Lucene search
+L

219612 matches found

Cvelist
Cvelist
added 3 days ago33 views

CVE-2026-17222 IBM i is Affected By Multiple Vulnerabilities in SQL

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify data in certain SQL tables due to improper neutralization of special elements used in an SQL command...

4.3CVSS0.00251EPSS
SaveExploits0References1
CVE
CVE
added 3 days ago32 views

CVE-2026-17222

IBM i CVE-2026-17222 affects IBM i 7.6, 7.5, 7.4, and 7.3 (5770-SS1) where an authenticated remote attacker could modify data in certain SQL tables due to improper neutralization of special elements in an SQL command. The IBM security bulletin lists related SQL vulnerabilities and provides fixes ...

4.3CVSS5.6AI score0.00251EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 3 days ago6 views

EUVD-2026-57372

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify data in certain SQL tables due to improper neutralization of special elements used in an SQL command...

4.3CVSS5.6AI score0.00251EPSS
SaveExploits0References1
EUVD
EUVD
added 3 days ago9 views

EUVD-2026-57366

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify SQL tables due to improper neutralization of special elements used in an SQL command...

6.5CVSS5.6AI score0.00243EPSS
SaveExploits0References1
CVE
CVE
added 3 days ago24 views

CVE-2026-17419

IBM i (7.3–7.6) with 5770-SS1 is affected by CVE-2026-17419 due to improper neutralization of special elements in SQL commands, enabling a remote authenticated attacker to modify SQL tables. Affected versions include 7.3, 7.4, 7.5, and 7.6. CVSS 3.1 base score 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H...

6.5CVSS5.6AI score0.00243EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 3 days ago7 views

CVE-2026-17419

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify SQL tables due to improper neutralization of special elements used in an SQL command...

6.5CVSS5.6AI score0.00243EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 3 days ago25 views

CVE-2026-17418 IBM i is Affected By Multiple Vulnerabilities in SQL

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to cause a denial of service due to improper neutralization of special elements used in an SQL command...

8.5CVSS0.00171EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 3 days ago5 views

CVE-2026-17418

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to cause a denial of service due to improper neutralization of special elements used in an SQL command...

8.5CVSS5.5AI score0.00171EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 3 days ago35 views

CVE-2026-17418

IBM i CVE-2026-17418 affects IBM i 7.3–7.6. A local authenticated attacker could cause a denial of service due to improper neutralization of special elements used in an SQL command. Remediation: apply IBM i PTFs SJ10867 (7.6), SJ10868 (7.5), SJ10869 (7.4), or SJ10870 (7.3). See IBM Security Bulle...

8.5CVSS5.5AI score0.00171EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 3 days ago9 views

EUVD-2026-57365

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to cause a denial of service due to improper neutralization of special elements used in an SQL command...

8.5CVSS5.5AI score0.00171EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 3 days ago6 views

CVE-2026-44741

Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. Versions prior to 2.3.6 and 1.7.18 have a SQL injection vulnerability in Pimcore's translation grid date filter — the user-supplied property field from the filter JSON is interpolated directly into a UNIXTIMESTAMPDATEFROMUNIXTIME...

8.8CVSS5.6AI score0.0035EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
added 3 days ago6 views

EUVD-2026-57357

Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. Versions prior to 2.3.6 and 1.7.18 have a SQL injection vulnerability in Pimcore's translation grid date filter — the user-supplied property field from the filter JSON is interpolated directly into a UNIXTIMESTAMPDATEFROMUNIXTIME...

8.8CVSS5.6AI score0.0035EPSS
SaveExploits0References4
CVE
CVE
added 3 days ago86 views

CVE-2026-44741

Summary of CVE-2026-44741 / GHSA-h4ph-crvj-9h92: The Pimcore Admin Classic Bundle contains a SQL injection in the translation grid date filter where the user-supplied property field is interpolated into a SQL expression (UNIX_TIMESTAMP(DATE(FROM_UNIXTIME(...)))) without parameterization. Affected...

8.8CVSS5.6AI score0.0035EPSS
SaveExploits0References4
Cvelist
Cvelist
added 3 days ago20 views

CVE-2026-44741 Pimcore Admin Classic Bundle Vulnerable to SQL Injection in Translation Grid Date Filter via Unsanitized Property Parameter

Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. Versions prior to 2.3.6 and 1.7.18 have a SQL injection vulnerability in Pimcore's translation grid date filter — the user-supplied property field from the filter JSON is interpolated directly into a UNIXTIMESTAMPDATEFROMUNIXTIME...

8.8CVSS0.0035EPSS
SaveExploits0References4
Snyk
Snyk
added 3 days ago5 views

SQL Injection

Overview thorsten/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to SQL Injection via the searchUsers process. An attacker can retrieve sensitive user information, such as user IDs and display names, by submitting...

5.4CVSS6AI score
SaveExploits0References2
Snyk
Snyk
added 3 days ago4 views

SQL Injection

Overview phpmyfaq/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to SQL Injection via the searchUsers process. An attacker can retrieve sensitive user information, such as user IDs and display names, by submitting...

5.4CVSS6AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
added 3 days ago10 views

phpMyFAQ: SQL LIKE Wildcard Injection in Chat User Search Allows Authenticated User Enumeration

Summary An authenticated SQL LIKE wildcard injection vulnerability in phpMyFAQ’s chat user search allows any logged-in user to bypass the intended display-name search filter and enumerate active users. The endpoint escapes SQL string syntax but does not escape % and , which remain active LIKE...

5.7AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 3 days ago12 views

Winter: SQL Injection in Backend Filter Widget numberrange Scope via numbersFromAjax

Impact The Backend Filter widget Backend\Widgets\Filter is vulnerable to SQL injection through the numberrange scope type when the scope is configured with a conditions key. An authenticated backend user with access to a list view containing a vulnerable filter scope can inject arbitrary SQL via...

5.8AI score
SaveExploits0References3Affected Software1
Snyk
Snyk
added 3 days ago3 views

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection in the numberrange scope of the backend filter widget when the conditions key is configured. An attacker can access sensitive database information by injecting arbitrary SQL through the filter's AJAX handler. This is only...

6CVSS6.2AI score
SaveExploits0References2
GithubExploit
GithubExploit
added 3 days ago30 views

Exploit for CVE-2026-72898

🔴 CVE-2026-72898 - Unauthenticated SQL Injection Met...

10CVSS6.4AI score0.104EPSS
SaveExploits4
Rows per page
Query Builder