238418 matches found
CVE-2026-37592
Sourcecodester Storage Unit Rental Management System v1.0 is vulnerable to SQL in the file /storage/admin/maintenance/managepricing.php...
CVE-2026-37590
SourceCodester Storage Unit Rental Management System v1.0 is vulnerable to SQL Injection in the file /storage/admin/rents/managerent.php...
CVE-2026-39809
A improper neutralization of special elements used in an sql command 'sql injection' vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5, FortiClientEMS 7.2.0 through 7.2.12, FortiClientEMS 7.0 all versions may allow attacker to execute unauthorized code or commands via sending crafted...
CVE-2026-39809
A improper neutralization of special elements used in an sql command 'sql injection' vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5, FortiClientEMS 7.2.0 through 7.2.12, FortiClientEMS 7.0 all versions may allow attacker to execute unauthorized code or commands via sending crafted...
CVE-2026-39809
Fortinet FortiClientEMS contains a SQL injection vulnerability (improper neutralization of special elements in SQL commands) affecting FortiClientEMS 7.0 all versions and 7.2.0–7.2.12, 7.4.0–7.4.5. The issue could allow an attacker to execute unauthorized code or commands. The connected sources p...
[R3] Tenable Identity Exposure Version 3.77.17 Fixes Multiple Vulnerabilities
R3 Tenable Identity Exposure Version 3.77.17 Fixes Multiple Vulnerabilities Aaron Roy Tue, 04/14/2026 - 10:54 Tenable Identity Exposure leverages third-party software to help provide underlying functionality. Several of the third-party components .NET Windows Server Hosting, NodeJS, Erlang OTP, S...
SQL Server Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges locally...
Microsoft SQL Server Remote Code Execution Vulnerability
Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network...
KB5084814 - Description of the security update for SQL Server 2025 GDR: April 14, 2026
None None...
KB5084820 - Description of the security update for SQL Server 2016 SP3 Azure Connect Feature Pack: April 14, 2026
None None...
KB5084816 - Description of the security update for SQL Server 2019 CU32: April 14, 2026
None None...
KB5084819 - Description of the security update for SQL Server 2017 GDR: April 14, 2026
None None...
KB5084817- Description of the security update for SQL Server 2019 GDR: April 14, 2026
None None...
KB5083252 - Description of the security update for SQL Server 2022 CU24: April 14, 2026
None None...
KB5083245- Description of the security update for SQL Server 2025 CU3: April 14, 2026
None None...
WordPress Product Filter for WooCommerce by WBW plugin < 3.1.3 - Unauthenticated SQLi vulnerability
Unauthenticated SQLi vulnerability discovered by mcdruid in WordPress Plugin Product Filter by WBW versions 3.1.3...
CVE-2026-40179 vulnerabilities
Vulnerabilities for packages: aws-otel-collector, karma, certificate-transparency, minio-operator, mc, trillian, minio, tempo, prometheus-pushgateway, splunk-otel-collector, jaeger, loki, grafana-pyroscope, istio, datadog-agent, mcp-grafana, minio-object-browser, keda, telegraf, cloud-sql-proxy...
GHSA-VFFH-X6R8-XX99 vulnerabilities
Vulnerabilities for packages: aws-otel-collector, karma, certificate-transparency, minio-operator, mc, trillian, minio, tempo, prometheus-pushgateway, splunk-otel-collector, jaeger, loki, grafana-pyroscope, istio, datadog-agent, mcp-grafana, minio-object-browser, keda, telegraf, cloud-sql-proxy...
CVE-2026-6010
A security flaw has been discovered in CodeAstro Online Classroom 1.0/2.php. Affected by this vulnerability is an unknown functionality of the file /OnlineClassroom/takeassessment2.php?exid=14. Performing a manipulation of the argument Q1 results in sql injection. Remote exploitation of the attac...
