327699 matches found
EUVD-2026-59089
In the Linux kernel, the following vulnerability has been resolved: mtd: mchp23k256: use SPI match data for chip caps The driver stores chip capacity information in both the OF match table and the SPI id table. Probe currently uses ofdevicegetmatchdata, so a non-OF SPI modalias match falls back t...
EUVD-2026-58875
AppFlowy's qcuiknote feature is affected by a SQL injection vulnerability. Authenticated users with access to the feature can inject arbitrary SQL to exfiltrate data in the underlying SQL database...
CVE-2026-16007
AppFlowy's qcuiknote feature is affected by a SQL injection vulnerability. Authenticated users with access to the feature can inject arbitrary SQL to exfiltrate data in the underlying SQL database...
CVE-2026-16007 Authenticated SQL Injection in AppFlowy
AppFlowy's qcuiknote feature is affected by a SQL injection vulnerability. Authenticated users with access to the feature can inject arbitrary SQL to exfiltrate data in the underlying SQL database...
CVE-2026-16007
CVE-2026-16007: A SQL injection in AppFlowy’s qcuiknote feature affects authenticated users with access to that feature, allowing arbitrary SQL exfiltration from the underlying database. The vulnerability is tied to the qcuiknote module; no specific affected versions, root-cause details, or remed...
MINI-MHGQ-83WX-WCG2
Bulletin has no description...
MINI-449H-VJJ5-XQRF
Bulletin has no description...
MINI-6998-35G2-7962
Bulletin has no description...
CVE-2026-16146
CVE-2026-16146 affects the WordPress plugin “Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms.” All versions up to 5.1 are affected by a generic SQL Injection in Pattern JSON Keys/Values caused by insufficient escaping of user-supplied input and inadequate query preparation. Th...
EUVD-2026-58858
The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to Second-Order SQL Injection via MultipleFiles Second-Order Payload via 'cgmultiplefilesforpost' - 'cgRealId' in all versions up to, and including, 30.0.7 due to insufficient escaping ...
EUVD-2026-58855
The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to generic SQL Injection via the 'tagquery' parameter in all versions up to, and including, 4.5.14 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...
CVE-2026-15341
creationtimestamp| type| source ---|---|--- 2026-08-15 03:00:23+00:00| seen| https://infosec.exchange/users/offseq/statuses/117097288379770973 2026-08-15 03:00:25+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mt3olr7vcm2a 2026-08-15 03:20:04+00:00| seen|...
PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands
...
CVE-2026-12128 Pinpoint Booking System <= 2.9.9.6.8 - Unauthenticated Improper Input Validation to Price Manipulation via 'cart_data' Parameter
The Pinpoint Booking System – Version 2 plugin for WordPress is vulnerable to Price Manipulation via the cartdata parameter in all versions up to, and including, 2.9.9.6.8. This is due to the dopbspwoocommerceaddtocart AJAX action being registered via wpajaxnopriv with no authentication, no nonce...
CVE-2026-15162
The Object Sync for Salesforce plugin is vulnerable to unauthenticated SQL Injection via the wordpressobjecttype parameter of its /wp-json/object-sync-for-salesforce/push/ REST route. The route's permission callback canprocess checks only the HTTP method for the push class — no capability or nonc...
CVE-2026-16080
The Image Uploader for Welcart plugin for WordPress is vulnerable to generic SQL Injection via the 'posttitle' parameter in all versions up to, and including, 1.4.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes...
CVE-2026-49844 vulnerabilities
Vulnerabilities for packages: neo4j, spdx-tools-java, infinispan, druid, strimzi-kafka-operator, thingsboard, spark, kafka, trino, celeborn, solr, apache-tika, kserve-modelmesh, wildfly, akhq, flink, apache-pulsar, opensearch, sonarqube, apache-activemq-artemis, keycloak-config-cli, zipkin,...
MINI-RMV3-64V6-X8RJ
Bulletin has no description...