2015 matches found
Wordpress Email Subscribers by Icegram Express - SQL Injection
The Email Subscribers by Icegram Express - Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'run' function of the 'IGESSubscribersQuery' class in all versions up to, and including, 5.7.14 due to insufficient escaping ...
Push Notification for Post and BuddyPress <= 1.93 - SQL Injection
Push Notification for Post and BuddyPress plugin for WordPress is vulnerable to SQL Injection via the 'onesignalexternalid' and 'onesignalgetsubscriptionoptionsid' paramters in all versions up to, and including, 1.93 due to insufficient escaping on the user supplied parameter and lack of sufficie...
CVE-2021-35576
CVE-2021-35576 CVE-2021-35576 绕过Oracle统一审计的安全漏洞，概念验证详情发布在此：https://databasesecurityninja.wordpress.com/2022/06/11/cve-2021-35576-bypassing-unified-audit-policy/ CVE详情：https://vulners.com/cve/CVE-2021-35576...
Astra Linux – Vulnerability in pgpool2
In Pgpool-II, there is a risk of exposing sensitive information due to incompatible policy issues. If a database user accesses the query cache, unauthorized table data may be retrieved for that user...
CVE-2026-71042
creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:20+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-29 10:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu7onbflmq2u...
CVE-2026-70928
creationtimestamp| type| source ---|---|--- 2026-08-19 17:51:58+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-27 09:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu2ioj3vbb2u...
CVE-2026-70957
creationtimestamp| type| source ---|---|--- 2026-08-19 17:49:55+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-29 11:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu7rykeyo52y...
CVE-2026-70879
creationtimestamp| type| source ---|---|--- 2026-08-19 17:46:55+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-73915
creationtimestamp| type| source ---|---|--- 2026-08-19 17:17:50+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-70804
creationtimestamp| type| source ---|---|--- 2026-08-19 16:51:18+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-61340
creationtimestamp| type| source ---|---|--- 2026-08-19 16:49:32+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-70868
creationtimestamp| type| source ---|---|--- 2026-08-19 16:48:15+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
Linux Distros Unpatched Vulnerability : CVE-2026-18690
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that...
CVE-2026-18707
creationtimestamp| type| source ---|---|--- 2026-08-13 04:45:50+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260813...
EUVD-2026-57621
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation with a specially crafted query...
CVE-2026-63522 Azure SQL Database Elevation of Privilege Vulnerability
...
PT-2026-70847
An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that their assigned privileges should not permit. This could result in critical system collections being dropped and recreated without proper...
Important: Red Hat Security Advisory: postgresql security update
An update for postgresql is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...
CVE-2026-69240
A flaw was found in Sequelize. When configured to use an Oracle database, the Sequelize Node.js Object-Relational Mapper ORM tool fails to properly escape certain date and timestamp values. This oversight allows a remote attacker to bypass security filters. By injecting malicious SQL commands, an...
