284763 matches found
PT-2026-108865
Name of the Vulnerable Software and Affected Versions EduAdmin Booking versions prior to 6.0.0 Description An issue exists where improper neutralization of special elements used in an SQL command allows for Blind SQL Injection. Blind SQL Injection is a technique that allows an attacker to infer...
PT-2026-108873
Name of the Vulnerable Software and Affected Versions Testimonials by BestWebSoft WordPress plugin versions prior to 1.0.9 Description An issue exists where a parameter is not properly sanitized and escaped before being used in a SQL query. This allows unauthenticated attackers to perform SQL...
PT-2026-108844
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VibeThemes WPLMS wplms allows Blind SQL Injection.This issue affects WPLMS : from n/a through 4.973...
PT-2026-108850
Name of the Vulnerable Software and Affected Versions tagDiv Opt-In Builder versions prior to 1.7.6 Description The td-subscription component contains an SQL Injection flaw, specifically allowing Blind SQL Injection. This occurs due to the improper neutralization of special elements used in an SQ...
PT-2026-108848
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VibeThemes WPLMS wplms plugin allows Blind SQL Injection.This issue affects WPLMS: from n/a before 1.9.9.8.2...
PT-2026-108851
Name of the Vulnerable Software and Affected Versions tagDiv Opt-In Builder versions prior to 1.7.6 Description The td-subscription component contains an SQL Injection flaw, specifically allowing Blind SQL Injection. This occurs due to the improper neutralization of special elements used in an SQ...
PT-2026-108832
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Blind SQL Injection.This issue affects ProfileGrid: from n/a through 6.0.0.2...
PT-2026-108909
ProcessMaker is an open source workflow management software suite. Prior to 2026.14.3, the GET /api/1.0/tasks endpoint in ProcessMaker is vulnerable to SQL injection through the order by parameter because ProcessMakerTraitsTaskControllerIndexMethods::applyColumnOrdering concatenates a...
Microsoft SQL Server Privilege Escalation
The vulnerability of the Microsoft SQL Server database management system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
PT-2026-108742
Name of the Vulnerable Software and Affected Versions Code Snippets WordPress plugin versions prior to 3.10.0 Description Insufficient sanitization and escaping of a user-supplied parameter in snippet-migration import endpoints allows users with site-administration capabilities to perform...
PT-2026-108843
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Taskbuilder Taskbuilder taskbuilder allows Blind SQL Injection.This issue affects Taskbuilder: from n/a through 6.0.5...
PT-2026-108938
Name of the Vulnerable Software and Affected Versions PHPNuxBill versions prior to 2025.3.21 Description An unauthenticated SQL injection exists in the radius.php FreeRADIUS REST endpoint. The issue occurs because request parameters are interpolated into whereRaw queries. An attacker can send...
PT-2026-108847
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects UpSolution Core: from n/a through 9.3...
Splunk Enterprise 10.4.0 < 10.4.3 (SVD-2026-1001)
The version of Splunk Enterprise installed on the remote host is 10.4.x prior to 10.4.3. Splunk Enterprise 10.2.x, 10.0.x, and 9.4.x are not affected. It is, therefore, affected by a SQL injection vulnerability as referenced in the SVD-2026-1001 advisory. A user that holds a role with the...
PT-2026-108852
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in wpdreams Ajax Search Pro ajax-search-pro allows Blind SQL Injection.This issue affects Ajax Search Pro: from n/a through 4.29.1...
Microsoft SQL Server Buffer Overflow
The vulnerability of the Microsoft SQL Server database management system is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Microsoft SQL Server Buffer Overflow
The vulnerability of the Microsoft SQL Server database management system is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
CVE-2026-84209
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...
CVE-2026-81932
IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...