprise networks from China-based DrayTek. A security vulnerability exists in the DrayTek Vigor 3900 version 1.5.1.3, which can be exploited by an attacker to execute arbitrary commands by injecting malicious commands into mainfunction.cg...

8.8CVSS7.5AI score0.00201EPSS
Exploits1References1
NVD
NVD
added 2024/06/15 2:15 p.m.22 views

CVE-2024-31870

IBM Db2 for i 7.2, 7.3, 7.4, and 7.5 supplies user defined table function is vulnerable to user enumeration by a local authenticated attacker, without having authority to the related USRPRF objects. This can be used by a malicious actor to gather information about users that can be targeted in...

3.3CVSS0.00058EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/06/15 1:47 p.m.28 views

CVE-2024-31870 IBM i information disclosure

IBM Db2 for i 7.2, 7.3, 7.4, and 7.5 supplies user defined table function is vulnerable to user enumeration by a local authenticated attacker, without having authority to the related USRPRF objects. This can be used by a malicious actor to gather information about users that can be targeted in...

3.3CVSS6AI score0.00058EPSS
Exploits0References2
OSV
OSV
added 2024/05/14 4:17 p.m.0 views

CVE-2024-34256

OFCMS V1.1.2 is vulnerable to SQL Injection via the new table function...

9.8CVSS5.8AI score0.0016EPSS
Exploits1References1
NVD
NVD
added 2024/05/14 4:17 p.m.8 views

CVE-2024-34256

OFCMS V1.1.2 is vulnerable to SQL Injection via the new table function...

9.8CVSS7.7AI score0.0016EPSS
Exploits1References1
CVE
CVE
added 2024/05/14 2:45 p.m.50 views

CVE-2024-34256

CVE-2024-34256 affects OFCMS V1.1.2 and is caused by SQL Injection via the new table function in OFCMS. Multiple sources (NVD, CVE listings, Red Hat, CNNVD, PT Security) consistently describe a high-severity issue with potential total impact if exploited, but exploitation details and confirmed at...

9.8CVSS8AI score0.0016EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2024/05/14 12:0 a.m.1 views

OFCMS 安全漏洞

Zhongtian Network Technology OFCMS is a content management system CMS developed in Java language by China Zhongtian Network Technology Company. A security vulnerability exists in OFCMS version V1.1.2, which originates from an easy SQL injection attack via a new table function...

9.8CVSS7.9AI score0.0016EPSS
Exploits1References3
IBM Security Bulletins
IBM Security Bulletins
added 2022/11/11 5:25 p.m.56 views

Security Bulletin: IBM® Db2® is vulnerable to an information disclosure caused by improper privilege management when table function is used. (CVE-2022-22390)

Summary IBM® Db2® is vulnerable to an information disclosure caused by improper privilege management when table function is used. Vulnerability Details CVEID:CVE-2022-22390 DESCRIPTION: IBM Db2 may be vulnerable to an information disclousre caused by improper privilege management when table...

7.5CVSS6.4AI score0.00265EPSS
Exploits0Affected Software1
NVD
NVD
added 2022/06/24 5:15 p.m.19 views

CVE-2022-22390

IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an information disclosure caused by improper privilege management when table function is used. IBM X-Force ID: 221973...

7.5CVSS0.00265EPSS
Exploits0References3
Rows per page
Query Builder