Lucene search
+L

56 matches found

ATTACKERKB
ATTACKERKB
added 2022/03/31 6:15 p.m.4 views

CVE-2021-36625

An SQL Injection vulnerability exists in Dolibarr ERP/CRM 13.0.2 fixed version is 14.0.0 via a POST request to the countryid parameter in an UPDATE statement...

8.8CVSS7.3AI score0.00914EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2022/03/31 6:15 p.m.23 views

CVE-2021-36625

An SQL Injection vulnerability exists in Dolibarr ERP/CRM 13.0.2 fixed version is 14.0.0 via a POST request to the countryid parameter in an UPDATE statement...

8.8CVSS7.3AI score0.00914EPSS
SaveExploits0References2
OSV
OSV
added 2022/03/31 6:15 p.m.4 views

UBUNTU-CVE-2021-36625

An SQL Injection vulnerability exists in Dolibarr ERP/CRM 13.0.2 fixed version is 14.0.0 via a POST request to the countryid parameter in an UPDATE statement...

8.8CVSS6AI score0.00914EPSS
SaveExploits0References3
Prion
Prion
added 2022/03/31 6:15 p.m.13 views

Sql injection

An SQL Injection vulnerability exists in Dolibarr ERP/CRM 13.0.2 fixed version is 14.0.0 via a POST request to the countryid parameter in an UPDATE statement...

6.5CVSS8.9AI score0.00914EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/03/31 5:50 p.m.25 views

CVE-2021-36625

An SQL Injection vulnerability exists in Dolibarr ERP/CRM 13.0.2 fixed version is 14.0.0 via a POST request to the countryid parameter in an UPDATE statement...

9.2AI score0.00914EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/24 3:15 p.m.2 views

DEBIAN-CVE-2022-24407

In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement...

8.8CVSS7.4AI score0.04123EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/02/24 3:15 p.m.8 views

CVE-2022-24407

In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement...

8.8CVSS7AI score0.04123EPSS
SaveExploits0References14
RedhatCVE
RedhatCVE
added 2022/02/03 5:15 a.m.54 views

CVE-2021-46662

MariaDB through 10.5.9 allows a setvar.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery...

5.5CVSS4AI score0.00387EPSS
SaveExploits1References3
OSV
OSV
added 2022/02/01 2:15 a.m.24 views

CVE-2021-46662

MariaDB through 10.5.9 allows a setvar.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery...

5.5CVSS7.1AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/02/01 2:15 a.m.7 views

CVE-2021-46662

MariaDB through 10.5.9 allows a setvar.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery...

5.5CVSS6.8AI score0.00387EPSS
SaveExploits1References4
NVD
NVD
added 2022/02/01 2:15 a.m.19 views

CVE-2021-46662

MariaDB through 10.5.9 allows a setvar.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery...

5.5CVSS0.00387EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2022/02/01 2:15 a.m.27 views

CVE-2021-46662

MariaDB through 10.5.9 allows a setvar.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery...

5.5CVSS6.7AI score0.00387EPSS
SaveExploits1References3
Prion
Prion
added 2022/02/01 2:15 a.m.28 views

Design/Logic Flaw

MariaDB through 10.5.9 allows a setvar.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery...

2.1CVSS5.6AI score0.00387EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2022/02/01 1:47 a.m.41 views

CVE-2021-46662

MariaDB through 10.5.9 allows a setvar.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery...

6.7AI score0.00387EPSS
SaveExploits1References3
MariaDBUnix
MariaDBUnix
added 2022/02/01 1:47 a.m.41 views

CVE-2021-46662

Disclaimer: This data contains information about vulnerable...

5.5CVSS6.8AI score0.00387EPSS
SaveExploits1
CVE
CVE
added 2022/02/01 1:47 a.m.280 views

CVE-2021-46662

CVE-2021-46662 : MariaDB prior to 10.5.9 allows a set_var.cc application crash triggered by certain UPDATE statements in combination with a nested subquery. This vulnerability is corroborated by multiple connected advisories noting the same affected condition (CVE-2021-46662) and associated crash...

5.5CVSS5.5AI score0.00387EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
added 2022/02/01 1:47 a.m.37 views

CVE-2021-46662

MariaDB through 10.5.9 allows a setvar.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery...

5.5CVSS8AI score0.00387EPSS
SaveExploits1
Hacker One
Hacker One
added 2017/12/23 1:23 a.m.43 views

Razer US: SQL Injection on careers.razerzone.com within the Admin interface without any access credentials

The researcher discovered a SQL Injection vulnerability on our careers.razerzone.com host, which is used to list job openings for Razer worldwide and receive application submissions from potential hires. This vulnerability could have allowed the exfiltration of admin credentials as well as person...

8.4AI score
SaveExploits0
NVD
NVD
added 2015/06/13 2:59 p.m.21 views

CVE-2015-3993

Actian Matrix 5.1.x through 5.1.2.4 and 5.2.x through 5.2.0.1 allows remote authenticated users to bypass intended write-access restrictions and execute an UPDATE statement by referencing a table...

6.5CVSS6.5AI score0.01137EPSS
SaveExploits0References2
Prion
Prion
added 2015/06/13 2:59 p.m.16 views

Design/Logic Flaw

Actian Matrix 5.1.x through 5.1.2.4 and 5.2.x through 5.2.0.1 allows remote authenticated users to bypass intended write-access restrictions and execute an UPDATE statement by referencing a table...

6.5CVSS7AI score0.01137EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder