219591 matches found
CVE-2026-28156
Subscriber SQL Injection in Do Lasso = 358 versions...
EUVD-2026-57945
Unauthenticated SQL Injection in Web Directory Free = 1.7.13 versions...
CVE-2026-28142
The CVE describes an Unauthenticated SQL Injection in the WordPress plugin Web Directory Free for versions up to 1.7.13 . Root cause details are not explicitly provided in the documents beyond the vulnerability type, but the CVSS v3.1 base score is 9.3 (CRITICAL) with high impact on confidentiali...
CVE-2026-28142
Unauthenticated SQL Injection in Web Directory Free = 1.7.13 versions...
CVE-2026-28142 WordPress Web Directory Free plugin <= 1.7.13 - SQL Injection vulnerability
Unauthenticated SQL Injection in Web Directory Free = 1.7.13 versions...
CVE-2026-28001
Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...
CVE-2026-28001
The CVE-2026-28001 entry concerns the WP Directory Kit WordPress plugin, affected versions
EUVD-2026-57941
Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...
CVE-2026-28001 WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerability
Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...
EUVD-2026-57936
Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...
CVE-2026-27538 WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerability
Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...
CVE-2026-27538
CVE-2026-27538 affects the WordPress WP Directory Kit plugin up to version 1.5.4, with an unauthenticated SQL injection vulnerability. The underlying root cause, affected files/components, and exact exploitation flow are not detailed in the provided documents. CVSS 3.1 base score is 7.5 (HIGH) wi...
CVE-2026-15742
Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating system user running the database, via extreme inputs to SQL function levenshtein or levenshteinlessequal. Versions before PostgreSQL 18.5, 17.11,...
CVE-2026-15741
SQL injection in PostgreSQL EXTRACT deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect expression deparse consumers broadly, including pgdump, psql commands like \sf, and any similar usage in non-core tools. Versions before...
CVE-2026-15741 PostgreSQL expression deparse allows SQL injection via EXTRACT argument
SQL injection in PostgreSQL EXTRACT deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect expression deparse consumers broadly, including pgdump, psql commands like \sf, and any similar usage in non-core tools. Versions before...
CVE-2026-15741
SQL injection in PostgreSQL EXTRACT deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect expression deparse consumers broadly, including pgdump, psql commands like \sf, and any similar usage in non-core tools. Versions before...
EUVD-2026-57846
SQL injection in PostgreSQL EXTRACT deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect expression deparse consumers broadly, including pgdump, psql commands like \sf, and any similar usage in non-core tools. Versions before...
EUVD-2026-57847
Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating system user running the database, via extreme inputs to SQL function levenshtein or levenshteinlessequal. Versions before PostgreSQL 18.5, 17.11,...
CVE-2026-15741
CVE-2026-15741 describes an SQL injection vulnerability in PostgreSQL via the EXTRACT() deparse path, where an object owner can execute arbitrary SQL as a superuser through a hostile object definition. Affected are expressions deparse consumers, including non-core tools like pg_dump and psql comm...