Vulnerabilities (CVE)

Filtered by CWE-89
Total 14188 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-17841 1 Flippa Marketplace Clone Project 1 Flippa Marketplace Clone 2019-06-20 7.5 HIGH 9.8 CRITICAL
SQL injection exists in Scriptzee Flippa Marketplace Clone 1.0 via the site-search sortBy or sortDir parameter.
CVE-2018-20505 3 Apple, Microsoft, Sqlite 7 Icloud, Iphone Os, Itunes and 4 more 2019-06-19 5.0 MEDIUM 7.5 HIGH
SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote attackers to cause a denial of service (application crash) by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases).
CVE-2019-12872 1 Dotcms 1 Dotcms 2019-06-18 6.5 MEDIUM 7.2 HIGH
dotCMS before 5.1.6 is vulnerable to a SQL injection that can be exploited by an attacker of the role Publisher via view_unpushed_bundles.jsp.
CVE-2019-12149 1 Silverstripe 2 Registry, Restfulserver 2019-06-12 7.5 HIGH 9.8 CRITICAL
SQL injection vulnerability in silverstripe/restfulserver module 1.0.x before 1.0.9, 2.0.x before 2.0.4, and 2.1.x before 2.1.2 and silverstripe/registry module 2.1.x before 2.1.1 and 2.2.x before 2.2.1 allows attackers to execute arbitrary SQL commands.
CVE-2018-20091 1 Cloudera 1 Data Science Workbench 2019-06-10 6.5 MEDIUM 9.9 CRITICAL
An SQL injection vulnerability was found in Cloudera Data Science Workbench (CDSW) 1.4.0 through 1.4.2. This would allow any authenticated user to run arbitrary queries against CDSW's internal database. The database contains user contact information, encrypted CDSW passwords (in the case of local authentication), API keys, and stored Kerberos keytabs.
CVE-2019-12599 1 Salesagility 1 Suitecrm 2019-06-10 7.5 HIGH 9.8 CRITICAL
SuiteCRM 7.10.x before 7.10.17 and 7.11.x before 7.11.5 allows SQL Injection.
CVE-2019-12600 1 Salesagility 1 Suitecrm 2019-06-10 7.5 HIGH 9.8 CRITICAL
SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 2 of 3).
CVE-2019-12601 1 Salesagility 1 Suitecrm 2019-06-10 7.5 HIGH 9.8 CRITICAL
SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 3 of 3).
CVE-2019-12598 1 Salesagility 1 Suitecrm 2019-06-10 7.5 HIGH 9.8 CRITICAL
SuiteCRM 7.8.x before 7.8.30, 7.10.x before 7.10.17, and 7.11.x before 7.11.5 allows SQL Injection (issue 1 of 3).
CVE-2019-11978 1 Hp 1 Intelligent Management Center 2019-06-07 9.0 HIGH 8.8 HIGH
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-11971 1 Hp 1 Intelligent Management Center 2019-06-07 9.0 HIGH 8.8 HIGH
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-11972 1 Hp 1 Intelligent Management Center 2019-06-07 9.0 HIGH 8.8 HIGH
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-11977 1 Hp 1 Intelligent Management Center 2019-06-07 9.0 HIGH 8.8 HIGH
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-11976 1 Hp 1 Intelligent Management Center 2019-06-07 9.0 HIGH 8.8 HIGH
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-11975 1 Hp 1 Intelligent Management Center 2019-06-07 9.0 HIGH 8.8 HIGH
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-11974 1 Hp 1 Intelligent Management Center 2019-06-07 9.0 HIGH 8.8 HIGH
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-11973 1 Hp 1 Intelligent Management Center 2019-06-07 9.0 HIGH 8.8 HIGH
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-11970 1 Hp 1 Intelligent Management Center 2019-06-07 9.0 HIGH 8.8 HIGH
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-11979 1 Hp 1 Intelligent Management Center 2019-06-07 9.0 HIGH 8.8 HIGH
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
CVE-2019-11984 1 Hp 1 Intelligent Management Center 2019-06-07 9.0 HIGH 8.8 HIGH
A SQL injection code execution vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.