CVE-2026-39809

A improper neutralization of special elements used in an sql command 'sql injection' vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5, FortiClientEMS 7.2.0 through 7.2.12, FortiClientEMS 7.0 all versions may allow attacker to execute unauthorized code or commands via sending crafted...

CVE-2026-39809

A improper neutralization of special elements used in an sql command 'sql injection' vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5, FortiClientEMS 7.2.0 through 7.2.12, FortiClientEMS 7.0 all versions may allow attacker to execute unauthorized code or commands via sending crafted...

CVE-2026-39809

Fortinet FortiClientEMS contains a SQL injection vulnerability (improper neutralization of special elements in SQL commands) affecting FortiClientEMS 7.0 all versions and 7.2.0–7.2.12, 7.4.0–7.4.5. The issue could allow an attacker to execute unauthorized code or commands. The connected sources p...

[R3] Tenable Identity Exposure Version 3.77.17 Fixes Multiple Vulnerabilities

R3 Tenable Identity Exposure Version 3.77.17 Fixes Multiple Vulnerabilities Aaron Roy Tue, 04/14/2026 - 10:54 Tenable Identity Exposure leverages third-party software to help provide underlying functionality. Several of the third-party components .NET Windows Server Hosting, NodeJS, Erlang OTP, S...

KB5084814 - Description of the security update for SQL Server 2025 GDR: April 14, 2026

None None...

KB5084820 - Description of the security update for SQL Server 2016 SP3 Azure Connect Feature Pack: April 14, 2026

None None...

SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges locally...

Microsoft SQL Server Remote Code Execution Vulnerability

Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network...

KB5084819 - Description of the security update for SQL Server 2017 GDR: April 14, 2026

None None...

KB5084816 - Description of the security update for SQL Server 2019 CU32: April 14, 2026

None None...

KB5084817- Description of the security update for SQL Server 2019 GDR: April 14, 2026

None None...

KB5083252 - Description of the security update for SQL Server 2022 CU24: April 14, 2026

None None...

KB5083245- Description of the security update for SQL Server 2025 CU3: April 14, 2026

None None...

WordPress Product Filter for WooCommerce by WBW plugin < 3.1.3 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by mcdruid in WordPress Plugin Product Filter by WBW versions 3.1.3...

CVE-2026-40179 vulnerabilities

Vulnerabilities for packages: istio, telegraf, aws-otel-collector, tempo, karma, certificate-transparency, minio-object-browser, loki, cloud-sql-proxy, prometheus-pushgateway, jaeger, splunk-otel-collector, trillian, grafana-pyroscope, minio, minio-operator, mcp-grafana, mc, keda, datadog-agent...

GHSA-VFFH-X6R8-XX99 vulnerabilities

Vulnerabilities for packages: istio, telegraf, aws-otel-collector, tempo, karma, certificate-transparency, minio-object-browser, loki, cloud-sql-proxy, prometheus-pushgateway, jaeger, splunk-otel-collector, trillian, grafana-pyroscope, minio, minio-operator, mcp-grafana, mc, keda, datadog-agent...

CVE-2026-6010

A security flaw has been discovered in CodeAstro Online Classroom 1.0/2.php. Affected by this vulnerability is an unknown functionality of the file /OnlineClassroom/takeassessment2.php?exid=14. Performing a manipulation of the argument Q1 results in sql injection. Remote exploitation of the attac...

Vulnerable-Web-App-Scanner

Vulnerable-Web-App-Scanner Pent...

AWP Classifieds <= 4.2.1 - Unauthenticated SQL Injection

WordPress Classifieds Plugin before 4.3 contains a SQL injection caused by improper sanitization and escaping of parameters in an AJAX action, letting unauthenticated attackers execute arbitrary SQL commands, exploit requires the premium module to be active. id: CVE-2022-3254 info: name: AWP...

CVE-2026-40315 PraisonAI: SQLiteConversationStore didn't validate table_prefix when constructing SQL queries

PraisonAI is a multi-agent teams system. Prior to 4.5.133, there is an SQL identifier injection vulnerability in SQLiteConversationStore where the tableprefix configuration value is directly concatenated into SQL queries via f-strings without any validation or sanitization. Since SQL identifiers...