Lucene search
+L

13473 matches found

RedhatCVE
RedhatCVE
•added 2026/11/12 4:54 p.m.•2 views

CVE-2026-116318

A flaw was found in PostgreSQL's pgdump utility. An authenticated database user with permission to create objects can trigger a SQL injection vulnerability by defining an inherited column with a child-local constraint whose name requires quoting. When the resulting database dump is restored, this...

8.8CVSS6.1AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/11/12 4:54 p.m.•2 views

CVE-2026-116316

A flaw was found in PostgreSQL. An authenticated database user can achieve privilege escalation and execute arbitrary SQL commands with the permissions of another session. By defining a custom data type in a temporary schema pgtemp, an attacker can cause a victim's security-restricted operation t...

8.8CVSS6.7AI score
SaveExploits0References4
Kitploit
Kitploit
•added 2026/11/11 11:11 p.m.•36 views

CVE-2023-50070

CVE-2023-50070 Customer Support System 1.0 - Multiple SQL injection vulnerabilities - saveticket Description : Multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=saveticket in Customer Support System 1.0 allow authenticated attackers to execute arbitrary SQL commands via...

8.8CVSS8.6AI score0.00786EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/11/11 11:19 a.m.•36 views

CVE-2024-40443

CVE-2024-40443 CVE-2024-40443 - A SQL Injection vulnerability in Computer Laboratory Management System v1.0 allows attackers to execute arbitrary SQL commands...

4.3CVSS6.5AI score0.00776EPSS
SaveExploits2
Nuclei
Nuclei
•added 2026/11/11 2:03 a.m.•146 views

TurboMeeting - Boolean-based SQL Injection

A Boolean-based SQL injection vulnerability in the "RHUB TurboMeeting" web application. This vulnerability could allow an attacker to execute arbitrary SQL commands on the database server, potentially allowing them to access sensitive data or compromise the server. id: CVE-2024-38289 info: name:...

9.8CVSS6.8AI score0.40609EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/11/11 12:32 a.m.•6 views

EUVD-2026-122981

Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary SQL...

8.3CVSS8.5AI score0.00939EPSS
SaveExploits0References2
NVD
NVD
•added 2026/11/10 10:18 p.m.•5 views

CVE-2026-121900

Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary SQL...

8.3CVSS0.00939EPSS
SaveExploits0References1
NVD
NVD
•added 2026/11/10 10:18 p.m.•5 views

CVE-2026-121894

Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary SQL...

9.9CVSS0.01052EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/11/10 9:30 p.m.•19 views

CVE-2026-121900 Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary SQL...

8.3CVSS0.00939EPSS
SaveExploits0References1
CVE
CVE
•added 2026/11/10 9:30 p.m.•8 views

CVE-2026-121900

Adobe Connect is affected by an SQL Injection vulnerability (CWE-89) caused by improper neutralization of special elements used in an SQL command. A low-privileged attacker can exploit this flaw to execute arbitrary SQL commands without user interaction. This vulnerability could potentially resul...

8.3CVSS8.5AI score0.00939EPSS
SaveExploits0References1
CVE
CVE
•added 2026/11/10 9:30 p.m.•9 views

CVE-2026-121894

Adobe Connect is affected by an SQL Injection vulnerability (CWE-89) caused by the improper neutralization of special elements used in an SQL command. A low-privileged attacker could exploit this to execute arbitrary SQL commands, potentially leading to arbitrary code execution in the context of ...

9.9CVSS9.2AI score0.01052EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/11/10 9:30 p.m.•19 views

CVE-2026-121894 Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary SQL...

9.9CVSS0.01052EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/11/10 7:35 p.m.•30 views

CVE-2024-34222

Human Resource Management System 1.0 Submitter: Kha Do Vulnerability SQL injection Description SQL injection vulnerability in /hrm/country.php in SourceCodester Human Resource Management System 1.0 allow attackers to execute arbitrary SQL commands via the searccountry parameters. Affected compone...

5.9CVSS6.6AI score0.00395EPSS
SaveExploits1
Nuclei
Nuclei
•added 2026/11/10 2:04 a.m.•15 views

FUXA <= 1.1.12 - Unauthenticated SQL Injection

FUXA = 1.1.12 contains a SQL injection caused by unsanitized input in /api/signin, letting attackers execute arbitrary SQL commands, exploit requires sending crafted input to the endpoint. id: CVE-2023-31719 info: name: FUXA = 1.1.12 - Unauthenticated SQL Injection author: Securin severity:...

9.8CVSS9.1AI score0.44363EPSS
SaveExploits1References4
Nuclei
Nuclei
•added 2026/11/10 2:04 a.m.•102 views

Zabbix - SQL Injection

Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggleids array parameter in latest.php and perform SQL injection attacks. id: CVE-2016-10134 info: name: Zabbix - SQL Injection author: princechaddha severity: critical description: Zabbix...

9.8CVSS9.2AI score0.82677EPSS
SaveExploits25References5
Positive Technologies
Positive Technologies
•added 2026/11/10 12:00 a.m.•3 views

PT-2026-144804

Name of the Vulnerable Software and Affected Versions Adobe Connect affected versions not specified Description An Improper Neutralization of Special Elements used in an SQL Command SQL Injection allows a low-privileged attacker to execute arbitrary SQL commands. This can lead to arbitrary code...

9.9CVSS9.3AI score0.01052EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/11/10 12:00 a.m.•5 views

PT-2026-144807

Name of the Vulnerable Software and Affected Versions Adobe Connect affected versions not specified Description An Improper Neutralization of Special Elements used in an SQL Command SQL Injection allows a low-privileged attacker to execute arbitrary SQL commands. This can lead to arbitrary code...

8.3CVSS8.6AI score0.00939EPSS
SaveExploits0References6
NVD
NVD
•added 2026/11/08 7:17 p.m.•17 views

CVE-2026-84030

IBM Guardium Data Protection 12.2.4 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

5.6CVSS0.00305EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/11/08 6:41 p.m.•9 views

EUVD-2026-119730

IBM Guardium Data Protection 12.2.4 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

5.6CVSS6.8AI score0.00305EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/11/08 6:41 p.m.•32 views

CVE-2026-84030 IBM Guardium Data Protection is affected by multiple vulnerabilities

IBM Guardium Data Protection 12.2.4 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

5.6CVSS0.00305EPSS
SaveExploits0References1
Rows per page
Query Builder