94719 matches found
CLEANSTART-2026-PS13289 Security fixes in litellm-database 1.91.3-r0
Package litellm-database version 1.91.3-r0 fixes 1 vulnerabilities: CVE-2026-50271...
CLEANSTART-2026-RF99119 Security fixes in litellm-database 1.89.5-r0
Package litellm-database version 1.89.5-r0 fixes 4 vulnerabilities: CVE-2026-59936, CVE-2026-59935, CVE-2026-59937, CVE-2026-59938...
CLEANSTART-2026-IJ98637 Security fixes in litellm-database 1.90.2-r1
Package litellm-database version 1.90.2-r1 fixes 1 vulnerabilities: CVE-2026-0994...
CVE-2026-58046
Improper neutralization in the Plesk XML-RPC API allows a remote authenticated low-privileged user to perform SQL injection and read arbitrary data from the Plesk database, leading to full compromise of the panel...
CVE-2026-13395
The Online Scheduling and Appointment Booking System WordPress plugin before 27.8 does not sanitize or properly cast a user-supplied parameter from its unauthenticated front-end booking requests before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection attacks an...
CVE-2026-13395 Bookly < 27.8 - Unauthenticated SQL Injection via staff_id
The Online Scheduling and Appointment Booking System WordPress plugin before 27.8 does not sanitize or properly cast a user-supplied parameter from its unauthenticated front-end booking requests before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection attacks an...
EUVD-2026-51013
The Online Scheduling and Appointment Booking System WordPress plugin before 27.8 does not sanitize or properly cast a user-supplied parameter from its unauthenticated front-end booking requests before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection attacks an...
WordPress WP Hotel Booking plugin < 2.3.2 - Hotel Manager+ SQL Injection vulnerability
Hotel Manager+ SQL Injection vulnerability discovered by Mokksh Parekh in WordPress Plugin WP Hotel Booking versions 2.3.2...
CVE-2026-15153
The WP Hotel Booking WordPress plugin before 2.3.2 does not sanitise and escape a search parameter on an administrative listing before using it in a SQL query, allowing users holding the WP Hotel Booking WordPress plugin before 2.3.2's booking-management roles to perform SQL injection attacks...
CVE-2026-67247
A path traversal vulnerability was found in the IHM Log handling of ADM. The vulnerability occurs because user-controlled disk serial input is not sufficiently validated before being used to construct the path of an IHM log database file. An authenticated attacker can exploit this issue to cause...
CVE-2026-67247 A path traversal vulnerability was found in the IHM Log handling of ADM
A path traversal vulnerability was found in the IHM Log handling of ADM. The vulnerability occurs because user-controlled disk serial input is not sufficiently validated before being used to construct the path of an IHM log database file. An authenticated attacker can exploit this issue to cause...
CVE-2026-67247
CVE-2026-67247 describes a path traversal vulnerability in ADM’s IHM Log handling where user-controlled disk serial input is not sufficiently validated before being used to construct the path to an IHM log database file. An authenticated attacker could access an unintended filesystem path or log ...
CVE-2026-67247 A path traversal vulnerability was found in the IHM Log handling of ADM
A path traversal vulnerability was found in the IHM Log handling of ADM. The vulnerability occurs because user-controlled disk serial input is not sufficiently validated before being used to construct the path of an IHM log database file. An authenticated attacker can exploit this issue to cause...
EUVD-2025-210538
kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in checkavailability.php via the parameters emailid and email...
EUVD-2025-210529
kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /hms/doctor/view-patient.php?viewid=1...
PT-2026-66586
Name of the Vulnerable Software and Affected Versions CodeAstro Membership Management System version 1.0 Description SQL Injection occurs in the 'edit type.php' endpoint through the id parameter. SQL Injection is a technique where malicious SQL statements are inserted into entry fields for...
PT-2026-66580
Name of the Vulnerable Software and Affected Versions CodeAstro Membership Management System version 1.0 Description SQL Injection occurs in the '/print membership card.php' endpoint via the id parameter. SQL Injection is a technique where malicious SQL statements are inserted into entry fields f...
PT-2026-66581
Name of the Vulnerable Software and Affected Versions CodeAstro Membership Management System version 1.0 Description An issue exists that allows SQL Injection via the /delete membership.php endpoint through the id variable. SQL Injection is a technique where malicious SQL statements are inserted...
PT-2026-66582
Name of the Vulnerable Software and Affected Versions CodeAstro Membership Management System version 1.0 Description An issue exists that allows SQL Injection via the '/memberProfile.php' endpoint through the id parameter. SQL Injection is a technique where malicious SQL statements are inserted...