Lucene search
K

4688 matches found

Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.5 views

PT-2026-2114

Name of the Vulnerable Software and Affected Versions ClipBucket versions 5.5.2 through 5.5.2-187 Description ClipBucket v5 is a video sharing platform susceptible to a Blind SQL Injection issue. The flaw exists within the add comment section of a channel. An attacker can exploit this by sending ...

9.8CVSS7.3AI score0.00342EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2026/01/06 4:36 p.m.2 views

CVE-2025-69351 WordPress Ninja Tables plugin <= 5.2.4 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Shahjahan Jewel Ninja Tables ninja-tables allows Blind SQL Injection.This issue affects Ninja Tables: from n/a through = 5.2.4...

8.5CVSS7.3AI score0.00205EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/06 4:36 p.m.25 views

CVE-2025-69351 WordPress Ninja Tables plugin <= 5.2.4 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Shahjahan Jewel Ninja Tables ninja-tables allows Blind SQL Injection.This issue affects Ninja Tables: from n/a through = 5.2.4...

8.5CVSS0.00205EPSS
Exploits0References1
OSV
OSV
added 2026/01/06 4:15 p.m.2 views

CVE-2025-59379

DwyerOmega Isensix Advanced Remote Monitoring System ARMS 1.5.7 allows an attacker to retrieve sensitive information from the underlying SQL database via Blind SQL Injection through the user parameter in the login page. This allows an attacker to steal credentials, which may be cleartext, from...

7.5CVSS5.9AI score0.00341EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/01/06 12:0 a.m.2 views

DwyerOmega Isensix Advanced Remote Monitoring System 安全漏洞

DwyerOmega Isensix Advanced Remote Monitoring System is a wireless environmental monitoring system from DwyerOmega Canada. A security vulnerability exists in DwyerOmega Isensix Advanced Remote Monitoring System version 1.5.7, which originates from a blind SQL injection via user parameters on the...

7.5CVSS7.7AI score0.00341EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/01/06 12:0 a.m.2 views

PT-2026-1459

Name of the Vulnerable Software and Affected Versions DwyerOmega Isensix Advanced Remote Monitoring System ARMS version 1.5.7 Description The software allows an attacker to retrieve sensitive information from the underlying SQL database via Blind SQL Injection through the user parameter in the...

7.5CVSS7.2AI score0.00341EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2026/01/01 8:27 p.m.13 views

CVE-2025-28949

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Codedraft Mediabay - WordPress Media Library Folders allows Blind SQL Injection.This issue affects Mediabay - WordPress Media Library Folders: from n/a through 1.4...

8.5CVSS5.6AI score0.00209EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/31 9:30 p.m.5 views

EUVD-2025-206074

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Codedraft Mediabay - WordPress Media Library Folders allows Blind SQL Injection.This issue affects Mediabay - WordPress Media Library Folders: from n/a through 1.4...

8.5CVSS7.1AI score0.00209EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/12/31 5:6 p.m.1 views

CVE-2025-59129

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in appointify Appointify appointify allows Blind SQL Injection.This issue affects Appointify: from n/a through = 1.0.8...

7.6CVSS5.9AI score0.00304EPSS
Exploits0References1
NVD
NVD
added 2025/12/30 5:15 p.m.4 views

CVE-2025-59129

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in appointify Appointify appointify allows Blind SQL Injection.This issue affects Appointify: from n/a through = 1.0.8...

7.6CVSS0.00304EPSS
Exploits0References1
CVE
CVE
added 2025/12/30 4:51 p.m.8 views

CVE-2025-59129

Technical details for CVE-2025-59129 are not publicly provided in the supplied documents. The available data mentions Appointify with a SQL injection label affecting

7.6CVSS5.9AI score0.00304EPSS
Exploits0References1
NVD
NVD
added 2025/12/30 11:15 a.m.1 views

CVE-2025-68990

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in xenioushk BWL Pro Voting Manager bwl-pro-voting-manager allows Blind SQL Injection.This issue affects BWL Pro Voting Manager: from n/a through = 1.4.9...

8.5CVSS0.00253EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/30 10:47 a.m.1 views

CVE-2025-68990 WordPress BWL Pro Voting Manager plugin <= 1.4.9 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in xenioushk BWL Pro Voting Manager bwl-pro-voting-manager allows Blind SQL Injection.This issue affects BWL Pro Voting Manager: from n/a through = 1.4.9...

8.5CVSS7.3AI score0.00253EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/30 12:0 a.m.2 views

PT-2025-53879

Name of the Vulnerable Software and Affected Versions BWL Pro Voting Manager versions through 1.4.9 Description The BWL Pro Voting Manager software contains a flaw due to improper neutralization of special elements within SQL commands, leading to a potential SQL Injection issue. This allows for...

9.8CVSS7.6AI score0.00253EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.1 views

WordPress plugin Appointify SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A SQL injectio...

7.6CVSS5.9AI score0.00304EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/25 1:23 p.m.4 views

CVE-2025-68570

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Blind SQL Injection.This issue affects Captivate Sync: from n/a through = 3.2.2...

7.6CVSS7.7AI score0.00285EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/25 1:23 p.m.2 views

CVE-2025-68590

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CRM Perks Integration for Contact Form 7 HubSpot cf7-hubspot allows Blind SQL Injection.This issue affects Integration for Contact Form 7 HubSpot: from n/a through = 1.4.2...

7.6CVSS7.6AI score0.00285EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/25 1:23 p.m.3 views

CVE-2023-36525

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPJobBoard allows Blind SQL Injection.This issue affects WPJobBoard: from n/a through 5.9.0...

8.6CVSS7.6AI score0.00326EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/24 3:30 p.m.3 views

EUVD-2025-205245

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CRM Perks Integration for Contact Form 7 HubSpot cf7-hubspot allows Blind SQL Injection.This issue affects Integration for Contact Form 7 HubSpot: from n/a through = 1.4.2...

9.8CVSS7.1AI score0.00285EPSS
Exploits0References2
EUVD
EUVD
added 2025/12/24 3:30 p.m.3 views

EUVD-2025-205200

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BeRocket Brands for WooCommerce brands-for-woocommerce allows Blind SQL Injection.This issue affects Brands for WooCommerce: from n/a through = 3.8.6.3...

9.8CVSS7.1AI score0.00219EPSS
Exploits0References2
Rows per page
Query Builder