CVE-2026-73651

creationtimestamp| type| source ---|---|--- 2026-08-13 20:35:04+00:00| published-proof-of-concept| https://github.com/typeorm/typeorm/security/advisories/GHSA-2rp8-mm9q-fp49...

CVE-2026-73490 vulnerabilities

Vulnerabilities for packages: ruby4.0-rails, gitlab-rails-ce, ruby3.2-rails, pghero, gitlab-rails-ce-fips, pghero-fips, ruby3.3-rails, ruby3.4-rails...

CVE-2026-73491 vulnerabilities

Vulnerabilities for packages: ruby4.0-rails, gitlab-rails-ce, ruby3.2-rails, pghero, gitlab-rails-ce-fips, pghero-fips, ruby3.3-rails, ruby3.4-rails...

CVE-2026-72898 vulnerabilities

Vulnerabilities for packages: metabase...

CVE-2026-73418 vulnerabilities

Vulnerabilities for packages: langfuse, jitsucom-jitsu, langfuse-fips...

CVE-2026-16961

IBM i 7.6, 7.5, and 7.4 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

CVE-2026-16967 IBM i is Affected By Multiple SQL Vulnerabilities [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain unauthorized access to system objects due to a time-of-check to time-of-use TOCTOU race condition involving symbolic links...

CVE-2026-16967

IBM i versions 7.6, 7.5, 7.4, and 7.3 are affected by CVE-2026-16967, a TOCTOU race condition involving symbolic links that could let a remote authenticated attacker gain unauthorized access to system objects. CVSS v3.1 base score 8.5 ( HIGH ) with network attack vector, high impact on confidenti...

CVE-2026-16961

IBM i versions 7.4, 7.5, and 7.6 (feature 5770-SS1) are vulnerable to CWE-89 SQL injection in Db2 Mirror, allowing remote attackers to view, add, modify, or delete back-end database data. IBM has issued PTFs SJ10902 (7.6), SJ10908 (7.5), and SJ10910 (7.4) as remediation; no workarounds are provid...

CVE-2026-16961

IBM i 7.6, 7.5, and 7.4 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

CVE-2026-16961 IBM i is Affected By SQL Injection Vulnerability in Db2 Mirror []

IBM i 7.6, 7.5, and 7.4 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

EUVD-2026-58381

IBM i 7.6, 7.5, and 7.4 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

CVE-2026-16908 IBM i is Affected By Multiple SQL Vulnerabilities [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain unauthorized access to arbitrary objects due to a path traversal vulnerability...

CVE-2026-16908 IBM i is Affected By Multiple SQL Vulnerabilities [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain unauthorized access to arbitrary objects due to a path traversal vulnerability...

CVE-2026-59714

CVE-2026-59714 describes a cross-channel message overwrite vulnerability in Open WebUI exposed by the chat-completions path. From v0.9.5 to before v0.10.0, an authenticated user could overwrite a message in a channel they do not belong to by using a channel: chat_id with a caller-supplied message...

CVE-2019-25765

creationtimestamp| type| source ---|---|--- 2026-08-13 18:46:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/eio7hnpnmjbon 2026-08-14 14:00:30+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b6890fd9-837f-4a64-a1fa-c036ecba0806 2026-08-30...

GeoServer Zero-Day Targeted in Active Exploitation Attempts, Can Lead to RCE

A newly disclosed zero-day flaw in GeoServer is seeing active exploitation efforts, per watchTowr. The vulnerability, which has yet to be assigned a CVE identifier, is an SQL injection vulnerability in the open-source platform that can lead to remote code execution RCE. The security defect remain...

Exploit for SQL Injection in Acymailing

CVE-2026-56292 — AcyMailing for Joomla Unauthenticated SQL Inj...

CVE-2026-18428

A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary code on Apache Spark workers by sending a crafted SQL query to the direct query endpoint...

CVE-2024-58374

Hongjing e-HR contains an unauthenticated SQL injection vulnerability in the getSdutyTree servlet endpoint that allows remote unauthenticated attackers to access protected resources by supplying a path traversal sequence in the request URI to bypass the oauthservlet authentication filter. Attacke...