237782 matches found
EEF-CVE-2026-67579 Filter expression injection via forged keyset pagination cursor in Ash
Summary Deserialization of Untrusted Data vulnerability in ash-project ash allows an unauthenticated attacker to inject a filter expression through a forged keyset pagination cursor, resulting in SQL injection or code execution depending on the data layer. Read actions with keyset pagination deco...
CVE-2026-67579
The CVE affects ash-project ash (Ash) and describes a Deserialization of Untrusted Data vulnerability: an unauthenticated attacker can inject a filter expression through a forged keyset pagination cursor. The reader decodes page[:after]/page[:before] with non_executable_binary_to_term/2, allowing...
CVE-2026-13361 IBM Informix Server Vulnerability in SQL Interface Handler Could Allow Remote Code Execution
IBM Informix oninit sqsgkprepare RCE via unchecked SQL Interface length field...
CVE-2026-13361 IBM Informix Server Vulnerability in SQL Interface Handler Could Allow Remote Code Execution
IBM Informix oninit sqsgkprepare RCE via unchecked SQL Interface length field...
CVE-2026-13361
IBM Informix Dynamic Server is affected by CVE-2026-13361 through the oninit sq_sgkprepare path, enabling a stack-based buffer overflow via an unchecked SQL Interface length field, leading to remote code execution. Affected versions: Informix Dynamic Server 14.10, 12.10.x, and 15.0. The issue has...
CVE-2026-13361
IBM Informix oninit sqsgkprepare RCE via unchecked SQL Interface length field...
EUVD-2026-57533
IBM Informix oninit sqsgkprepare RCE via unchecked SQL Interface length field...
CVE-2026-17111 IBM i is Affected By Multiple Vulnerabilities in SQL
IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...
EUVD-2026-57523
IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...
CVE-2026-17111
IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...
CVE-2026-17111
IBM i 7.3–7.6 are affected by CVE-2026-17111 due to SQL injection in a vulnerable SQL component. A remote attacker can send crafted SQL statements to view, add, modify, or delete data in the back-end database, with network attack vector, low privilege, no user interaction, and impact on confident...
EUVD-2026-57408
SiYuan versions before v3.7.4 contain a second-order SQL injection vulnerability in attribute-view template columns that expose the queryBlocks function, which executes raw SQL using string substitution instead of parameterized queries. Attackers can distribute malicious SiYuan documents or...
CVE-2026-72807
SiYuan versions before v3.7.4 are affected by a second-order SQL injection in attribute-view template columns that expose the queryBlocks function. The vulnerability occurs because raw SQL is executed via string substitution instead of parameterized queries. An attacker can distribute malicious S...
CVE-2026-72807 SiYuan before v3.7.4 SQL Injection via queryBlocks template
SiYuan versions before v3.7.4 contain a second-order SQL injection vulnerability in attribute-view template columns that expose the queryBlocks function, which executes raw SQL using string substitution instead of parameterized queries. Attackers can distribute malicious SiYuan documents or...
CVE-2026-72807
SiYuan versions before v3.7.4 contain a second-order SQL injection vulnerability in attribute-view template columns that expose the queryBlocks function, which executes raw SQL using string substitution instead of parameterized queries. Attackers can distribute malicious SiYuan documents or...
CVE-2026-73331
CVE-2026-73331 : CamaleonCMS 2.9.1 contains an authenticated SQL injection via the post slug field. Authenticated users with post creation/edit privileges can submit a crafted slug containing SQL syntax that is evaluated by an inadequately parameterized query. Attack techniques described include ...
CVE-2026-73331
CamaleonCMS 2.9.1 contains an authenticated SQL injection vulnerability that allows authenticated attackers with post creation or editing privileges to submit a crafted slug value containing SQL syntax that the database backend evaluates as part of an inadequately parameterized query. Attackers c...
EUVD-2026-57445
CamaleonCMS 2.9.1 contains an authenticated SQL injection vulnerability that allows authenticated attackers with post creation or editing privileges to submit a crafted slug value containing SQL syntax that the database backend evaluates as part of an inadequately parameterized query. Attackers c...
CVE-2026-73300
Budibase is an open-source low-code platform. Prior to 3.40.0, the MySQL integration component in Budibase is configured with multipleStatements: true, enabling execution of multiple SQL statements in a single query. Attackers can inject malicious SQL commands through user input fields, leading t...