PT-2026-126704

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary SQL...

Vulnerabilities Resolved in Veeam Backup for Microsoft 365 8.6

Issue Details CVE-2026-106076 A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading to cross-tenant read and write of configuration data and remote code execution as the...

Cisco Emergency Responder SQL Injection

The vulnerability in the Cisco Emergency Responder management and monitoring server, as well as in the Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME call processing systems, is related to improper handling of SQL...

Tanium Provision SQL injection vulnerability

Versions prior to Tanium Provision 1.17.150, versions prior to 1.23.161, and versions prior to 1.24.199 contain an SQL injection vulnerability. This vulnerability stems from susceptibility to SQL injection attacks...

Adobe Campaign Classic SQL injection vulnerability

Adobe Campaign Classic versions 7.4.4 build 9402 and earlier contain an SQL injection vulnerability. This vulnerability stems from improper handling of special elements within SQL commands, potentially allowing unauthorized attackers with limited privileges to bypass security measures and gain...

PT-2026-127187

Name of the Vulnerable Software and Affected Versions Dolibarr versions prior to 22.0.5 Dolibarr versions prior to 23.0.2 Description A SQL injection issue exists in the Third Party company update functionality. The application concatenates the localtax1 value and localtax2 value properties into ...

PT-2026-127158

Tanium addressed a SQL injection vulnerability in Patch...

Oretnom23 Online Travel Agency System input validation error vulnerability

The Oretnom23 Online Travel Agency System has a security vulnerability. This vulnerability stems from improper handling of the parameters customerid, ticketid, empid, salaryid, and pageid in the admin/customerdetail.php file within the Admin Record Pages component, potentially leading to SQL...

PT-2026-127195

Tanium addressed a SQL injection vulnerability in Provision...

OpenPanel SQL injection vulnerability

Versions prior to OpenPanel 3.0.0 contain an SQL injection vulnerability. This vulnerability stems from profileColumnAccess in cohort.service.ts failing to escape profile filter column names, allowing members with read access to projects to perform SQL injection by submitting a cohort.preview...

Veeam Backup for Microsoft 365 SQL injection vulnerability

Veeam Backup for Microsoft 365 versions 8.0 through 8.5.0.1014 contain an SQL injection vulnerability. This vulnerability arises because authenticated organizations can inject SQL statements into the configuration database of the source server. It may result in cross-tenant read and write access ...

CVE-2026-105781: Improper Neutralization of Special Elements used in an SQL Command

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary SQL...

Oretnom23 Online Travel Agency System input validation error vulnerability

The Oretnom23 Online Travel Agency System has a security vulnerability stemming from improper handling of the Search parameter in the traceapplication.php file, which may lead to SQL injection...

Oracle E-Business Suite 12.2.15 SQL Injection

Oracle E-Business Suite versions 12.2.3 through 12.2.15 contain an unauthenticated Thin Client Framework SQL injection issue that can lead to remote code execution. The supplied Nuclei template checks the affected AppsTCFServer handshake and proxy creation response...

Oretnom23 Online Travel Agency System input validation error vulnerability

The Oretnom23 Online Travel Agency System has a security vulnerability stemming from improper handling of the customername/voucherno/empname parameters in the admin/customersearch.php file, which may lead to SQL injection...

PT-2026-126708

A security flaw has been discovered in oretnom23 php-travel-agency-system 4e28b8f84d72420373dd15c3ae32900beb7e0635. Impacted is an unknown function of the file traceapplication.php. The manipulation of the argument Search results in sql injection. It is possible to launch the attack remotely. The...

CVE-2026-87085: Improper Neutralization of Special Elements used in an SQL Command

Tanium addressed a SQL injection vulnerability in Provision...

PT-2026-126407

NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerability might lead to data tampering, denial of service and information disclosure...

OpenPanel SQL injection vulnerability

Versions prior to OpenPanel 3.0.0 contain an SQL injection vulnerability. This vulnerability stems from improper handling of the property parameter in profile.values, potentially allowing authenticated users to inject SELECT statements and disable range-based reads of cross-tenant data via...

YesWiki SQL injection vulnerability

Versions of YesWiki prior to 4.7.0 contain an SQL injection vulnerability. This occurs because the from parameter in despam.php is escaped but placed in an INTERVAL without quotation marks. As a result, authenticated administrators may inject SQL via the from POST parameter, enabling blind readin...