282992 matches found
Fedora 44 : postgresql16-anonymizer (2026-58a319c686)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-58a319c686 advisory. Upstream changelog: https://gitlab.com/dalibo/postgresqlanonymizer/-/releases - core CVE-2026-19633: Escalation via custom types, operators and...
PT-2026-97459
Administrator SQL Injection in Email Log = 2.63 versions...
CVE-2026-93773: Improper Neutralization of Special Elements used in an SQL Command
Contributor SQL Injection in Mollie Forms = 2.11.0 versions...
PT-2026-97121
Name of the Vulnerable Software and Affected Versions SourceCodester Online Reviewer Management System version 1.0 Description Remote SQL injection is possible through the manipulation of the difficulty id variable within an unknown function of the '/reviewer 0/admins/assessments/databank/btn...
PT-2026-97513
Name of the Vulnerable Software and Affected Versions Easy Store versions 1.0.0 through 3.0.0 Description Two distinct issues exist in the extension. First, the endpoint 'administrator/index.php?option=com easystore&task=media.deleteImage' fails to properly sanitize the ids parameter, which is...
PT-2026-97125
Name of the Vulnerable Software and Affected Versions SourceCodester Online Reviewer Management System version 1.0 Description A remote SQL injection is possible due to improper handling of the test id argument within an unknown function in the '/reviewer 0/admins/assessments/pretest/btn...
PT-2026-97120
Name of the Vulnerable Software and Affected Versions SourceCodester Online Reviewer Management System version 1.0 Description An issue exists where the manipulation of the difficulty id variable in the '/reviewer 0/admins/assessments/databank/btn functions.php?action=add' endpoint allows for SQL...
PT-2026-97452
Contributor SQL Injection in Mollie Forms = 2.11.0 versions...
PT-2026-97624
Name of the Vulnerable Software and Affected Versions pmTicket Project-Management-Software versions up to 078fa56a782490c5059a0814f84df27984f4d7e2 Description A remote SQL injection is possible due to improper handling of the conn settings argument within the setSync function of the '/ajax/add...
CVE-2026-94124: Improper Neutralization of Special Elements used in an SQL Command
Contributor SQL Injection in WP EasyCart = 5.9.4 versions...
PT-2026-97554
Name of the Vulnerable Software and Affected Versions W4 Post List versions prior to 3.0.6 Description An improper neutralization of special elements used in an SQL command allows for Blind SQL Injection. Blind SQL Injection is a technique where an attacker asks the database true or false questio...
PT-2026-97349
Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description A SQL injection flaw exists that could allow a remote authenticated attacker to obtain sensitive information. SQL injection is a technique...
PT-2026-97476
Name of the Vulnerable Software and Affected Versions Easy Digital Downloads versions prior to 3.7.1 Description An SQL Injection issue exists in the Shop manager component. This allows an attacker to interfere with the queries that an application makes to its database, potentially allowing them ...
CVE-2025-63564
SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requests...
CVE-2026-95927: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function of the file /reviewer0/admins/assessments/pretest/exam-delete.php. Such manipulation of the argument testid leads to sql injection. The attack may be performed from remote. The...
CVE-2026-95829: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in TDuckCloud tduck-platform up to 5.3. This vulnerability affects the function PaginationInnerInterceptor.concatOrderBy of the file tduck-api/src/main/java/com/tduck/cloud/api/config/MybatisPlusConfig.java of the component Pagination Inner Interceptor. The...
CVE-2025-63564
The Moodle Socialwall plugin versions v.3.0 through v.3.3 are affected by a SQL injection vulnerability. An attacker can exploit this flaw by sending crafted HTTP requests , which may lead to the execution of arbitrary code . The vulnerability is classified with a CRITICAL base severity score of ...
CVE-2025-63564
SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requests...
PT-2026-97146
Name of the Vulnerable Software and Affected Versions iFlytek astron-agent versions prior to reward-1575 Description A SQL injection flaw exists in the getBotList API endpoint within the console/backend/commons/src/main/resources/mapper/ChatBotMarketMapper.xml file. A remote attacker can exploit...