Export limit exceeded: 425865 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 21,746

Export CSV
CVE-2019-15568

idseq-web before 2019-07-01 in Infectious Disease Sequencing Platform IDseq allows SQL injection via tax_levels.

CVSS 3.0 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Idseq
Products
Idseq-web
CVE-2019-15567

OpenForis Arena before 2019-05-07 allows SQL injection in the sorting feature.

CVSS 3.0 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Openforis
Products
Arena
CVE-2019-15566

The Alfresco application before 1.8.7 for Android allows SQL injection in HistorySearchProvider.java.

CVSS 3.0 · 9.8 Critical EPSS 1.6% KEV · Not listed
Vendors
Alfresco
Products
Alfresco
CVE-2019-15563

Observational Health Data Sciences and Informatics (OHDSI) WebAPI before 2.7.2 allows SQL injection in FeatureExtractionService.java.

CVSS 3.0 · 9.8 Critical EPSS 1.9% KEV · Not listed
Vendors
Ohdsi
Products
Webapi
CVE-2019-15562

GORM before 1.9.10 allows SQL injection via incomplete parentheses. NOTE: Misusing Gorm by passing untrusted user input where Gorm expects trusted SQL fragments is a vulnerability in the application, not in Gorm

CVSS 3.1 · 9.8 Critical EPSS 1.7% KEV · Not listed
Vendors
Gorm
Products
Gorm
CVE-2019-15555

FredReinink Wellness-app before 2019-06-19 allows SQL injection, related to dietTrack.php, exerciseGenerator.php, fitnessTrack.php, and server.php.

CVSS 3.0 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Wellness Project
Products
Wellness
CVE-2019-15537

The proxystatistics module before 3.1.0 for SimpleSAMLphp allows SQL Injection in lib/Auth/Process/DatabaseCommand.php.

CVSS 3.0 · 9.8 Critical EPSS 1.6% KEV · Not listed
Vendors
Cesnet
Products
Proxystatistics
CVE-2019-15536

The Acclaim block plugin before 2019-06-26 for Moodle allows SQL Injection via delete_records.

CVSS 3.0 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Youracclaim
Products
Acclaim
CVE-2019-15533

XENFCoreSharp before 2019-07-16 allows SQL injection in web/verify.php.

CVSS 3.0 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Xayr
Products
Xenfcoresharp
CVE-2019-15301

A SQL injection vulnerability in the method Terrasoft.Core.DB.Column.Const() in Terrasoft Bpm'online CRM-System SDK 7.13 allows attackers to execute arbitrary SQL commands via the value parameter.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Terrasoft
Products
Bpm Online Crm System Sdk