Lucene search
+L

238084 matches found

RedhatCVE
RedhatCVE
added 6 days ago6 views

CVE-2026-19496

A flaw was found in sources-api-go. An authenticated remote user can exploit a SQL injection vulnerability by injecting arbitrary SQL expressions through query parameter filtering. This can lead to unauthorized information disclosure of internal database fields, arbitrary PostgreSQL function...

8.8CVSS5.4AI score
SaveExploits0References3
NVD
NVD
added 6 days ago7 views

CVE-2025-13294

An unauthenticated SQL injection vulnerability exists in the web server of TBEA TLogger V2.1.0.0B0.0.0.0. Multiple HTTP endpoints incorporate attacker-controlled parameters directly into SQLite queries without sufficient validation or parameterization. A remote unauthenticated attacker can exploi...

9.3CVSS0.00401EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 6 days ago18 views

Exploit for Code Injection in Pgadmin Pgadmin_4

No d...

9.9CVSS8.7AI score0.46751EPSS
SaveExploits10
ATTACKERKB
ATTACKERKB
added 6 days ago6 views

CVE-2025-13294

An unauthenticated SQL injection vulnerability exists in the web server of TBEA TLogger V2.1.0.0B0.0.0.0. Multiple HTTP endpoints incorporate attacker-controlled parameters directly into SQLite queries without sufficient validation or parameterization. A remote unauthenticated attacker can exploi...

9.3CVSS5.8AI score0.00401EPSS
SaveExploits0References2
Cvelist
Cvelist
added 6 days ago26 views

CVE-2025-13294 Unauthenticated SQL Injection

An unauthenticated SQL injection vulnerability exists in the web server of TBEA TLogger V2.1.0.0B0.0.0.0. Multiple HTTP endpoints incorporate attacker-controlled parameters directly into SQLite queries without sufficient validation or parameterization. A remote unauthenticated attacker can exploi...

9.3CVSS0.00401EPSS
SaveExploits0References1
EUVD
EUVD
added 6 days ago12 views

EUVD-2025-210667

An unauthenticated SQL injection vulnerability exists in the web server of TBEA TLogger V2.1.0.0B0.0.0.0. Multiple HTTP endpoints incorporate attacker-controlled parameters directly into SQLite queries without sufficient validation or parameterization. A remote unauthenticated attacker can exploi...

9.3CVSS5.8AI score0.00401EPSS
SaveExploits0References1
CVE
CVE
added 6 days ago40 views

CVE-2025-13294

Affected software: TBEA TLogger web server (firmware version V2.1.0.0B0.0.0.0). Vulnerability: Unauthenticated SQL injection in multiple HTTP endpoints that incorporate attacker-controlled parameters directly into SQLite queries. Impact: attacker can read, modify, or delete data in CCU.db; high c...

9.3CVSS5.8AI score0.00401EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 6 days ago8 views

CVE-2026-58041

A flaw was found in Node.js's node:sqlite module. This vulnerability allows a previously used database statement, which should have been reset, to be re-executed with new parameters. This could lead to unintended data modifications or integrity issues within the application. Mitigation Applicatio...

5.3CVSS6.1AI score0.0032EPSS
SaveExploits0References4
NVD
NVD
added 6 days ago24 views

CVE-2026-72899

Metabase allows an unauthenticated attacker to inject arbitrary SQL via a publicly shared card or dashboard that exposes a field-filter dimension parameter...

10CVSS0.00566EPSS
SaveExploits1References3
NVD
NVD
added 6 days ago6 views

CVE-2026-72898

Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/resetpassword' database endpoint and gain administrator access to the connected Metabase instance...

10CVSS0.104EPSS
SaveExploits4References5
Cvelist
Cvelist
added 6 days ago36 views

CVE-2026-72899 Metabase SQL injection via public card or dashboard

Metabase allows an unauthenticated attacker to inject arbitrary SQL via a publicly shared card or dashboard that exposes a field-filter dimension parameter...

10CVSS0.00566EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 6 days ago12 views

CVE-2026-72899

Metabase allows an unauthenticated attacker to inject arbitrary SQL via a publicly shared card or dashboard that exposes a field-filter dimension parameter...

10CVSS5.7AI score0.00566EPSS
SaveExploits1References4
EUVD
EUVD
added 6 days ago10 views

EUVD-2026-55691

Metabase allows an unauthenticated attacker to inject arbitrary SQL via a publicly shared card or dashboard that exposes a field-filter dimension parameter...

10CVSS5.7AI score0.00566EPSS
SaveExploits1References3
CVE
CVE
added 6 days ago73 views

CVE-2026-72899

Metabase is affected by CVE-2026-72899: an unauthenticated SQL injection via a publicly shared card or dashboard that exposes a field-filter (dimension) parameter. The flaw enables arbitrary SQL injection through the field-filter input; exploitation details are not provided beyond access to a pub...

10CVSS5.7AI score0.00566EPSS
SaveExploits1References3
CVE
CVE
added 6 days ago210 views

CVE-2026-72898

Metabase is affected by CVE-2026-72898: an unauthenticated attacker can inject arbitrary SQL through the /reset_password endpoint, forging an administrator session and gaining full access to the Metabase instance. The root cause, as described in PoC materials, is that the password-reset API accep...

10CVSS5.6AI score0.104EPSS
SaveIn wildExploits4References5Affected Software1
EUVD
EUVD
added 6 days ago11 views

EUVD-2026-55690

Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/resetpassword' database endpoint and gain administrator access to the connected Metabase instance...

10CVSS5.6AI score0.104EPSS
SaveExploits4References4
Cvelist
Cvelist
added 6 days ago42 views

CVE-2026-72898 Metabase SQL injection via password reset endpoint

Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/resetpassword' database endpoint and gain administrator access to the connected Metabase instance...

10CVSS0.104EPSS
SaveExploits4References4
ATTACKERKB
ATTACKERKB
added 6 days ago7 views

CVE-2026-72898

Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/resetpassword' database endpoint and gain administrator access to the connected Metabase instance...

10CVSS5.6AI score0.104EPSS
SaveExploits4References5
Vulnrichment
Vulnrichment
added 6 days ago8 views

CVE-2026-72898 Metabase SQL injection via password reset endpoint

Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/resetpassword' database endpoint and gain administrator access to the connected Metabase instance...

10CVSS5.6AI score0.104EPSS
SaveExploits4References4
EUVD
EUVD
added 6 days ago9 views

EUVD-2026-55671

Discourse is an open-source discussion platform. From 2026.1.0-latest until 2026.1.7, 2026.6.2, 2026.7.1, and 2026.8.0-latest.1, anyone able to run a parameterized Data Explorer query, including non-staff members of a group a query is shared with, could craft parameter values that escaped the...

7.1CVSS5.7AI score0.00231EPSS
SaveExploits0References5
Rows per page
Query Builder