Lucene search
+L

287811 matches found

EUVD
EUVD
•added 2026/09/30 12:32 a.m.•24 views

EUVD-2026-89438

The "search" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind SQL injection vulnerability...

9CVSS5.9AI score0.00307EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/09/30 12:19 a.m.•14 views

CVE-2026-51936

Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipherexport convenience function can be used to copy the contents of one attached database into another. It is most often used to convert between plaintext and encrypted databases. It needs to do dynamic schema manipulation, and thus t...

2.1CVSS6.1AI score0.0018EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/30 12:19 a.m.•37 views

CVE-2026-51936

Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipherexport convenience function can be used to copy the contents of one attached database into another. It is most often used to convert between plaintext and encrypted databases. It needs to do dynamic schema manipulation, and thus t...

2.1CVSS0.0018EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/30 12:19 a.m.•15 views

EUVD-2026-89542

Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipherexport convenience function can be used to copy the contents of one attached database into another. It is most often used to convert between plaintext and encrypted databases. It needs to do dynamic schema manipulation, and thus t...

2.1CVSS6.1AI score0.0018EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/30 12:19 a.m.•64 views

CVE-2026-51936

Zetetic SQLCipher versions prior to 4.15.0 are vulnerable to SQL injection via the sqlcipher_export convenience function. This function, which is primarily used to copy database contents or convert between plaintext and encrypted formats, temporarily disables defensive restrictions to perform dyn...

2.1CVSS6.1AI score0.0018EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/09/30 12:19 a.m.•37 views

CVE-2026-51936

Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipherexport convenience function can be used to copy the contents of one attached database into another. It is most often used to convert between plaintext and encrypted databases. It needs to do dynamic schema manipulation, and thus t...

2.1CVSS6.1AI score
SaveExploits0References5
Mend
Mend
•added 2026/09/30 12:19 a.m.•9 views

CVE-2026-51936

Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipherexport convenience function can be used to copy the contents of one attached database into another. It is most often used to convert between plaintext and encrypted databases. It needs to do dynamic schema manipulation, and thus t...

5.7CVSS6.1AI score0.0018EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/30 12:00 a.m.•14 views

CVE-2026-103231: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. The affected element is the function mysqliquery of the file User/cancel.php of the component Order Cancellation. The manipulation of the argument ID leads to sql injectio...

7.5CVSS7AI score0.00263EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/30 12:00 a.m.•15 views

CVE-2026-103230: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqliquery of the file User/ord.php of the component Order Placement. Executing a manipulation of the argument id/name can lead to sql injection...

7.5CVSS6.9AI score0.00263EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/30 12:00 a.m.•13 views

CVE-2026-103229: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This issue affects the function mysqliquery of the file admin/delete1.php of the component Unauthenticated Action Script. Performing a manipulation of the argument ID results i...

7.5CVSS6.9AI score0.00328EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/30 12:00 a.m.•15 views

CVE-2026-62097: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPTasty Business Directory business-directory-plugin allows Blind SQL Injection.This issue affects Business Directory: from n/a through 6.4.27...

7.6CVSS5.9AI score0.00226EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/30 12:00 a.m.•18 views

CVE-2026-94177: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ruben Garcia GamiPress gamipress allows Blind SQL Injection.This issue affects GamiPress: from n/a through 8.0.2...

8.5CVSS5.8AI score0.00253EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/30 12:00 a.m.•15 views

CVE-2026-94082: Improper Neutralization of Special Elements used in an SQL Command

Author SQL Injection in Quiz Cat = 3.1.1 versions...

7.6CVSS5.8AI score0.00271EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/30 12:00 a.m.•13 views

CVE-2026-93621: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in WP Data Access = 5.5.84 versions...

8.2CVSS5.9AI score0.00246EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/30 12:00 a.m.•16 views

CVE-2026-103116: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in OS4ED openSIS-Classic up to 9.3. This impacts the function DBQuery of the file functions/GetStuListFnc.php of the component Student List Search Endpoint. This manipulation of the argument LOsort causes sql injection. The attack can be initiated remotely. The...

6.5CVSS6.3AI score0.0025EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/30 12:00 a.m.•16 views

CVE-2026-6806: Improper Neutralization of Special Elements used in an SQL Command

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'stmlat/stmlng' parameter in all versions up to, and including, 1.4.109 due to insufficient escaping on the user supplied parameter and lack of sufficient...

7.5CVSS5.8AI score0.00273EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/30 12:00 a.m.•16 views

CVE-2026-102913: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in SourceCodester Car Driving School Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=saveenrollment. The manipulation results in sql injection. The attack can be executed remotely. The exploit has been released to the...

7.5CVSS5.7AI score0.00269EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/30 12:00 a.m.•14 views

CVE-2026-102909: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer0/admins/assessments/examproper/btnfunctions.php. The manipulation of the argument accesscode leads to sql injection. The attack can be initiated remotely...

7.5CVSS5.8AI score0.00263EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/09/30 12:00 a.m.•17 views

Azure SQL Database SQL Injection

The vulnerability of the Azure SQL Database cloud relational database model is related to the lack of security measures for SQL query structures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

9.9CVSS6.7AI score0.00987EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/09/30 12:00 a.m.•17 views

Azure SQL Database SQL Injection

The vulnerability of the Azure SQL Database cloud relational database model is related to the lack of security measures for SQL query structures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

9.9CVSS6.7AI score0.00987EPSS
SaveExploits0References2
Rows per page
Query Builder