WordPress Listdom plugin <= 5.6.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Mrs Skelli in WordPress Plugin Listdom versions = 5.6.0...

CVE-2026-34191

A flaw was found in Apache Portable Runtime Utility. This vulnerability, known as SQL Injection, occurs in the aprdbdoracle provider. A remote attacker could exploit this by injecting malicious SQL commands, potentially leading to unauthorized access, modification, or deletion of data within the...

WordPress Reviewer plugin <= 3.14.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Phat RiO in WordPress Plugin Reviewer versions = 3.14.2...

WordPress Tablesome plugin <= 1.2.9 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin Tablesome versions = 1.2.9...

RLSA-2026:52772 Important: perl-DBI:1.641 security update

The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations. Security Fixes: DBI: Heap overflow when...

perl-DBI:1.641 security update

An update is available for perl-DBI, module.perl-DBI. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The perl-DBI package provides the standard database interfa...

CVE-2026-19425

Travel Agency Management System developed by Win Men Intermational has a SQL Injection vulnerability. Unauthenticated remote attackers can inject arbitrary SQL commands to read, modify, and delete database contents...

EUVD-2026-55933

Travel Agency Management System developed by Win Men Intermational has a SQL Injection vulnerability. Unauthenticated remote attackers can inject arbitrary SQL commands to read, modify, and delete database contents...

CVE-2026-19425

Travel Agency Management System developed by Win Men Intermational has a SQL Injection vulnerability. Unauthenticated remote attackers can inject arbitrary SQL commands to read, modify, and delete database contents...

CVE-2026-19425

The CVE-2026-19425 entry concerns the Travel Agency Management System from Win Men Intermational, which has a SQL Injection vulnerability allowing unauthenticated remote attackers to inject arbitrary SQL to read, modify, or delete database contents. The documents do not specify the affected versi...

CVE-2026-19425 Win Men Intermational｜Travel Agency Management System - SQL Injection

Travel Agency Management System developed by Win Men Intermational has a SQL Injection vulnerability. Unauthenticated remote attackers can inject arbitrary SQL commands to read, modify, and delete database contents...

CVE-2026-66770

Due to an SQL Injection vulnerability in SAP Social intelligence, an authenticated attacker could directly inject an SQL DDL Data Definition Language string into the underlying database without further authorization. Successful exploitation could allow the attacker to make malicious changes to th...

CVE-2026-66770

Technical details about CVE-2026-66770 are not publicly available in the provided documents. Monitor for updates.

EUVD-2026-55882

Due to an SQL Injection vulnerability in SAP Social intelligence, an authenticated attacker could directly inject an SQL DDL Data Definition Language string into the underlying database without further authorization. Successful exploitation could allow the attacker to make malicious changes to th...

PT-2026-70057

Name of the Vulnerable Software and Affected Versions Travel Agency Management System affected versions not specified Description An issue exists where unauthenticated remote attackers can perform SQL Injection, a technique used to insert malicious SQL code into a query. This allows the attacker ...

PT-2026-70215

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager versions prior to 2024 SU7 Description Cleartext transmission of sensitive information in the Core of Ivanti Endpoint Manager allows a remote unauthenticated attacker in a Man-in-the-Middle MITM position—where an attack...

PT-2026-70042

Name of the Vulnerable Software and Affected Versions SAP Social intelligence affected versions not specified Description An authenticated attacker can exploit an SQL Injection flaw to inject SQL DDL Data Definition Language strings directly into the underlying database without additional...

PT-2026-70125

An SQL injection vulnerability in Friendica through the 2026.08-dev branch allows unauthenticated remote attackers to execute arbitrary SQL statements via the photo-view order parameter. The parameter is concatenated unescaped into a SHOW COLUMNS query via a bare PDO::query call, enabling stacked...

PT-2026-70804

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code...

PT-2026-70788

Weaver Fanwei E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint that allows unauthenticated remote attackers to extract arbitrary data from the backend database by manipulating the id GET parameter. Attackers can send a single crafted GET reques...