260182 matches found
PT-2026-77300
Name of the Vulnerable Software and Affected Versions Froxlor versions prior to 2.3.8 Description An authenticated administrator with change serversettings permission can perform a SQL injection attack. The 'Admins.add' and 'Admins.update' endpoints in lib/Froxlor/Api/Commands/Admins.php accept a...
PT-2026-77288
Name of the Vulnerable Software and Affected Versions xianrendzw EasyReport versions prior to 2.0.17.0522 Beta Description A remote SQL injection exists within the Move Operations component, specifically in the ModuleController.java file. The issue occurs when the sourcePath argument is...
PT-2026-78079
Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.25.0.000 Description A security flaw in the Security component allows a high privileged attacker with network access via SQL to compromise the system. Successful exploitation can lead to...
PT-2026-77816
Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.25.0.000 Description A security flaw in the Security component allows a low privileged attacker with network access via SQL to compromise the system. Successful exploitation can lead to a...
PT-2026-77814
Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.25.0.000 Description A security flaw in the Security component allows a low privileged attacker with network access via SQL to compromise the system. Successful exploitation can lead to a...
PT-2026-77813
Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.25.0.000 Description A security flaw in the Security component allows a low privileged attacker with network access via SQL to compromise the system. Successful exploitation can lead to a...
PT-2026-77886
Name of the Vulnerable Software and Affected Versions Oracle Hyperion Data Relationship Management version 11.2.25.0.000 Description A flaw in the Access and security component allows a low privileged attacker with network access via SQL to compromise the system. This issue can lead to unauthoriz...
PT-2026-77911
Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.25.0.000 Description A security flaw in the Security component allows a low privileged attacker with network access via SQL to compromise the system. Successful exploitation can lead to a full...
PT-2026-77916
Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.25.0.000 Description A security flaw in the Security component allows a low privileged attacker with network access via SQL to compromise the system. Successful exploitation can lead to...
PT-2026-77919
Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.2.25.0.000 Description A security flaw in the Security component allows a low privileged attacker with network access via SQL to compromise the system. Successful exploitation can lead to a...
PT-2026-77411
Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63 Description A flaw in the Configuration Manager component allows a low privileged attacker with network access via SQL to compromise the system. Successful...
PT-2026-77556
Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description A flaw in the Common Events component allows a low privileged attacker with network access via SQL to compromise the system. Successful exploitation can lead to a full...
PT-2026-77592
Name of the Vulnerable Software and Affected Versions Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 Description An issue in the Installation and Configuration component allows a high privileged attacker with network access via SQL to compromise the system. Successful exploitatio...
PT-2026-77575
Name of the Vulnerable Software and Affected Versions Oracle Hyperion Calculation Manager version 11.2.25.0.000 Description A security flaw in the Security component allows a high privileged attacker with network access via SQL to compromise the system. Successful exploitation can lead to...
Countersoft Gemini 7.3.0 SQL Injection / Remote Code Execution
Countersoft Gemini version 7.3.0 contains an authenticated SQL injection vulnerability in the custom field lookup functionality. An attacker with valid credentials can inject stacked SQL queries through the term parameter and, when the application uses a privileged SQL Server account, enable...
PT-2026-80320
Summary A second-order SQL injection vulnerability in Froxlor's admin API allows an authenticated administrator to store a crafted SQL payload in the panel admins.ip column via the Admins.add or Admins.update endpoint. The payload executes as a UNION-based SQL injection the next time...
CVE-2026-75876: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522Beta. Affected by this issue is some unknown functionality of the file ModuleController.java of the component Move Operations. Such manipulation of the argument sourcePath leads to sql injection. The attack may b...
CVE-2026-47720: Improper Neutralization of Special Elements used in an SQL Command
FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. Prior to 1.3.2, the TDengine DAQ storage connector's escapeTdString function in server/runtime/storage/tdengine/index.js doubles single quotes but does not escape backslashes. A remote unauthenticated attacker can submit a...