95279 matches found
Azure SQL Database Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...
Azure SQL Database Elevation of Privilege Vulnerability
Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network...
Azure SQL Database Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...
Azure SQL Database Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...
ROOT-OS-DEBIAN-11-CVE-2019-8457 CVE-2019-8457 in db5.3 - Patched by Root
Root has patched CVE-2019-8457 in the db5.3 package for Root:Debian:11. Multiple fixed versions available...
CVE-2026-66680 WordPress Locatoraid Store Locator plugin <= 3.9.72 - SQL Injection vulnerability
Unauthenticated SQL Injection in Locatoraid Store Locator = 3.9.72 versions...
CVE-2026-66649
The WordPress Directory Pro plugin (versions ≤ 2.5.8) has an unauthenticated SQL injection vulnerability exploitable over the network with low complexity, scoring 9.3 critical. Patchstack advises upgrading to a patched version; no in-the-wild exploitation details are provided in the documents.
CVE-2026-77070 n8n before 1.123.69 NoSQL Injection via MongoDB Node
n8n before 1.123.69, 2.33.4, and 2.34.1 contains a NoSQL injection vulnerability in the MongoDB node's Find, Delete, and Aggregate operations, which parse the Query parameter as JSON after expression resolution without sanitizing MongoDB operators. An attacker who can influence the resolved query...
GO-2026-6223 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, kubeflow-pipelines-driver-fips, kubeflow-pipelines-fips...
EUVD-2026-63191
A weakness has been identified in code-projects Login Registration System 1.0. This affects an unknown function of the file /loginsystem/database/loginregistrationsystem.sql of the component SQL Database Backup Handler. This manipulation causes files or directories accessible. The attack may be...
CVE-2026-76799 code-projects Login Registration System SQL Database Backup login_registration_system.sql file access
A weakness has been identified in code-projects Login Registration System 1.0. This affects an unknown function of the file /loginsystem/database/loginregistrationsystem.sql of the component SQL Database Backup Handler. This manipulation causes files or directories accessible. The attack may be...
EUVD-2026-62930
In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Structured Query Language SQL statements against the Splunk SOAR database through custom list retrieval in a playbook, allowing for create, read, update, and delete operations on a...
EUVD-2026-62928
In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" role could run arbitrary Structured Query Language SQL statements against the Splunk SOAR database and create, read, update, or delete all data in the database. The vulnerability is possible because Splunk SOAR playbo...
EUVD-2026-62929
In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Structured Query Language SQL statements against the Splunk SOAR database through custom function results, allowing for reading all relevant data stored in the Splunk SOAR database...
JetBrains YouTrack < 2025.3.156085 / 2026.1.x < 2026.1.13913 / 2026.2.x < 2026.2.18112 Authentication Bypass (CVE-2026-75045)
The version of JetBrains YouTrack installed on the remote host is prior to 2025.3.156085, 2026.1.x prior to 2026.1.13913, or 2026.2.x prior to 2026.2.18112. It is, therefore, affected by an authentication bypass vulnerability: - An unauthenticated attacker could download database backups via shar...
PostgreSQL Code Execution
The vulnerability of the PostgreSQL database management system is related to errors in data type mixing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
PT-2026-79396
Name of the Vulnerable Software and Affected Versions Azure SQL Database affected versions not specified Description Server-side request forgery SSRF allows an unauthorized attacker to elevate privileges over a network. SSRF is a flaw where an attacker can induce the server-side application to ma...
CVE-2026-18274: Improper Limitation of a Pathname to a Restricted Directory
Heimdall Data Database Proxy uploadJar Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Heimdall Data Database Proxy. Authentication is required to exploit this vulnerability. The specific fl...
PT-2026-79206
Name of the Vulnerable Software and Affected Versions Azure SQL Database affected versions not specified Description An issue involving improper neutralization of special elements used in an SQL command, known as SQL injection, allows an authorized attacker to elevate privileges over a network...