284196 matches found
PT-2026-113451
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network...
PT-2026-113443
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow allows an authorized attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer overflow occurs when a program writes...
PT-2026-111398
Name of the Vulnerable Software and Affected Versions RUGGEDCOM CROSSBOW versions prior to V6.0 Description Authenticated attackers with specific privileges can execute arbitrary SQL commands on the underlying database. This occurs because the system fails to properly validate or sanitize input...
PT-2026-111395
Name of the Vulnerable Software and Affected Versions RUGGEDCOM CROSSBOW versions prior to V6.0 Description Authenticated attackers with specific privileges can execute arbitrary SQL commands on the underlying database. This occurs because the system fails to properly validate or sanitize the...
PT-2026-113447
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than i...
PT-2026-111393
Name of the Vulnerable Software and Affected Versions RUGGEDCOM CROSSBOW versions prior to V6.0 Description Authenticated attackers with specific privileges can execute arbitrary SQL commands on the underlying database. This occurs because the system fails to properly validate or sanitize input...
PT-2026-111397
Name of the Vulnerable Software and Affected Versions RUGGEDCOM CROSSBOW versions prior to V6.0 Description Authenticated attackers with administrative privileges can execute arbitrary SQL commands on the underlying database. This occurs because the system fails to properly validate or sanitize...
CVE-2026-109687: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Blind SQL Injection.This issue affects Link Whisper Free: from n/a through 0.9.7...
CVE-2026-108965: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/editquantity.php. Executing a manipulation of the argument pqty can lead to sql injection. The attack can be launched remotely. The exploit has been...
CVE-2026-109606: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the function Action::saveuser of the file admin/adminclass.php of the component Account Creation. The manipulation of the argument Name results in sql injection. The attack may be performed from remote...
CVE-2026-109521: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown function of the file changebookingstatus.php. Performing a manipulation of the argument dateselected results in sql injection. The attack may be...
CVE-2026-108179: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in PluginUs.Net WOLF bulk-editor allows Blind SQL Injection.This issue affects WOLF: from n/a through 1.1.1...
CVE-2026-15399: Improper Neutralization of Special Elements used in an SQL Command
The Animated Number Counters plugin for WordPress is vulnerable to generic SQL Injection via the 'counterid' parameter in all versions up to, and including, 3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...
CVE-2026-94520: Use of Externally-Controlled Format String
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network...
CVE-2026-88085: Heap-based Buffer Overflow
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...
CVE-2026-88086: Out-of-bounds Read
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network...
CVE-2026-88084: Allocation of Resources Without Limits or Throttling
Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network...
CVE-2026-85888: Out-of-bounds Read
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...