The vulnerability of Azure SQL Database’s cloud relational database model, related to insufficient validation of queries on the server side, allows attackers to escalate their privileges.

The vulnerability of the Azure SQL Database cloud relational database is related to insufficient validation of queries on the server side. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

The vulnerability of the Azure SQL Database, a cloud relational database, stems from the lack of protection for SQL query structures, allowing attackers to exploit their privileges.

The vulnerability of the Azure SQL Database cloud relational database model is related to the lack of security measures for SQL query structures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

The vulnerability of the Azure SQL Database, a cloud relational database, stems from the lack of protection for SQL query structures, allowing attackers to exploit their privileges.

The vulnerability of the Azure SQL Database cloud relational database model is related to the lack of security measures for SQL query structures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

The vulnerability of the Azure SQL Database, a cloud relational database, is related to deficiencies in access control. This allows attackers to escalate their privileges.

The vulnerability of the Azure SQL Database cloud relational database model is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...

The vulnerability of the application’s database management component for processing and analyzing data with Splunk MCP Server allows a perpetrator to execute arbitrary commands.

The vulnerability of the application’s database management component for data processing and analysis in Splunk MCP Server is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

AlmaLinux 9.2 [TuxCare] Security Update: bind / bind-chroot / bind-devel / bind-dnssec-doc / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1739386415)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1739386415 advisory. - A flaw in query-handling code can cause named to exit prematurely with an assertion failure when: - nxdomain-redirect ; is...

Rocky Linux 9.6 [TuxCare] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc (ALMALINUX9.6:CLSA-2026:1774258892)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1774258892 advisory. - Improper validation of type oidvector in PostgreSQL allows a database user to disclose a few bytes of server memory. We have not ruled ou...

CVE-2026-51936: Improper Neutralization of Special Elements used in an SQL Command

Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipherexport convenience function can be used to copy the contents of one attached database into another. It is most often used to convert between plaintext and encrypted databases. It needs to do dynamic schema manipulation, and thus t...

CVE-2026-96346: Improper Neutralization of Special Elements used in an SQL Command

Author SQL Injection in WP ERP = 1.17.9 versions...

CVE-2026-94115: Improper Neutralization of Special Elements used in an SQL Command

Contributor SQL Injection in Easy Pricing Tables = 4.1.2 versions...

CVE-2026-102098: Improper Neutralization of Special Elements used in an SQL Command

Kiteworks Core before version 9.5.0 is vulnerable to SQL Injection. A stored SQL injection vulnerability in a Kiteworks administrative reporting feature could allow an authenticated administrator to read sensitive data from the underlying database and to affect the availability of the service...

CentOS Linux 8 [TuxCare] Security Update: bind / bind-chroot / bind-devel / bind-export-devel / etc (CENTOS-STREAM8:CLSA-2026:1787670751)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1787670751 advisory. - To keep its cache database efficient, named running as a recursive resolver occasionally attempts to clean up the database. It uses...

PT-2026-103086

Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, leading to a SQL Structured Query Language injection. This...

CVE-2026-102456: Improper Neutralization of Special Elements used in an SQL Command

EasyFlow .NET developed by Digiwin has an SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL commands to read database contents...

CVE-2026-71379

The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request...

Security Bulletin: EDB Postgres AI Database with IBM is affected by Multiple Vulnerabilities.

Summary Multiple Vulnerabilities found in EDB PGAI database products. Hence, IBM strongly recommends upgrading to 18.6 Vulnerability Details CVEID:CVE-2026-30922 DESCRIPTION: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the pyasn1 library is vulnerable to a Denial of Service DoS...

CVE-2026-71379

The Toptech TMS7 and TopHAT systems are affected by a vulnerability in the file export endpoint . An unauthenticated attacker can exploit this by sending a crafted POST request to export arbitrary database tables . This flaw allows for unauthorized access to sensitive data. While specific exploit...

CVE-2026-71379 Toptech TMS7 and TopHAT Files or Directories Accessible to External Parties

The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request...

CVE-2026-71379 Toptech TMS7 and TopHAT Files or Directories Accessible to External Parties

The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request...

CVE-2026-79536

bytebase dbhub v1.2.0 was discovered to contain a SQL injection vulnerability in the /utils/sql-parser.ts component. This vulnerability allows attackers to access sensitive databse information via a crafted SQL statement...