sql injection vulnerabilities and exploits

(subscribe to this query)

NA

Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system. One of the SQL injection vulnerabilities that...

NA

Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system. One of the SQL injection vulnerabilities that...

NA

Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system. One of the SQL injection vulnerabilities that...

NA

Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system. One of the SQL injection vulnerabilities that...

7.5

CVSSv2

SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql_adapter.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 2.x and 3.x before 3.2.19 allows remote attackers to execute arbitrary SQL commands by leveraging improper...

Rubyonrails Rails 2.0.0 Rubyonrails Rails 2.0.1 Rubyonrails Rails 2.0.2 Rubyonrails Rails 2.0.4 Rubyonrails Rails 2.1.0 Rubyonrails Rails 2.1.1 Rubyonrails Rails 2.1.2 Rubyonrails Rails 2.2.0 Rubyonrails Rails 2.2.1 Rubyonrails Rails 2.2.2 Rubyonrails Rails 2.3.0 Rubyonrails Rails 2.3.1 Rubyonrails Rails 2.3.2 Rubyonrails Rails 2.3.3 Rubyonrails Rails 2.3.4 Rubyonrails Rails 2.3.9 Rubyonrails Rails 2.3.10 Rubyonrails Rails 2.3.11 Rubyonrails Rails 2.3.12 Rubyonrails Rails 2.3.13 Rubyonrails Rails 2.3.14 Rubyonrails Rails 2.3.15 Rubyonrails Rails 2.3.16 Rubyonrails Rails 2.3.18 Rubyonrails Rails 3.0.0 Rubyonrails Rails 3.0.1 Rubyonrails Rails 3.0.2 Rubyonrails Rails 3.0.3 Rubyonrails Rails 3.0.4 Rubyonrails Rails 3.0.5 Rubyonrails Rails 3.0.6 Rubyonrails Rails 3.0.7 Rubyonrails Rails 3.0.8 Rubyonrails Rails 3.0.9 Rubyonrails Rails 3.0.10 Rubyonrails Rails 3.0.11 Rubyonrails Rails 3.0.12 Rubyonrails Rails 3.0.13 Rubyonrails Rails 3.0.14 Rubyonrails Rails 3.0.16 Rubyonrails Rails 3.0.17 Rubyonrails Rails 3.0.18 Rubyonrails Rails 3.0.19 Rubyonrails Rails 3.0.20 Rubyonrails Rails 3.1.0 Rubyonrails Rails 3.1.1 Rubyonrails Rails 3.1.2 Rubyonrails Rails 3.1.3 Rubyonrails Rails 3.1.4 Rubyonrails Rails 3.1.5 Rubyonrails Rails 3.1.6 Rubyonrails Rails 3.1.7 Rubyonrails Rails 3.1.8 Rubyonrails Rails 3.1.9 Rubyonrails Rails 3.1.10 Rubyonrails Rails 3.2.0 Rubyonrails Rails 3.2.1 Rubyonrails Rails 3.2.2 Rubyonrails Rails 3.2.3 Rubyonrails Rails 3.2.4 Rubyonrails Rails 3.2.5 Rubyonrails Rails 3.2.6 Rubyonrails Rails 3.2.7 Rubyonrails Rails 3.2.8 Rubyonrails Rails 3.2.9 Rubyonrails Rails 3.2.10 Rubyonrails Rails 3.2.11 Rubyonrails Rails 3.2.12 Rubyonrails Rails 3.2.13 Rubyonrails Rails 3.2.15 Rubyonrails Rails 3.2.16 Rubyonrails Rails 3.2.17 Rubyonrails Rails 3.2.18 Rubyonrails Ruby On Rails 2.3.17 Rubyonrails Ruby On Rails 3.0.4

7.5

CVSSv2

SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/quoting.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 4.x before 4.0.7 and 4.1.x before 4.1.3 allows remote attackers to execute arbitrary SQL commands by leveraging...

Rubyonrails Rails 4.0.0 Rubyonrails Rails 4.0.1 Rubyonrails Rails 4.0.2 Rubyonrails Rails 4.0.3 Rubyonrails Rails 4.0.4 Rubyonrails Rails 4.0.5 Rubyonrails Rails 4.0.6 Rubyonrails Rails 4.1.0 Rubyonrails Rails 4.1.1 Rubyonrails Rails 4.1.2

5.5

CVSSv2

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates...

Cisco Sd-wan Firmware

NA

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct SQL injection attacks on an affected system. These vulnerabilities exist because the web-based management interface...

4

CVSSv2

A vulnerability in the web-based management interface of the Cisco Smart Net Total Care (SNTC) Software Collector Appliance 3.11 could allow an authenticated, remote attacker to perform a read-only, blind SQL injection attack, which could allow the attacker to compromise the...

Cisco Smart Net Total Care Collector Appliance 3.11

7.5

CVSSv2

FortiWeb is vulnerable to a blind SQL injection. A blind SQL injection in the user interface of FortiWeb may allow an unauthenticated, remote attacker to execute arbitrary SQL queries or commands by sending a request with a crafted Authorization header containing a malicious SQL...

Fortinet Fortiweb

« PREV 1 2 3 4 5 6 7 8 9 NEXT »