GO-2023-2334 vulnerabilities

Vulnerabilities for packages: bank-vaults-fips, spire-server-fips, dex, tkn, tekton-chains, rekor, vexctl, timestamp-authority-fips, kubescape, oauth2-proxy, flux-kustomize-controller, gitsign, aactl, falcoctl-fips, kots, flux-source-controller, spire-server, fulcio-fips, slsa-verifier,...

GO-2022-0452 vulnerabilities

Vulnerabilities for packages: ctop, podman...

GO-2025-4240 vulnerabilities

Vulnerabilities for packages: kapp, kubernetes-csi-driver-nfs, rancher-agent, yunikorn-k8shim, rancher-system-agent, argo-cd, calico, nodetaint, node-feature-discovery, aws-efs-csi-driver, blob-csi, emissary, local-static-provisioner, docker-machine-driver-harvester, kubernetes,...

GO-2026-4868 vulnerabilities

Vulnerabilities for packages: wireguard-go, redpanda, nri-consul, influx, git-credential-oauth, nri-mssql, go, rancher-agent, pvc-autoresizer, xcover, delve, tkn, knative-eventing, apisix-ingress-controller, external-secrets-operator, karpenter, opentelemetry-operator, http-echo,...

GO-2024-2609 vulnerabilities

Vulnerabilities for packages: gitness, capslock, kyverno-policy-reporter-kyverno-plugin, smarter-device-manager, sonobuoy, nri-memcached, k8sgpt-operator, nri-nginx, metallb, oras, esbuild, kubernetes-csi-livenessprobe, gosu, terraform-docs, argo-workflows, lazygit, helm-push,...

CVE-2026-16810

The Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder plugin for WordPress is vulnerable to generic SQL Injection via the 'dataqueryCondition' parameter in all versions up to, and including, 3.2.0 due to insufficient escaping on the user supplied parameter...

CVE-2026-15205

The Paymob for WooCommerce WordPress plugin before 4.1.9 does not properly sanitise a client-supplied identifier before using it in a SQL query within its public, unauthenticated payment callback, and performs this query before verifying the payment provider's HMAC signature. This allows...

CVE-2026-15205 Paymob for WooCommerce < 4.1.9 - Unauthenticated SQL Injection via Paymob Callback Pixel Lookup

The Paymob for WooCommerce WordPress plugin before 4.1.9 does not properly sanitise a client-supplied identifier before using it in a SQL query within its public, unauthenticated payment callback, and performs this query before verifying the payment provider's HMAC signature. This allows...

EUVD-2026-58590

The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 3.8.8 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2026-12743

The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 3.8.8 due to insufficient escaping on the user supplied parameter and lack of sufficient...

PT-2026-71966

The Paymob for WooCommerce WordPress plugin before 4.1.9 does not properly sanitise a client-supplied identifier before using it in a SQL query within its public, unauthenticated payment callback, and performs this query before verifying the payment provider's HMAC signature. This allows...

CVE-2026-18403: Improper Neutralization of Special Elements used in an SQL Command

LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Database CPDB workflow that copies survey participant tokens to the central participant list...

SAP NetWeaver AS ABAP Privilege Escalation (3772411)

The version of SAP NetWeaver AS ABAP detected on the remote host is affected by a privilege escalation vulnerability as referenced in SAP Security Note 3772411: - SAP ABAP Development Tools does not perform necessary authorization checks for certain functionality, allowing an attacker with low...

CVE-2026-12743: Improper Neutralization of Special Elements used in an SQL Command

The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 3.8.8 due to insufficient escaping on the user supplied parameter and lack of sufficient...

PT-2026-72070

A SQL injection vulnerability exists in Security Center that could allow an attacker to access unauthorized data from the application's database...

PT-2026-72074

Name of the Vulnerable Software and Affected Versions Emlog versions prior to 2.6.27 Description The install.php endpoint allows the action parameter to be set to reinstall without authentication. This bypasses the installation check because the security guard only executes when the $act variable...

CVE-2026-15205: Improper Neutralization of Special Elements used in an SQL Command

The Paymob for WooCommerce WordPress plugin before 4.1.9 does not properly sanitise a client-supplied identifier before using it in a SQL query within its public, unauthenticated payment callback, and performs this query before verifying the payment provider's HMAC signature. This allows...

The vulnerability of the Oracle Net Services component of the Oracle Database Server system allows a perpetrator to gain unauthorized access to confidential information or cause service failures.

The vulnerability of the Oracle Net Services component of the Oracle Database Server management system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information or cause service failures...

The vulnerability of the RDBMS component of the database management system Oracle Database Server allows a hacker to gain full control over the system.

The vulnerability of the RDBMS component of the database management system, Oracle Database Server, is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to gain full control over the system remotely...

CVE-2026-16810: Improper Neutralization of Special Elements used in an SQL Command

The Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder plugin for WordPress is vulnerable to generic SQL Injection via the 'dataqueryCondition' parameter in all versions up to, and including, 3.2.0 due to insufficient escaping on the user supplied parameter...