CLEANSTART-2026-YZ00893 Security fix for CVE-2025-54121 applied in: litellm-database 1.96.0-r0, litellm-database 1.97.0-r0

CVE-2025-54121 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FX89856 Security fix for CVE-2026-59950 applied in: litellm-database 1.85.1-r1

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OY92874 Security fix for CVE-2026-55830 applied in: litellm-database 1.85.1-r1

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-YN75151 Security fix for CVE-2026-71870 applied in: litellm-database 1.85.1-r1

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-YL68876 Security fix for CVE-2026-71852 applied in: litellm-database 1.85.1-r1

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-67100

HCL BigFix Service Management is affected by SQL Injection flaw and a Cross-Tenant Data Exposure flaw vulnerabilities. which could allow an authenticated attacker to inject database commands to extract sensitive system details, as well as manipulate request values to gain unauthorized access to...

EUVD-2026-82742

The InfiniteWP Client plugin for WordPress is vulnerable to SQL Injection via the getcomments action in versions up to, and including, 1.13.9. This is due to insufficient escaping on the array-key names supplied in the JSON request body before use in a SQL statement: IWPMMBComment::getcomments...

CLEANSTART-2026-TM64317 Redis is an open source, in-memory database that persists on disk

Multiple security vulnerabilities affect the redis package. Redis is an open source, in-memory database that persists on disk. See references for individual vulnerability details...

CVE-2025-69295

CVE-2025-69295 — TeconceTheme Coven Core Blind SQL Injection Vulnerability CVE-2025-69295 is a SQL Injection vulnerability affecting the Coven Core component of the TeconceTheme Coven Core WordPress theme. The vulnerability exists due to improper neutralization of user-supplied input before it is...

EUVD-2026-82597

Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network...

CVE-2026-85878

Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network...

PT-2026-95375

Name of the Vulnerable Software and Affected Versions ArcadeDB versions prior to 26.9.1 Description An issue exists where the system fails to bind the authenticated principal to the DatabaseAsyncTransaction async worker threads during the parallel edge-connect phase of the 'POST...

PT-2026-95374

Name of the Vulnerable Software and Affected Versions ArcadeDB versions prior to 26.9.1 Description An access control bypass exists in the query database tool exposed through the AI chat endpoints. The tool executes queries without binding the authenticated principal to the DatabaseContext, which...

PT-2026-95394

Name of the Vulnerable Software and Affected Versions ClipBucket versions prior to 5.5.3-182 Description Authenticated users can extract arbitrary database contents, including user credential hashes and email addresses, through a time-based blind SQL injection. This occurs when the msg id paramet...

PT-2026-95503

CareCam CM2507 IP cameras store the device's root-account password using a fixed legacy password hash that provides insufficient resistance to offline cracking. An attacker who obtains the firmware image or password database could recover the associated credential, which may also be reusable acro...

CVE-2026-75961: Improper Neutralization of Special Elements used in an SQL Command

The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to generic SQL Injection via the 'additionalparams' parameter in all versions up to, and including, 9.3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

PT-2026-100817

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-93591: Improper Neutralization of Special Elements used in an SQL Command

SiYuan versions before 3.8.3 contain an SQL injection vulnerability in the graph.go query2Stmt function where tag values are concatenated raw into SQL string literals without escaping single quotes. A publish-mode reader or anonymous visitor can inject SQL via inline HTML span tags in the getGrap...

CVE-2026-87770: Improper Neutralization of Special Elements used in an SQL Command

The Price Drop Alert for Woo Commerce WordPress plugin through 1.1 does not sanitize and escape parameters before using them in a SQL query on an AJAX action available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract sensitive data from the...

CVE-2026-18442: Improper Neutralization of Special Elements used in an SQL Command

The WCFM Marketplace – Multivendor Marketplace for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'wcfmmpuserlocationlng' parameter in all versions up to, and including, 3.8.2 due to insufficient escaping on the user supplied parameter and lack of sufficient...