SUSE CVE-2026-6638

SQL injection in PostgreSQL logical replication ALTER SUBSCRIPTION ... REFRESH PUBLICATION allows a subscriber table creator to execute arbitrary SQL with the subscription's publication-side credentials. The attack takes effect at the next REFRESH PUBLICATION. Within major versions 16, 17, and 18...

CVE-2026-32767 SiYuan: Authorization Bypass Allows Arbitrary SQL Execution via Search API

SiYuan is a personal knowledge management system. Versions 3.6.0 and below contain an authorization bypass vulnerability in the /api/search/fullTextSearchBlock endpoint. When the method parameter is set to 2, the endpoint passes user-supplied input directly as a raw SQL statement to the underlyin...

The vulnerability of the selectDeviceListBy method in the software for controlling power supply sources of Voltronic Power ViewPower allows a malicious actor to execute arbitrary SQL queries.

The vulnerability of the selectDeviceListBy method in the software for managing power sources of Voltronic Power ViewPower Pro is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries remotely...

The vulnerability of the Clone function in the GLPI system, which handles requests, incidents, and inventory management of computer equipment, allows a hacker to execute arbitrary SQL commands.

The vulnerability of the Clone function in the GLPI system for requests, incidents, and inventory management is related to the improper elimination of special elements used in SQL queries. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

postgresql: TYPE in pg_temp executes arbitrary SQL during SECURITY DEFINER execution

A flaw was discovered in postgresql where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute arbitrary SQL as the owner of the function...

Redgate SQL Monitor Arbitrary SQL Command Execution Vulnerability

Redgate SQL Monitor is a SQL Server monitor that monitors and analyzes database and task operations in real time and generates PDF documents. A security vulnerability exists in Redgate SQL Monitor, which can be exploited by a local attacker to submit a special request, gain access to Base Monitor...