SQL - CVE CyberSecurity Database News (Page 220)

May 20, 2022 SQL Java

CVE-2022-30551 Attackers can stop a server from processing messages by sending crafted messages that exhaust available resources.

This vulnerability is often exploited through the use of a sql injection attack. As a result, a remote attacker can access or modify data, or

May 19, 2022 SQL

CVE-2022-22976 An integer overflow vulnerability was found in Spring Security versions 5.5.x, 5.6.x, and earlier unsupported versions.

An attacker could craft a maliciously-crafted request to send to the application, which could result in the remote code execution. To protect your application from

May 13, 2022 SQL

CVE-2022-29383 The USERDBDomains.Domainname attack vector was found in the firmware of the SSL VPN FVS336Gv2 and FVS336Gv3.

This can potentially be exploited by malicious entities to gain access to critical system functions that require elevated privileges, such as installation of software or

May 10, 2022 WordPress SQL

CVE-2022-1463 The Booking Calendar plugin is vulnerable to PHP Object Injection via the [bookingflextimeline] shortcode up to and including version 9.1

If a user is able to access the booking calendar via a route such as http://host/booking-calendar/(booking_location) they could inject arbitrary code

May 9, 2022 CSRF SQL

CVE-2022-29972 An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift ODBC Driver may allow a local user to execute arbitrary code.

An attacker may leverage this vulnerability to inject commands into the database or cause the server to process malicious commands. In certain configurations, this may