SQL Injection

knex is vulnerable to SQL Injection attacks. A specifically crafted attack statement through Knex.js allows a malicious user to inject and execute arbitrary SQL queries on the target system, ignoring the WHERE clause of a SQL query...

CVE-2016-20018

Knex Knex.js through 2.3.0 has a limited SQL injection vulnerability that can be exploited to ignore the WHERE clause of a SQL query...

CVE-2016-20018

Knex Knex.js through 2.3.0 has a limited SQL injection vulnerability that can be exploited to ignore the WHERE clause of a SQL query...

Sql injection

Knex Knex.js through 2.3.0 has a limited SQL injection vulnerability that can be exploited to ignore the WHERE clause of a SQL query...

knex.js SQL注入漏洞

knex.js is an open source SQL query generator. A security vulnerability exists in knex.js version 2.3.0 and earlier, which stems from the presence of a restricted SQL injection that can be exploited to ignore the WHERE clause of a SQL query...

CVE-2016-20018

Knex Knex.js through 2.3.0 has a limited SQL injection vulnerability that can be exploited to ignore the WHERE clause of a SQL query...

CVE-2016-20018

Knex Knex.js through 2.3.0 has a limited SQL injection vulnerability that can be exploited to ignore the WHERE clause of a SQL query...

CVE-2016-20018: Improper Neutralization of Special Elements used in an SQL Command

Knex Knex.js through 2.3.0 has a limited SQL injection vulnerability that can be exploited to ignore the WHERE clause of a SQL query...

CVE-2022-4375

A vulnerability was found in Mingsoft MCMS up to 5.2.9. It has been classified as critical. Affected is an unknown function of the file /cms/category/list. The manipulation of the argument sqlWhere leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclose...

CVE-2022-41757: Write-what-where Condition

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to obtain write access to read-only memory, or obtain access to already freed memory. This affects Valhall r29p0 through r38p1 before r38p2, and r39p0 before r40p0...

CVE-2022-37904: Write-what-where Condition

Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequence. Successful exploitation could allow an attacker to achieve permanent modification of the underlying operating system...

IBAX go-ibax SQL注入漏洞

IBAX go-ibax is a blockchain system platform from IBAX Corporation. IBAX go-ibax suffers from a SQL injection vulnerability that originates from some unknown functionality in file/api/v2/open/rowsInfo, where manipulation of the parameter where leads to SQL injection...

CVE-2022-1523

Fuji Electric D300win prior to version 3.7.1.17 is vulnerable to a write-what-where condition, which could allow an attacker to overwrite program memory to manipulate the flow of information...

CVE-2022-1523

Fuji Electric D300win prior to version 3.7.1.17 is vulnerable to a write-what-where condition, which could allow an attacker to overwrite program memory to manipulate the flow of information...

Information disclosure

Fuji Electric D300win prior to version 3.7.1.17 is vulnerable to a write-what-where condition, which could allow an attacker to overwrite program memory to manipulate the flow of information...

CVE-2022-1523 Fuji Electric D300win Write-what-where condition

Fuji Electric D300win prior to version 3.7.1.17 is vulnerable to a write-what-where condition, which could allow an attacker to overwrite program memory to manipulate the flow of information...

CVE-2022-1523 Fuji Electric D300win Write-what-where condition

Fuji Electric D300win prior to version 3.7.1.17 is vulnerable to a write-what-where condition, which could allow an attacker to overwrite program memory to manipulate the flow of information...

CVE-2022-1523

Fuji Electric D300win is affected by CVE-2022-1523 (versions prior to 3.7.1.17). The vulnerability is a write-what-where condition that could allow an attacker to overwrite program memory and manipulate information flow. The issue is associated with a high-severity impact (NVD CVSS v3.1 base scor...

CVE-2022-1523: Write-what-where Condition

Fuji Electric D300win prior to version 3.7.1.17 is vulnerable to a write-what-where condition, which could allow an attacker to overwrite program memory to manipulate the flow of information...

CVE-2022-35289

A write-what-where condition in hermes caused by an integer overflow, prior to commit 5b6255ae049fa4641791e47fad994e8e8c4da374 allows attackers to potentially execute arbitrary code via crafted JavaScript. Note that this is only exploitable if the application using Hermes permits evaluation of...