Lucene search
+L

20 matches found

attackerkb
attackerkb
•added 2026/08/12 5:23 p.m.•20 views

CVE-2026-17419

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify SQL tables due to improper neutralization of special elements used in an SQL command...

6.5CVSS5.6AI score0.00418EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2026/08/12 5:23 p.m.•48 views

CVE-2026-17419

IBM i (7.3–7.6) with 5770-SS1 is affected by CVE-2026-17419 due to improper neutralization of special elements in SQL commands, enabling a remote authenticated attacker to modify SQL tables. Affected versions include 7.3, 7.4, 7.5, and 7.6. CVSS 3.1 base score 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H...

6.5CVSS5.9AI score0.00418EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/08/12 5:23 p.m.•44 views

CVE-2026-17419 IBM i is Affected By Multiple Vulnerabilities in SQL

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify SQL tables due to improper neutralization of special elements used in an SQL command...

6.5CVSS0.00418EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/12 5:23 p.m.•13 views

CVE-2026-17419 IBM i is Affected By Multiple Vulnerabilities in SQL

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify SQL tables due to improper neutralization of special elements used in an SQL command...

6.5CVSS5.9AI score0.00418EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/12 5:23 p.m.•17 views

EUVD-2026-57366

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify SQL tables due to improper neutralization of special elements used in an SQL command...

6.5CVSS5.6AI score0.00418EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/08/12 12:00 a.m.•19 views

PT-2026-71162

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote authenticated attackers can modify SQL tables because the system fails to properly neutralize special elements used within an SQL command, leading to an SQL injection issue. Recommendations...

6.5CVSS5.6AI score0.00418EPSS
SaveExploits0References3
NVD
NVD
•added 2026/05/27 8:16 a.m.•31 views

CVE-2026-40825

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the accountstatus view devices parameter due to improper neutralization of special elements in a SQL UPDATE command allowing for reading the whole database and changing values in a non critical table...

7CVSS0.00406EPSS
SaveExploits0References1
NVD
NVD
•added 2026/05/27 8:16 a.m.•36 views

CVE-2026-40824

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the accountstatus view userid parameter due to improper neutralization of special elements in a SQL UPDATE command allowing for reading the whole database and changing values in a non critical table...

7CVSS0.00406EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/05/27 7:50 a.m.•56 views

CVE-2026-40824 Authenticated SQLi in accountstatus view

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the accountstatus view userid parameter due to improper neutralization of special elements in a SQL UPDATE command allowing for reading the whole database and changing values in a non critical table...

7CVSS0.00406EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/27 12:00 a.m.•33 views

PT-2026-43563

A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the accountstatus view userid parameter due to improper neutralization of special elements in a SQL UPDATE command allowing for reading the whole database and changing values in a non critical table...

7CVSS6AI score0.00406EPSS
SaveExploits0References2
CVE
CVE
•added 2026/05/21 1:03 p.m.•142 views

CVE-2026-34926

CVE-2026-34926 concerns the on‑premise Apex One server, where a directory traversal flaw could let a pre‑authenticated local attacker with admin access modify a server key table to inject code that is deployed to agents. The vulnerability is limited to the on‑premise deployment; no public exploit...

6.7CVSS7AI score0.00538EPSS
SaveIn wildExploits0References5Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•26 views

EUVD-2004-0125

Malware in sbrugna...

7.2CVSS6.2AI score0.00337EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-1999-0254

Malware in sbrugna...

10CVSS9.2AI score0.03924EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2020/08/17 12:00 a.m.•55 views

Joomla! 2.5.x < 3.9.20 Multiple Vulnerabilities

According to its self-reported version, the instance of Joomla! running on the remote web server is 2.5.x prior to 3.9.20. It is, therefore, affected by multiple vulnerabilities. - A missing token check in the ajaxinstall endpoint cominstaller causes a CSRF vulnerability. - Missing validation...

6.8CVSS5.1AI score0.02778EPSS
SaveExploits0References13
Joomla! Vulnerable Extensions List
Joomla! Vulnerable Extensions List
•added 2020/06/02 12:00 a.m.•58 views

[20200704] - Core - Variable tampering via user table class

Internal read-only fields in the User table class could be modified by users...

4.3CVSS5.5AI score0.00876EPSS
SaveExploits0Affected Software1
CNVD
CNVD
•added 2019/09/26 12:00 a.m.•18 views

Guojiz Change Password Interface Has Arbitrary User Privilege Vulnerability

Guojiz is a light community system based on layui front-end framework and thinkphp. Guojiz password change interface has any user privilege vulnerability, an attacker can use this vulnerability to modify any user's data table information, so as to enhance their own or other people's privileges...

7.2AI score
SaveExploits0
OSV
OSV
•added 2019/09/18 10:15 p.m.•20 views

CVE-2019-11661

Allow changes to some table by non-SysAdmin in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. This vulnerability could be exploited to allow unauthorized access and modification of data...

8.3CVSS7.2AI score0.0099EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/09/18 12:00 a.m.•8 views

CVE-2019-11661: Undefined Security Weakness

Allow changes to some table by non-SysAdmin in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. This vulnerability could be exploited to allow unauthorized access and modification of data...

8.3CVSS7.7AI score0.0099EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/14 12:00 a.m.•9 views

CVE-2017-3893: Protection Mechanism Failure

In BlackBerry QNX Software Development Platform SDP 6.6.0, the default configuration of the QNX SDP system did not in all circumstances prevent attackers from modifying the GOT or PLT tables with buffer overflow attacks...

7.5CVSS7.4AI score0.005EPSS
SaveExploits0References3
exploitpack
exploitpack
•added 2000/05/16 12:00 a.m.•36 views

Netopia R-series Routers 4.6.2 - Modifying SNMP Tables

Netopia R-series Routers 4.6.2 - Modifying SNMP Tables source: https://www.securityfocus.com/bid/1177/info All R-series platforms with firmware between 4.3.8 and 4.6.2 inclusive allow users who already have access to the router to modify SNMP tables which they should not be able to access. The...

0.2AI score
SaveExploits0
Rows per page
Query Builder