220550 matches found
CVE-2026-16019 SQL Injection in Faydam Innovation's FAYDAM Datalogger
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Faydam Innovation Inc. FAYDAM Datalogger allows SQL Injection. This issue affects FAYDAM Datalogger: from 2.7.1 before 2.8.0...
EUVD-2026-62438
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Faydam Innovation Inc. FAYDAM Datalogger allows SQL Injection. This issue affects FAYDAM Datalogger: from 2.7.1 before 2.8.0...
CVE-2026-16019
FAYDAM Datalogger (by Faydam Innovation Inc.) is affected by a SQL injection vulnerability due to improper neutralization of special elements in SQL commands. The issue affects versions 2.7.1 through before 2.8.0 and carries a CVSS 3.1 score of 9.8 (CRITICAL) with a network attack vector requirin...
EUVD-2026-62436
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection...
CVE-2026-56088
Dell OpenManage Enterprise versions before 4.7.0 contain an SQL injection vulnerability exploitable by a low-privileged remote attacker, with HIGH confidentiality impact (CVSS 7.1). Upgrade to 4.7.0 or apply Dell's DSA-2026-359 security update. No in-the-wild exploitation reported in the provided...
CVE-2026-56088
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection...
EUVD-2026-62430
Joomla Extension - yootheme.com - Unauthenticated SQL injection in ItemController::element in Zoo 4.1.64 - The filtertype request value is interpolated into the query as a.type = "..." and the typefilter array as a.type IN "...", with no quoting or escaping...
CVE-2026-74804 Joomla Extension - yootheme.com - Unauthenticated SQL injection in Zoo < 4.1.64
Joomla Extension - yootheme.com - Unauthenticated SQL injection in ItemController::element in Zoo 4.1.64 - The filtertype request value is interpolated into the query as a.type = "..." and the typefilter array as a.type IN "...", with no quoting or escaping...
CVE-2026-74804 Joomla Extension - yootheme.com - Unauthenticated SQL injection in Zoo < 4.1.64
Joomla Extension - yootheme.com - Unauthenticated SQL injection in ItemController::element in Zoo 4.1.64 - The filtertype request value is interpolated into the query as a.type = "..." and the typefilter array as a.type IN "...", with no quoting or escaping...
CVE-2026-74804
Zoo (yootheme.com Joomla extension, versions
CVE-2026-73391
Unauthenticated SQL Injection in Total Donations = 2.0.5 versions...
CVE-2026-73388
Unauthenticated SQL Injection in Nikstore Core = 1.5 versions...
CVE-2026-73183
Unauthenticated SQL Injection in Maps Marker Pro = 4.32 versions...
CVE-2026-73185
Unauthenticated SQL Injection in NGG Smart Image Search 4.0.0 versions...
CVE-2026-66668
Subscriber SQL Injection in Community by PeepSo = 9.0.5.2 versions...
CVE-2026-32552
Subscriber SQL Injection in YITH WooCommerce Membership Premium = 2.33.0 versions...
EUVD-2026-62392
Unauthenticated SQL Injection in Total Donations = 2.0.5 versions...
CVE-2026-73391 WordPress Total Donations plugin <= 2.0.5 - SQL Injection vulnerability
Unauthenticated SQL Injection in Total Donations = 2.0.5 versions...
CVE-2026-73391
The WordPress Total Donations plugin (≤2.0.5) has an unauthenticated SQL Injection vulnerability rated CVSS 9.3 Critical. Patchstack reported it; no patch version or in-the-wild exploitation details are provided in the documents.