EUVD-2026-35854

SQLFluff is a modular SQL linter and auto-formatter with support for multiple dialects and templated code. Prior to version 4.1.0, in deployments where untrusted users can provide SQL queries to be linted, an untrusted user can submit a malicious query with deliberate excessive nesting to any...

WordPress 0 Day Analytics plugin <= 4.0.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by kwakbumjun in WordPress Plugin 0 Day Analytics versions = 4.0.0...

UBUNTU-CVE-2024-29040

This repository hosts source code implementing the Trusted Computing Group's TCG TPM2 Software Stack TSS. The JSON Quote Info returned by FapiQuote has to be deserialized by FapiVerifyQuote to the TPM Structure TPMSATTEST. For the field TPM2GENERATED magic of this structure any number can be used...

CVE-2022-41943 Incorrect default permissions found in Sourcegraph

sourcegraph is a code intelligence platform. As a site admin it was possible to execute arbitrary commands on Gitserver when the experimental customGitFetch feature was enabled. This experimental feature has now been disabled by default. This issue has been patched in version 4.1.0...

CVE-2022-41943

The CVE-2022-41943 entry concerns Sourcegraph, a code intelligence platform. A site administrator could have executed arbitrary commands on Gitserver via the experimental customGitFetch feature, which is now disabled by default. The issue is patched in Sourcegraph version 4.1.0. In affected envir...