CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: vault-secrets-webhook, buildah, newrelic-fluent-bit-output, prometheus-alertmanager, rabbitmq-cluster-operator, openfga, aws-eks-pod-identity-agent, azcopy, aws-flb-cloudwatch, vertical-pod-autoscaler, tetragon, polaris, cis-operator, nodetaint, nri-kubernetes,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: vault-secrets-webhook, buildah, newrelic-fluent-bit-output, prometheus-alertmanager, rabbitmq-cluster-operator, openfga, aws-eks-pod-identity-agent, azcopy, aws-flb-cloudwatch, vertical-pod-autoscaler, tetragon, polaris, cis-operator, nodetaint, nri-kubernetes,...

CVE-2026-78659 vulnerabilities

Vulnerabilities for packages: vault-secrets-webhook, buildah, newrelic-fluent-bit-output, prometheus-alertmanager, rabbitmq-cluster-operator, openfga, aws-eks-pod-identity-agent, azcopy, aws-flb-cloudwatch, vertical-pod-autoscaler, tetragon, polaris, cis-operator, nodetaint, nri-kubernetes,...

CVE-2026-78663 vulnerabilities

Vulnerabilities for packages: vault-secrets-webhook, buildah, prometheus-alertmanager, rabbitmq-cluster-operator, openfga, aws-eks-pod-identity-agent, azcopy, vertical-pod-autoscaler, tetragon, polaris, cis-operator, nodetaint, nri-kubernetes, cass-operator, opentelemetry-operator, kine,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: vault-secrets-webhook, buildah, newrelic-fluent-bit-output, prometheus-alertmanager, rabbitmq-cluster-operator, openfga, aws-eks-pod-identity-agent, azcopy, aws-flb-cloudwatch, vertical-pod-autoscaler, tetragon, polaris, cis-operator, nodetaint, nri-kubernetes,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: vault-secrets-webhook, buildah, prometheus-alertmanager, rabbitmq-cluster-operator, openfga, aws-eks-pod-identity-agent, azcopy, vertical-pod-autoscaler, tetragon, polaris, cis-operator, nodetaint, nri-kubernetes, cass-operator, opentelemetry-operator, kine,...

CVE-2026-78660 vulnerabilities

Vulnerabilities for packages: vault-secrets-webhook, newrelic-fluent-bit-output, prometheus-alertmanager, rabbitmq-cluster-operator, aws-eks-pod-identity-agent, azcopy, aws-flb-cloudwatch, vertical-pod-autoscaler, polaris, cis-operator, nodetaint, nri-kubernetes, cass-operator,...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: vault-secrets-webhook, newrelic-fluent-bit-output, prometheus-alertmanager, rabbitmq-cluster-operator, aws-eks-pod-identity-agent, azcopy, aws-flb-cloudwatch, vertical-pod-autoscaler, polaris, cis-operator, nodetaint, nri-kubernetes, cass-operator,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: vault-secrets-webhook, buildah, newrelic-fluent-bit-output, prometheus-alertmanager, rabbitmq-cluster-operator, openfga, aws-eks-pod-identity-agent, azcopy, aws-flb-cloudwatch, vertical-pod-autoscaler, tetragon, polaris, cis-operator, nodetaint, nri-kubernetes,...

CVE-2026-97032 vulnerabilities

Vulnerabilities for packages: vault-secrets-webhook, buildah, newrelic-fluent-bit-output, prometheus-alertmanager, rabbitmq-cluster-operator, openfga, aws-eks-pod-identity-agent, azcopy, aws-flb-cloudwatch, vertical-pod-autoscaler, tetragon, polaris, cis-operator, nodetaint, nri-kubernetes,...

EUVD-2026-95819

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in wp-post-author. This issue affects wp-post-author before 4.1.0...

CVE-2026-108124 WordPress Post Author Authenticated SQLi

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in wp-post-author. This issue affects wp-post-author before 4.1.0...

CVE-2026-108124

The wp-post-author plugin, specifically versions before 4.1.0 , is vulnerable to an authenticated SQL injection (CWE-89). The root cause is the improper neutralization of special elements used in an SQL command. This vulnerability allows an attacker with high privileges to impact confidentiality ...

CVE-2023-1454

CVE-2023-1454 jmreport/qurestSql escaneo masivo de PoC para inyección SQL no autorizada Jeecg-Boot es una plataforma de desarrollo rápido basada en Spring Boot y Jeecg-Boot-Plus. La versión más reciente, jeecg-boot 3.5.0, ha sido reportada con múltiples vulnerabilidades de inyección SQL. Uso de l...

CVE-2026-108107

PHPNuxBill versions through 2025.3.20 are vulnerable to an unauthenticated SQL injection in the radius.php FreeRADIUS REST endpoint. The root cause is the improper interpolation of request parameters into whereRaw() queries. Attackers can submit crafted username , macAddr , or nasid parameters du...

CVE-2026-108107 PHPNuxBill through 2025.3.20 Unauthenticated SQL Injection via radius.php

PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php FreeRADIUS REST endpoint that interpolates request parameters into whereRaw queries. Attackers can send crafted username, macAddr or nasid parameters to the accounting or authenticate actions to...

CVE-2026-108107 PHPNuxBill through 2025.3.20 Unauthenticated SQL Injection via radius.php

PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php FreeRADIUS REST endpoint that interpolates request parameters into whereRaw queries. Attackers can send crafted username, macAddr or nasid parameters to the accounting or authenticate actions to...

EUVD-2026-95808

PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php FreeRADIUS REST endpoint that interpolates request parameters into whereRaw queries. Attackers can send crafted username, macAddr or nasid parameters to the accounting or authenticate actions to...

CVE-2026-107803

ProcessMaker is an open source workflow management software suite. Prior to 2026.14.3, the GET /api/1.0/tasks endpoint in ProcessMaker is vulnerable to SQL injection through the orderby parameter because ProcessMaker\Traits\TaskControllerIndexMethods::applyColumnOrdering concatenates a...

CVE-2026-108100

HortusFox (hortusfox-web) before version 6.2 is vulnerable to an SQL injection flaw within the /api/locations/list endpoint. The root cause is located in PlantsModel::getSpecificInfo() , which insecurely concatenates user-supplied include_info values into the SQL column list. This allows authenti...