7485 matches found
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106188)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106188 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server:...
CVE-2026-63694
Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...
CVE-2026-63694
Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...
EUVD-2026-70497
Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...
CVE-2026-35160
Dell SmartFabric OS10 Software , versions prior to 10.5.6.14 , contains an OS Command Injection vulnerability (CWE-78). A high-privileged attacker with remote access could potentially exploit this flaw to achieve arbitrary command execution on the device. The CVSS 3.1 score is 5.0 (MEDIUM) with h...
CVE-2023-3360
The Weaver Show Posts WordPress plugin before 1.8.1 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import a malicious file and a suitable gadget chain is present on the blog...
CVE-2026-80488
The WP Ultimate CSV Importer WordPress plugin before 9.0 does not properly sanitise and escape imported field values before using them in a SQL statement, which could allow high privilege users such as admin to perform SQL injection attacks...
EUVD-2026-68061
The WP Ultimate CSV Importer WordPress plugin before 9.0 does not properly sanitise and escape imported field values before using them in a SQL statement, which could allow high privilege users such as admin to perform SQL injection attacks...
CVE-2026-71171
Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote...
CVE-2026-71171
Dell Cloud Disaster Recovery versions 20.2 and prior contain an OS Command Injection vulnerability in its REST API . A high-privileged attacker with remote access could exploit it to achieve remote code execution , with full impact on confidentiality, integrity, and availability. The CVSS 3.1 sco...
EUVD-2026-66656
Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-061554)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061554 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Difficul...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-061487)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061487 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior...
CVE-2026-77790: Improper Neutralization of Special Elements used in an SQL Command
The RegistrationMagic WordPress plugin before 6.0.9.4 does not sanitise and escape a parameter before using it in a SQL statement, which could allow high privilege users such as admin to perform SQL injection attacks...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-061552)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061552 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Parser. Supported versions that are affected are 5.7.36 and prior and 8.0.27 and prior...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-061553)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061553 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Replication. Supported versions that are affected are 5.7.36 and prior and 8.0.27 and...
PT-2026-81970
Name of the Vulnerable Software and Affected Versions RegistrationMagic versions prior to 6.0.9.4 Description Insufficient sanitization and escaping of a parameter used in a SQL statement allows high privilege users, such as administrators, to perform SQL injection attacks. This occurs via the rm...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093660)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093660 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Replication. Supported versions that are affected are 5.7.33 and prior and 8.0.23 and...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-061540)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061540 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Privileges. Supported versions that are affected are 5.7.35 and prior and 8.0....
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-061537)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061537 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Compiling. Supported versions that are affected are 5.7.36 and prior and 8.0.27 and prio...