CWE-943: NoSQL Injection, NoSQLi
The product generates a query intended to access or manipulate data in a data store such as a database, but it does not neutralize or incorrectly neutralizes special elements that can modify the intended logic of the query.
Also known as Improper Neutralization of Special Elements in Data Query Logic.
A kind of CWE-74 Injection.
From the CWE List. © The MITRE Corporation.
Newest
- hitachi energy microscada pro sys600, microscada x sys600, hitachienergy microscada sys600 +2 moreThe product does not validate any query towards persistent data, resulting in a risk of injection...9.9 Critical
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service5.3 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service5.3 Medium
- yooooomi your spotifyNoSQL Injection Leading to Authentication Bypass in your_spotify5.3 Medium
- aeb cruddlcruddl vulnerable to AQL injection through flexSearch9.9 Critical
- cisco sd-wan vmanage, catalyst sd-wan manager +1 moreCisco SD-WAN vManage Software Cypher Query Language Injection Vulnerability5.4 Medium
- qnap media streaming add-on, multimedia console, qts +2 moreSQL Injection Vulnerability in Multimedia Console and the Media Streaming Add-On9.8 Critical
- cisco sd-wan vmanageCisco SD-WAN vManage Cypher Query Language Injection Vulnerability6.5 Medium
- qnap music stationIf exploited, this SQL injection vulnerability could allow remote attackers to obtain application...7.5 High
- thoughtbot administrateSort order SQL injection in Administrate7.7 High
- pelco sarix enhanced and spectra enhanced, pelco sarix enhanced 1st generation and spectra enhanced ptz, schneider-electric d6220 firmware, d6220l firmware +57 more +59 moreAn Improper Neutralization of Special Elements in Query vulnerability exists in the 1st Gen....8.8 High
- newsbeuter, debian linux +1 moreImproper Neutralization of Special Elements used in an OS Command in bookmarking function of...8.8 High