5.3

CVSS4.0

CVE-2025-3956 - 201206030 novel-cloud BookInfoMapper.xml RestResp sql injection

A vulnerability has been found in 201206030 novel-cloud 1.4.0 and classified as critical. This vulnerability affects the function RestResp of the file novel-cloud-master/novel-book/novel-book-service/src/main/resources/mapper/BookInfoMapper.xml. The manipulation leads to sql injection. The attack c…

πŸ“… Published: April 27, 2025, 3 a.m. πŸ”„ Last Modified: May 12, 2025, 7:27 p.m.

7.7

CVSS3.1

CVE-2025-46580 - ZTE GoldenDB Database product has a code-related vulnerability

There is a code-related vulnerability in the GoldenDB database product. Attackers can access system tables to disrupt the normal operation of business SQL.

πŸ“… Published: April 27, 2025, 1:49 a.m. πŸ”„ Last Modified: May 12, 2025, 7:27 p.m.

8.4

CVSS3.1

CVE-2025-46579 - ZTE GoldenDB Database product has a DDE injection vulnerability

There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download and open the affected file, the DDE commands can be executed.

πŸ“… Published: April 27, 2025, 1:34 a.m. πŸ”„ Last Modified: May 12, 2025, 7:32 p.m.

6.5

CVSS3.1

CVE-2025-46578 - ZTE GoldenDB Database product has SQL injection vulnerabilities in multiple interfaces

There are SQL injection vulnerabilities in multiple interfaces of the GoldenDB database product. Attackers can exploit these interfaces to inject commands and extract sensitive database information.

πŸ“… Published: April 27, 2025, 1:30 a.m. πŸ”„ Last Modified: May 12, 2025, 7:32 p.m.

6.5

CVSS3.1

CVE-2025-46577 - ZTE GoldenDB Database product has an SQL injection vulnerability

There is a SQL injection vulnerability in the GoldenDB database product. Attackers can inject commands to extract database information.

πŸ“… Published: April 27, 2025, 1:21 a.m. πŸ”„ Last Modified: May 12, 2025, 7:32 p.m.

5.4

CVSS3.1

CVE-2025-46576 - ZTE GoldenDB Database product has a privilege escalation vulnerability

There is a Permission Management and Access Control vulnerability in the GoldenDB database product. Attackers can manipulate requests to bypass privilege restrictions and delete content.

πŸ“… Published: April 27, 2025, 1:16 a.m. πŸ”„ Last Modified: May 12, 2025, 7:32 p.m.

4.9

CVSS3.1

CVE-2025-46575 - ZTE GoldenDB Database product has an information disclosure vulnerability

There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensitive information.

πŸ“… Published: April 27, 2025, 1:12 a.m. πŸ”„ Last Modified: May 12, 2025, 7:33 p.m.

4.1

CVSS3.1

CVE-2025-46574 - ZTE GoldenDB Database product has an input validation vulnerability

There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensitive information.

πŸ“… Published: April 27, 2025, 1:07 a.m. πŸ”„ Last Modified: May 12, 2025, 7:33 p.m.

5.3

CVSS4.0

CVE-2025-3955 - codeprojects Patient Record Management System edit_rpatient.php.php sql injection

A vulnerability, which was classified as critical, was found in codeprojects Patient Record Management System 1.0. This affects an unknown part of the file /edit_rpatient.php.php. The manipulation of the argument id/lastname leads to sql injection. It is possible to initiate the attack remotely. Th…

πŸ“… Published: April 27, 2025, 1 a.m. πŸ”„ Last Modified: April 30, 2025, 6:49 p.m.

5.6

CVSS3.1

CVE-2025-46687 -

quickjs-ng through 0.9.0 has a missing length check in JS_ReadString for a string, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected.

πŸ“… Published: April 27, 2025, midnight πŸ”„ Last Modified: Jan. 14, 2026, 5:30 p.m.
Total resulsts: 344154
Page 5153 of 34,416
Β« previous page Β» next page
Filters