CVE-2025-64748: Insertion of Sensitive Information Into Sent Data

Directus is a real-time API and App dashboard for managing SQL database content. A vulnerability in versions prior to 11.13.0 allows authenticated users to search concealed/sensitive fields when they have read permissions. While actual values remain masked , successful matches can be detected...

CVE-2018-20678: Improper Neutralization of Special Elements used in an SQL Command

LibreNMS through 1.47 allows SQL injection via the html/ajaxtable.php sorthostname parameter, exploitable by authenticated users during a search...