@agentholdings/agent-passport (>=0.1.0 <=0.1.5), @chrysb/alphaclaw (>=0.8.3 <=0.9.5) +16 more potentially affected by CVE-2026-41407 via openclaw (>=2026.3.22 <=2026.4.12)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.0, =0.1.1, =2.0.1, =0.0.7, =0.0.11 and more Source cves: CVE-2026-41407 Source advisory: SNYK:JS-OPENCLAW-15929055...

CVE-2025-41407

creationtimestamp| type| source ---|---|--- 2025-05-23 16:15:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lptzob7qkk2e...

CVE-2025-41407

Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection in the OU History report...

CVE-2025-41407 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection in the OU History report...

CVE-2025-41407

Zohocorp ManageEngine ADAudit Plus, prior to version 8511, has a SQL injection vulnerability in the OU History report. Root cause: improper handling of input in the OU History reporting path leading to SQL injection. Impact: potential unauthorized access or data disclosure from affected installat...

CVE-2022-41407

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/vieworder...

PT-2024-41407 · Dit +1 · Webkitgtk-4.0-Lang +63

Уязвимость OpenSUSE...

CVE-2022-41407

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/vieworder...

CVE-2022-41407

CVE-2022-41407 affects Online Pet Shop We App v1.0, with a SQL injection vulnerability exploitable via the id parameter in /admin/?page=orders/view_order. CVSS 3.1 base score 7.2 (HIGH) with NETWORK attack vector, LOW complexity, HIGH privileges required, no user interaction, and impact to confid...