7479 matches found
CVE-2026-81674 Multiple Vulnerabilities in TOOOLS' iSquad
The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the idambito parameter. Unsanitized input is directly incorporated into a MariaDB query, allowing attackers to inject SQL syntax that interrupts the query's execution. The vulnerability results in detailed database...
CVE-2026-81674 Multiple Vulnerabilities in TOOOLS' iSquad
The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the idambito parameter. Unsanitized input is directly incorporated into a MariaDB query, allowing attackers to inject SQL syntax that interrupts the query's execution. The vulnerability results in detailed database...
CVE-2026-81674
CVE-2026-81674 affects TOOOLS' iSquad , a web application with a SQL injection vulnerability in the endpoint /ws/apiprensa/getVideoNextPrev via the id_ambito parameter. Unsanitized input is directly incorporated into a MariaDB query, allowing an attacker to inject arbitrary SQL syntax. The flaw p...
PT-2026-82498
A vulnerability in the endpoint ‘/ws/apitribuna/ultimosVideos’ where the limit videos parameter is directly concatenated into a MariaDB SQL query without proper sanitization or parameterization. By injecting SQL syntax into this parameter, a remote attacker can cause SQL syntax errors and...
CVE-2026-81676: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability in the endpoint ‘/ws/apitribuna/ultimosVideos’ where the limitvideos parameter is directly concatenated into a MariaDB SQL query without proper sanitization or parameterization. By injecting SQL syntax into this parameter, a remote attacker can cause SQL syntax errors and...
CVE-2026-81677: Improper Neutralization of Special Elements used in an SQL Command
The ‘/ws/apiprensa/getVideo’ endpoint is vulnerable to SQL injection due to improper validation of the GET parameter idambito. An attacker can inject SQL syntax that breaks the underlying structure of the MariaDB query, resulting in syntax errors and the exposure of database error messages via...
PT-2026-82499
The ‘/ws/apiprensa/getVideo’ endpoint is vulnerable to SQL injection due to improper validation of the GET parameter id ambito. An attacker can inject SQL syntax that breaks the underlying structure of the MariaDB query, resulting in syntax errors and the exposure of database error messages via...
PT-2026-82496
The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the id ambito parameter. Unsanitized input is directly incorporated into a MariaDB query, allowing attackers to inject SQL syntax that interrupts the query's execution. The vulnerability results in detailed database...
CVE-2026-81674: Improper Neutralization of Special Elements used in an SQL Command
The endpoint ‘/ws/apiprensa/getVideoNextPrev’ is vulnerable to SQL injection via the idambito parameter. Unsanitized input is directly incorporated into a MariaDB query, allowing attackers to inject SQL syntax that interrupts the query's execution. The vulnerability results in detailed database...
ROOT-OS-DEBIAN-12-CVE-2026-44169 CVE-2026-44169 in mariadb - Patched by Root
Root has patched CVE-2026-44169 in the mariadb package for Root:Debian:12. Multiple fixed versions available...
MariaDB -- Multiple vulnerabilities
The MariaDB project reports: Details in links...
FreeBSD : MariaDB -- Multiple vulnerabilities (f68670ea-a05d-11f1-8144-8447094a420f)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f68670ea-a05d-11f1-8144-8447094a420f advisory. The MariaDB project reports: Details in links Tenable has extracted the preceding description...
ROOT-OS-DEBIAN-13-CVE-2026-44173 CVE-2026-44173 in mariadb - Patched by Root
Root has patched CVE-2026-44173 in the mariadb package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-48163 CVE-2026-48163 in mariadb - Patched by Root
Root has patched CVE-2026-48163 in the mariadb package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-44168 CVE-2026-44168 in mariadb - Patched by Root
Root has patched CVE-2026-44168 in the mariadb package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-44171 CVE-2026-44171 in mariadb - Patched by Root
Root has patched CVE-2026-44171 in the mariadb package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-44172 CVE-2026-44172 in mariadb - Patched by Root
Root has patched CVE-2026-44172 in the mariadb package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-49261 CVE-2026-49261 in mariadb - Patched by Root
Root has patched CVE-2026-49261 in the mariadb package for Root:Debian:13. Multiple fixed versions available...