sql injection vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3 allows SQL Injection if untrusted data is used as a StringAgg delimiter (e.g., in Django applications that offer downloads of data as a series of rows with a user-specified column delimiter). By passing a...

Djangoproject Django23 Github repositories available

4

CVSSv2

An input sanitization flaw was found in the id field in the dashboard controller of Foreman before 1.16.1. A user could use this flaw to perform an SQL injection attack on the back end database....

Theforeman Foreman Redhat Satellite 6.4

6.5

CVSSv2

Django 1.11 before 1.11.29, 2.2 before 2.2.11, and 3.0 before 3.0.4 allows SQL Injection if untrusted data is used as a tolerance parameter in GIS functions and aggregates on Oracle. By passing a suitably crafted tolerance to GIS functions and aggregates on Oracle, it was...

Djangoproject Django Debian Debian Linux 9.0 Debian Debian Linux 10.0 Fedoraproject Fedora 326 Github repositories available

6.5

CVSSv2

An issue was discovered in Cacti 1.2.x through 1.2.16. A SQL injection vulnerability in data_debug.php allows remote authenticated attackers to execute arbitrary SQL commands via the site_id parameter. This can lead to remote code execution....

Cacti Cacti Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34

7.5

CVSSv2

postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges....

Postgresql Postgresql Redhat Enterprise Linux 7.6 Redhat Enterprise Linux 7.4 Redhat Enterprise Linux 7.5 Redhat Enterprise Linux 7.0 Canonical Ubuntu Linux 18.10 Canonical Ubuntu Linux 18.04

7.5

CVSSv2

FortiWeb is vulnerable to a blind SQL injection. A blind SQL injection in the user interface of FortiWeb may allow an unauthenticated, remote attacker to execute arbitrary SQL queries or commands by sending a request with a crafted Authorization header containing a malicious SQL...

Fortinet Fortiweb1 Article available

7.5

CVSSv2

SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql_adapter.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 2.x and 3.x before 3.2.19 allows remote attackers to execute arbitrary SQL commands by leveraging improper...

Rubyonrails Rails 3.2.4 Rubyonrails Rails 3.2.3 Rubyonrails Rails 3.2.16 Rubyonrails Rails 3.2.15 Rubyonrails Rails 3.2.0 Rubyonrails Rails 3.1.4 Rubyonrails Rails 3.1.1 Rubyonrails Rails 3.1.0 Rubyonrails Ruby On Rails 3.0.4 Rubyonrails Rails 3.0.1 Rubyonrails Rails 3.0.0 Rubyonrails Rails 3.1.5 Rubyonrails Rails 3.0.3 Rubyonrails Rails 3.0.14 Rubyonrails Rails 3.0.16 Rubyonrails Rails 3.1.10 Rubyonrails Rails 3.2.1 Rubyonrails Rails 3.2.5 Rubyonrails Rails 3.2.17 Rubyonrails Rails 3.2.18 Rubyonrails Rails 3.0.6 Rubyonrails Rails 3.0.7 Rubyonrails Rails 3.0.9 Rubyonrails Ruby On Rails 2.3.17 Rubyonrails Rails 2.0.1 Rubyonrails Rails 2.0.2 Rubyonrails Rails 2.0.4 Rubyonrails Rails 2.1.0 Rubyonrails Rails 2.2.2 Rubyonrails Rails 2.3.0 Rubyonrails Rails 2.3.1 Rubyonrails Rails 2.3.2 Rubyonrails Rails 2.3.3 Rubyonrails Rails 2.3.10 Rubyonrails Rails 2.3.15 Rubyonrails Rails 2.3.16 Rubyonrails Rails 3.0.2 Rubyonrails Rails 3.0.10 Rubyonrails Rails 3.0.13 Rubyonrails Rails 3.1.2 Rubyonrails Rails 3.2.8 Rubyonrails Rails 3.2.9 Rubyonrails Rails 3.2.13 Rubyonrails Rails 3.0.11 Rubyonrails Rails 3.0.17 Rubyonrails Rails 3.0.18 Rubyonrails Rails 3.0.20 Rubyonrails Rails 3.1.3 Rubyonrails Rails 3.1.8 Rubyonrails Rails 3.1.9 Rubyonrails Rails 3.2.12 Rubyonrails Rails 3.0.4 Rubyonrails Rails 3.0.8 Rubyonrails Rails 2.1.1 Rubyonrails Rails 2.1.2 Rubyonrails Rails 2.2.0 Rubyonrails Rails 2.2.1 Rubyonrails Rails 2.3.4 Rubyonrails Rails 2.3.9 Rubyonrails Rails 2.3.11 Rubyonrails Rails 2.3.12 Rubyonrails Rails 2.3.13 Rubyonrails Rails 2.3.14 Rubyonrails Rails 2.3.18 Rubyonrails Rails 2.0.0 Rubyonrails Rails 3.0.12 Rubyonrails Rails 3.2.7 Rubyonrails Rails 3.0.19 Rubyonrails Rails 3.1.6 Rubyonrails Rails 3.1.7 Rubyonrails Rails 3.2.6 Rubyonrails Rails 3.2.10 Rubyonrails Rails 3.2.11 Rubyonrails Rails 3.0.5 Rubyonrails Rails 3.2.2

5

CVSSv2

Zetetic SQLCipher 4.x before 4.4.3 has a NULL pointer dereferencing issue related to sqlcipher_export in crypto.c and sqlite3StrICmp in sqlite3.c. This may allow an attacker to perform a remote denial of service attack. For example, an SQL injection can be used to execute the...

Zetetic Sqlcipher

7.5

CVSSv2

SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/quoting.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 4.x before 4.0.7 and 4.1.x before 4.1.3 allows remote attackers to execute arbitrary SQL commands by leveraging...

Rubyonrails Rails 4.0.5 Rubyonrails Rails 4.0.1 Rubyonrails Rails 4.0.6 Rubyonrails Rails 4.1.0 Rubyonrails Rails 4.0.4 Rubyonrails Rails 4.0.3 Rubyonrails Rails 4.0.2 Rubyonrails Rails 4.1.2 Rubyonrails Rails 4.0.0 Rubyonrails Rails 4.1.1

7.5

CVSSv2

An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. Due to an error in shallow key transformation, key and index lookups for django.contrib.postgres.fields.JSONField, and key lookups for...

Djangoproject Django Fedoraproject Fedora 30 Debian Debian Linux 10.0 Debian Debian Linux 9.05 Github repositories available

Get Started

« PREV 1 2 3 4 5 6 7 8 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook