CVE-2024-50387

CRITICAL Year: 2024
Weakness Type
CWE-89
View all →

Vulnerability Description

A SQL injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to inject malicious code. We have already fixed the vulnerability in the following version: SMB Service 4.15.002 and later SMB Service h4.15.002 and later

Related Vulnerabilities

CVE-2015-8974

CRITICAL
CVSS:10.0(Critical)

SQL injection vulnerability in the Group Promotions module in the admin control panel in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 allows remot...

CWE-892015

CVE-2016-8027

CRITICAL
CVSS:10.0(Critical)

SQL injection vulnerability in core services in Intel Security McAfee ePolicy Orchestrator (ePO) 5.3.2 and earlier and 5.1.3 and earlier allows attackers to alter a SQL query, which can result in disc...

CWE-892016

CVE-2020-12271

CRITICAL
CVSS:10.0(Critical)

A SQL injection issue was found in SFOS 17.0, 17.1, 17.5, and 18.0 before 2020-04-25 on Sophos XG Firewall devices, as exploited in the wild in April 2020. This affected devices configured with either...

CWE-892020

CVE-2022-1531

CRITICAL
CVSS:10.0(Critical)

SQL injection vulnerability in ARAX-UI Synonym Lookup functionality in GitHub repository rtxteam/rtx prior to checkpoint_2022-04-20 . This vulnerability is critical as it can lead to remote code execu...

CWE-892022

CVE-2022-35942

CRITICAL
CVSS:10.0(Critical)

Improper input validation on the `contains` LoopBack filter may allow for arbitrary SQL injection. When the extended filter property `contains` is permitted to be interpreted by the Postgres connector...

CWE-892022

CVE-2024-12909

CRITICAL
CVSS:10.0(Critical)

A vulnerability in the FinanceChatLlamaPack of the run-llama/llama_index repository, versions up to v0.12.3, allows for SQL injection in the `run_sql_query` function of the `database_agent`. This vuln...

CWE-892024