94339 matches found
PT-2026-79320
Name of the Vulnerable Software and Affected Versions Apache CloudStack versions 4.0.0 through 4.20.3.0 Apache CloudStack versions 4.21.0.0 through 4.22.1.0 Description Sensitive information is stored in cleartext within the database when using AsyncJob storage. Recommendations Upgrade Apache...
CVE-2026-69502: Server-Side Request Forgery (SSRF)
Server-side request forgery ssrf in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...
Cisco Unified Intelligence Center < 12.6 / 12.6.x < 12.6(2) ES08 / 15.0.x < 15.0(1) SU2 SQL Injection (cisco-sa-cuic-sql-inject-2qbfWSm5)
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker coul...
CVE-2026-72860
creationtimestamp| type| source ---|---|--- 2026-08-20 23:01:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtke26um3722...
CVE-2026-68789
Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...
CVE-2026-68782
Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...
CVE-2026-66309
Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network...
CVE-2026-68782 Azure SQL Database Elevation of Privilege Vulnerability
...
CVE-2026-68782 Azure SQL Database Elevation of Privilege Vulnerability
...
CVE-2026-68782
An SQL injection flaw in Azure SQL Database allows an authenticated, low-privilege network attacker to elevate privileges, with CVSS 9.9 (Critical) reflecting full confidentiality, integrity, and availability impact. Microsoft's update guide is the primary remediation reference; no patch version ...
CVE-2026-66309 Azure SQL Database Elevation of Privilege Vulnerability
...
CVE-2026-66309
CVE-2026-66309 is a Critical (CVSS 9.1) elevation-of-privilege flaw in Azure SQL Database; an authenticated, high-privilege attacker can escalate privileges over the network, affecting confidentiality, integrity, and availability. No affected versions, root cause, or patch details are provided in...
CVE-2026-66309 Azure SQL Database Elevation of Privilege Vulnerability
...
CVE-2026-65770 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
...
CVE-2026-68789
CVE-2026-68789 is a SQL injection vulnerability in Azure SQL Database that allows an authorized attacker to elevate privileges over a network. The vulnerability is rated CVSS 9.9 (CRITICAL) with a scope change, indicating high impact on confidentiality, integrity, and availability. CISA's SSVC as...
CVE-2026-68789 Azure SQL Database Elevation of Privilege Vulnerability
...
CVE-2026-68789 Azure SQL Database Elevation of Privilege Vulnerability
...
Fleet: SQL injection in Okta conditional access endpoint allows host-controlled compromise of the Fleet database
Summary A SQL injection vulnerability in Fleet's Okta conditional access integration could allow an attacker who controls a single enrolled host to read or modify arbitrary data in the Fleet database, including stored session tokens. Disclosed session tokens may be replayed to act as a global...
GHSA-7Q96-F8XW-JV5J Fleet: SQL injection in Okta conditional access endpoint allows host-controlled compromise of the Fleet database
Summary A SQL injection vulnerability in Fleet's Okta conditional access integration could allow an attacker who controls a single enrolled host to read or modify arbitrary data in the Fleet database, including stored session tokens. Disclosed session tokens may be replayed to act as a global...
