283926 matches found
VulnCheck KEV: CVE-2026-3326
The Xstore WordPress theme before 9.7.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...
PT-2026-113455
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network...
Microsoft SQL Server: CVE-2026-88081: Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
PT-2026-112905
Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network...
PT-2026-111797
Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions 7.6.0 through 7.6.4 FortiAnalyzer versions 7.4.0 through 7.4.7 FortiAnalyzer version 7.2 FortiAnalyzer Cloud versions 7.6.2 through 7.6.4 FortiAnalyzer Cloud versions 7.4.1 through 7.4.7 FortiAnalyzer Cloud versions 7.2....
PT-2026-111777
Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions 7.6.0 through 7.6.4 FortiAnalyzer versions 7.4.0 through 7.4.7 FortiAnalyzer version 7.2 FortiAnalyzer Cloud versions 7.6.2 through 7.6.4 FortiAnalyzer Cloud versions 7.4.1 through 7.4.7 FortiAnalyzer Cloud versions 7.2....
Cisco License On-Prem Unauthorized Access
The vulnerability in the web interface for managing Cisco License On-Prem previously known as Cisco Smart Software Manager On-Prem is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized...
CVE-2026-23707: Improper Neutralization of Special Elements used in an SQL Command
An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability CWE-89 vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiAnalyzer Cloud...
Microsoft SQL Server: CVE-2026-70189: Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...
Microsoft SQL Server: CVE-2026-88082: Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...
Microsoft SQL Server: CVE-2026-88084: Microsoft SQL Server Denial of Service Vulnerability
Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network...
Microsoft SQL Server: CVE-2026-85886: Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
Microsoft SQL Server: CVE-2026-67628: Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
PT-2026-113434
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An out-of-bounds read allows an authorized attacker to disclose sensitive information over a network. Recommendations At the moment, there is no information about a newer version that...
Microsoft SQL Server: CVE-2026-96956: SQL Server Elevation of Privilege Vulnerability
Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...
KLA91344 Multiple vulnerabilities in Microsoft SQL Server
Multiple vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote...
CVE-2026-96956: Stack-based Buffer Overflow
Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...
Microsoft SQL Server: CVE-2026-88085: Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...
PT-2026-113451
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network...
VulnCheck KEV: CVE-2025-14169
The FunnelKit - Funnel Builder for WooCommerce Checkout plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'opid' parameter in all versions up to, and including, 3.13.1.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on th...