PT-2026-21679

Name of the Vulnerable Software and Affected Versions Apache Superset versions prior to 6.0.0 Description An issue exists in Apache Superset that allows an authenticated user with read access to conduct error-based SQL injection. This is due to improper neutralization of special elements used in ...

SQL Injection

egroupware/egroupware is vulnerable to SQL Injection. The vulnerability is due to a PHP type juggling issue where JSON decoding converts numeric strings into integers, bypassing the isint security check used by the application, and allows authenticated attackers to inject arbitrary SQL commands...

Exploit for CVE-2026-24854

CVE-2026-24854 – ChurchCRM Authenticated Numeric SQL Injection...

CVE-2025-12166

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to blind SQL Injection via the order and appendwheresql parameters in all versions up to, and including, 1.6.9.9 due to insufficient escaping on the user supplied parameter and lack o...

mariadb: MariaDB Server Crash via Item_direct_view_ref

A flaw was found in MariaDB Server. This vulnerability may allow an attacker to crash the database via Itemdirectviewref::derivedfieldtransformerforwhere...

mariadb: MariaDB Server Crash via Item_direct_view_ref

A flaw was found in MariaDB Server. This vulnerability may allow an attacker to crash the database via Itemdirectviewref::derivedfieldtransformerforwhere...

mariadb: MariaDB Server Crash via Item_direct_view_ref

A flaw was found in MariaDB Server. This vulnerability may allow an attacker to crash the database via Itemdirectviewref::derivedfieldtransformerforwhere...

The vulnerability of the ProcessWhereClause function in the PolicyServer server of Trend Micro Endpoint Encryption (TMEE) allows attackers to increase their privileges.

The vulnerability of the ProcessWhereClause function in the PolicyServer server, a component of Trend Micro Endpoint Encryption TMEE encryption software, relates to the lack of security measures for handling SQL query structures. Exploiting this vulnerability can allow an attacker to enhance thei...

CVE-2025-34304

IPFire

Django: SQL Injection in Django ORM via Unvalidated `_connector` in Q Objects

A critical SQL injection vulnerability was discovered in the Django ORM's handling of Q objects. The internal WhereNode.assql method used unsafe string formatting to inject the query connector, which could be controlled by an attacker through the connector key when creating a Q object. This allow...

MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0 through 11.0.*, and 11.1 through 11.4.* crashes in Item_direct_view_ref::derived_field_transformer_for_where.

...

BIT-MARIADB-MIN-2021-46666

MariaDB before 10.6.2 allows an application crash because of mishandling of a pushdown from a HAVING clause to a WHERE clause...

CVE-2025-46720

Keystone is a content management system for Node.js. Prior to version 6.5.0, "field.isFilterable" access control can be bypassed in "update" and "delete" mutations by adding additional unique filters. These filters can be used as an oracle to probe the existence or value of otherwise unreadable...

SUSE CVE-2023-52970

MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., 11.0 through 11.0., and 11.1 through 11.4. crashes in Itemdirectviewref::derivedfieldtransformerforwhere...

DEBIAN-CVE-2023-52970

MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., 11.0 through 11.0., and 11.1 through 11.4. crashes in Itemdirectviewref::derivedfieldtransformerforwhere...

UBUNTU-CVE-2023-52970

MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., 11.0 through 11.0., and 11.1 through 11.4. crashes in Itemdirectviewref::derivedfieldtransformerforwhere...

Chatwoot SQL注入漏洞

Chatwoot is a Chatwoot open source application. Customer Engagement Suite, an open source alternative to Intercom, Zendesk, Salesforce Service Cloud, and more. A SQL injection vulnerability exists in Chatwoot versions prior to 3.16.0 that stems from improper input cleanup and allows an attacker t...

SurrealDB: Improper Authorization in Select Permissions

Due to the order in which permissions were processed, some statements, filters and computations could lead to leaking field values or record contents to users without the required permissions. This behavior could be triggered in different scenarios: - When performing a SELECT operation on a table...

PT-2024-40214 · Surrealdb · Surrealdb

Name of the Vulnerable Software and Affected Versions: SurrealDB versions prior to 2.0.4 Description: The issue arises from the order in which permissions are processed, leading to potential leaks of field values or record contents to users without the required permissions. This can occur in...

CVE-2024-45846

An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration is installed on the server. If a specially crafted ‘SELECT WHERE’ clause containing Python code is run against a database created with the Weaviate engine,...