839 matches found
CVE-2026-89310
A SQL Command Injection vulnerability exists in JTL-WMS (CVE-2026-89310). The flaw occurs because a parameter from the request body is inserted into a T-SQL statement without proper escaping or parameterization. This allows a remote attacker to execute arbitrary SQL commands within the context of...
CVE-2026-89310 SQL Command Injection Vulnerability in JTL-WMS
A parameter taken from the request body is inserted into a T-SQL statement without parameterization or escaping, allowing a remote attacker to execute arbitrary SQL statements in the context of the application's database account...
CVE-2026-89196
A vulnerability exists in RUGGEDCOM CROSSBOW (all versions
EUVD-2026-95328
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...
CVE-2026-84209
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...
CVE-2026-84209 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...
CVE-2026-84209
IBM Guardium Data Protection versions 12.2.2 and 12.1 are vulnerable to a SQL injection flaw. The root cause is the improper neutralization of special elements used in an SQL command, resulting from a failure to properly sanitize input. This allows a remote attacker to execute arbitrary SQL comma...
CVE-2026-103248: Improper Neutralization of Special Elements used in an SQL Command
n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a filter injection vulnerability in the Supabase node's Filters String mode that fails to escape field values. Attackers can inject filter expressions from untrusted input to read all table rows, update...
CVE-2026-96345: Improper Neutralization of Special Elements used in an SQL Command
Administrator SQL Injection in Estatik = 4.3.5 versions...
CVE-2026-86595
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Iron Mountain Archiving Services Inc. EnVision allows SQL Injection. This issue affects enVision: before 260655...
CVE-2026-94131: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension 11.1.0 - A subscriber could store a path in a file-type custom field and have AcyMailing delete that file when the field was cleared, including files outside the upload folder such as...
CVE-2026-93773: Improper Neutralization of Special Elements used in an SQL Command
Contributor SQL Injection in Mollie Forms = 2.11.0 versions...
CVE-2026-84082 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...
PT-2026-95677
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...
CVE-2026-84082: Improper Neutralization of Special Elements used in an SQL Command
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...
CVE-2026-66628: Improper Neutralization of Special Elements used in an SQL Command
Shop manager SQL Injection in WP-Lister Lite for eBay = 3.8.11 versions...
CVE-2026-66625: Improper Neutralization of Special Elements used in an SQL Command
Administrator SQL Injection in WC Vendors Marketplace = 2.7.2.1 versions...
CVE-2026-66618: Improper Neutralization of Special Elements used in an SQL Command
Administrator SQL Injection in WP Maps = 4.9.9 versions...