261190 matches found
CVE-2026-105918
A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysqlerror of the file login.php of the component Login Endpoint. The manipulation of the argument username/password leads to sql injection. The attac...
EUVD-2026-93372
A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysqlerror of the file login.php of the component Login Endpoint. The manipulation of the argument username/password leads to sql injection. The attac...
CVE-2026-105918
A SQL injection vulnerability exists in the Login Endpoint of the Kusalkasilva Learning-Management-System (up to commit ffeb873f8803f1e9664384ff75000c7da45466d2). The flaw is located in the mysql_error function within the login.php file. Attackers can initiate this attack remotely by manipulating...
CVE-2026-105918 Kusalkasilva Learning-Management-System Login Endpoint login.php mysql_error sql injection
A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysqlerror of the file login.php of the component Login Endpoint. The manipulation of the argument username/password leads to sql injection. The attac...
CVE-2026-105918 Kusalkasilva Learning-Management-System Login Endpoint login.php mysql_error sql injection
A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysqlerror of the file login.php of the component Login Endpoint. The manipulation of the argument username/password leads to sql injection. The attac...
Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.13 security update on RHEL 7
New Red Hat Single Sign-On 7.6.13 packages are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of none. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
org.hibernate/hibernate-core: Hibernate: Information disclosure and data deletion via second-order SQL injection
A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive informatio...
org.hibernate/hibernate-core: Hibernate: Information disclosure and data deletion via second-order SQL injection
A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive informatio...
Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.13 security update on RHEL 9
New Red Hat Single Sign-On 7.6.13 packages are now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of none. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Important: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.13 security update on RHEL 8
New Red Hat Single Sign-On 7.6.13 packages are now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of none. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
org.hibernate/hibernate-core: Hibernate: Information disclosure and data deletion via second-order SQL injection
A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive informatio...
Security Bulletin: Multiple vulnerabilities in PostgreSQL affect PowerVM VIOS
Summary Vulnerabilities in PostgreSQL could allow Memory Corruption/Arbitrary Code Execution CVE-2026-14662, CVE-2026-14664, CVE-2026-14669, CVE-2026-14670, CVE-2026-14671, CVE-2026-14677, CVE-2026-14679, CVE-2026-14680, CVE-2026-15742, CVE-2026-16239, CVE-2026-19385, Information Disclosure...
WordPress Events Manager plugin <= 7.4.6 - SQL Injection vulnerability
SQL Injection vulnerability discovered by neurotx in WordPress Plugin Events Manager versions = 7.4.6...
CVE-2026-4889
SQL injection SQLi vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user process endpoint '/ajax/users.php?op=verify'. The parameter is vulnerable to boolean-based and time-based SQL injection. Successfully exploiting this vulnerability would allow an...
CVE-2026-42416
Subscriber SQL Injection in UDesign Core = 4.15.0 versions...
CVE-2026-42417
Unauthenticated SQL Injection in ARMember Premium = 7.8 versions...
CVE-2026-42415
Unauthenticated SQL Injection in Porto Theme - Functionality = 3.9.3 versions...
CVE-2026-42414
Subscriber SQL Injection in ListingPro = 2.9.12 versions...