220104 matches found
EUVD-2026-58626
SiYuan versions = v3.7.2 contain a SQL injection vulnerability in the backlink/mention search query kernel/model/backlink.go, which concatenates stored block metadata title, name, alias, anchor text and the client-supplied keyword into a SQL MATCH/search statement while escaping only the...
CVE-2026-72811 SiYuan before v3.7.4 SQL Injection via backlink search
SiYuan versions = v3.7.2 contain a SQL injection vulnerability in the backlink/mention search query kernel/model/backlink.go, which concatenates stored block metadata title, name, alias, anchor text and the client-supplied keyword into a SQL MATCH/search statement while escaping only the...
CVE-2026-72811
SiYuan
CVE-2026-72811
SiYuan versions = v3.7.2 contain a SQL injection vulnerability in the backlink/mention search query kernel/model/backlink.go, which concatenates stored block metadata title, name, alias, anchor text and the client-supplied keyword into a SQL MATCH/search statement while escaping only the...
SQL Injection
Spring Data Relational is vulnerable to SQL Injection. The vulnerability is due to insufficient escaping of wildcard characters in user-controlled input, which allows an attacker to inject wildcard patterns and perform boolean-based blind data inference...
WordPress Paymob for WooCommerce plugin < 4.1.9 - Unauthenticated SQL Injection via Paymob Callback Pixel Lookup vulnerability
Unauthenticated SQL Injection via Paymob Callback Pixel Lookup vulnerability discovered by Artus KG in WordPress Plugin Paymob for WooCommerce versions 4.1.9...
WordPress Bit Form plugin <= 3.2.0 - Authenticated (Administrator+) SQL Injection via 'filterText' Parameter vulnerability
Authenticated Administrator+ SQL Injection via 'filterText' Parameter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Bit Form versions = 3.2.0...
WordPress affiliate-toolkit plugin <= 3.8.8 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter vulnerability
Authenticated Administrator+ SQL Injection via 'orderby' Parameter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin affiliate-toolkit versions = 3.8.8...
GO-2023-1832 vulnerabilities
Vulnerabilities for packages: zot...
GO-2023-1568 vulnerabilities
Vulnerabilities for packages: kubeflow-katib...
GO-2022-1039 vulnerabilities
Vulnerabilities for packages: kubeflow-katib...
GO-2024-2517 vulnerabilities
Vulnerabilities for packages: grafana-fips...
GO-2024-2629 vulnerabilities
Vulnerabilities for packages: grafana-fips...
GO-2025-3585 vulnerabilities
Vulnerabilities for packages: harbor, harbor-fips...
GO-2024-3331 vulnerabilities
Vulnerabilities for packages: harbor, harbor-fips...
GO-2024-2520 vulnerabilities
Vulnerabilities for packages: grafana-fips...
GO-2025-3384 vulnerabilities
Vulnerabilities for packages: grafana-fips, grafana...
GO-2023-1704 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, go...
