EUVD-2026-101515

Redash is a package for data visualization and sharing. From versions after 8.0.0 until 26.9.0, the Query Results query runner in redash/queryrunner/queryresults.py accepts paramqueryNkey=value parameters and passed attacker-controlled values to replacequeryparameters for raw substitution into a...

CVE-2026-42093

The Redash data visualization package (versions after 8.0.0 until 26.9.0 ) is vulnerable to SQL Injection in the Query Results query runner located in redash/query_runner/query_results.py. The flaw occurs because the system accepts param_query_N_{key=value} parameters and passes attacker-controll...

CVE-2026-42093 Redash: SQL Injection via Query Results parameterized query substitution

Redash is a package for data visualization and sharing. From versions after 8.0.0 until 26.9.0, the Query Results query runner in redash/queryrunner/queryresults.py accepts paramqueryNkey=value parameters and passed attacker-controlled values to replacequeryparameters for raw substitution into a...

CVE-2026-42093

Redash is a package for data visualization and sharing. From versions after 8.0.0 until 26.9.0, the Query Results query runner in redash/queryrunner/queryresults.py accepts paramqueryNkey=value parameters and passed attacker-controlled values to replacequeryparameters for raw substitution into a...

CVE-2026-42093 Redash: SQL Injection via Query Results parameterized query substitution

Redash is a package for data visualization and sharing. From versions after 8.0.0 until 26.9.0, the Query Results query runner in redash/queryrunner/queryresults.py accepts paramqueryNkey=value parameters and passed attacker-controlled values to replacequeryparameters for raw substitution into a...

CVE-2026-103946

An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus...

CVE-2026-101997

An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ipfd of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a configured Security Intelligence feed connection...

CVE-2026-101997 Junos OS: SRX Series: A network-based attacker causes Remote Code Execution when Security Intelligence is used without a tls-profile authentication

An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ipfd of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a configured Security Intelligence feed connection...

CVE-2026-101997

Juniper Networks Junos OS on SRX Series is vulnerable to an SQL Injection vulnerability within the ipfd component. An unauthenticated network-based attacker can exploit this flaw to achieve Remote Code Execution with root privileges when a Security Intelligence feed connection is configured witho...

EUVD-2026-101469

An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ipfd of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a configured Security Intelligence feed connection...

CVE-2026-101997 Junos OS: SRX Series: A network-based attacker causes Remote Code Execution when Security Intelligence is used without a tls-profile authentication

An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ipfd of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a configured Security Intelligence feed connection...

CVE-2026-103946

Tenable Nessus versions prior to 10.12.5 are affected by an SQL injection vulnerability (CVE-2026-103946 ). This flaw could allow an authenticated user to read or modify data stored within the Nessus application. The issue has been resolved in version 10.12.5 . While the vulnerability is confirme...

CVE-2026-103946 SQL Injection

An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus...

CVE-2026-103946 SQL Injection

An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus...

EUVD-2026-101441

An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus...

CVE-2026-89076

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Progress MOVEit Transfer Custom Reports module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

WordPress Link Library SQL Injection Vulnerability

WordPress Link Library versions 7.9.2 and earlier have a SQL injection vulnerability. This vulnerability stems from time-based SQL injections via the linkurl parameter. The user input parameters are not properly escaped, and existing SQL queries lack proper preparation. This allows unauthenticate...

Mayer Balint GYM has a SQL injection vulnerability

Mayer Balint GYM versions prior to 1.4.1 have a SQL injection vulnerability. This vulnerability arises from the use of GET parameters for searchname and searchemail in the admin/users/index.php file. These parameters are concatenated with the COUNT queries for user list and pagination...

Slican IPX SQL Injection Vulnerability

Slican versions prior to IPx 6.62.0100 have a SQL injection vulnerability. This vulnerability stems from the WebCTI service’s improper handling of user input in files such as webcti/adminjson.php. This could allow authenticated attackers to execute SQL injection attacks...

WordPress Amelia SQL Injection Vulnerability

WordPress Amelia versions 2.4.10 and earlier have a SQL injection vulnerability. This vulnerability stems from improper neutralization of special elements in SQL commands, making them susceptible to SQL injection attacks...