94241 matches found
CLEANSTART-2026-FX89856 Security fix for CVE-2026-59950 applied in: litellm-database 1.85.1-r1
Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-YN75151 Security fix for CVE-2026-71870 applied in: litellm-database 1.85.1-r1
Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-OY92874 Security fix for CVE-2026-55830 applied in: litellm-database 1.85.1-r1
Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-YL68876 Security fix for CVE-2026-71852 applied in: litellm-database 1.85.1-r1
Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...
CVE-2026-67100
HCL BigFix Service Management is affected by SQL Injection flaw and a Cross-Tenant Data Exposure flaw vulnerabilities. which could allow an authenticated attacker to inject database commands to extract sensitive system details, as well as manipulate request values to gain unauthorized access to...
EUVD-2026-82742
The InfiniteWP Client plugin for WordPress is vulnerable to SQL Injection via the getcomments action in versions up to, and including, 1.13.9. This is due to insufficient escaping on the array-key names supplied in the JSON request body before use in a SQL statement: IWPMMBComment::getcomments...
CLEANSTART-2026-TM64317 Redis is an open source, in-memory database that persists on disk
Multiple security vulnerabilities affect the redis package. Redis is an open source, in-memory database that persists on disk. See references for individual vulnerability details...
CVE-2025-69295
CVE-2025-69295 — TeconceTheme Coven Core Blind SQL Injection Vulnerability CVE-2025-69295 is a SQL Injection vulnerability affecting the Coven Core component of the TeconceTheme Coven Core WordPress theme. The vulnerability exists due to improper neutralization of user-supplied input before it is...
EUVD-2026-82597
Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network...
CVE-2026-85878
Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network...
PT-2026-95375
Name of the Vulnerable Software and Affected Versions ArcadeDB versions prior to 26.9.1 Description An issue exists where the system fails to bind the authenticated principal to the DatabaseAsyncTransaction async worker threads during the parallel edge-connect phase of the 'POST...
PT-2026-102161
Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101331
Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100561
Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...
CVE-2026-87775: Improper Neutralization of Special Elements used in an SQL Command
The Tz Weekly Radio Schedule WordPress plugin through 1.8.1 does not sanitize and escape a parameter before using it to build a SQL query on an AJAX action available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract sensitive data from the...
CVE-2026-87774: Improper Neutralization of Special Elements used in an SQL Command
The Tz Weekly Radio Schedule WordPress plugin through 1.8.1 does not sanitize and escape a parameter before using it to build a SQL query on an AJAX action available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract sensitive data from the...
CVE-2026-61820: Improper Neutralization of Special Elements used in an SQL Command
pgpartman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, inherittemplateproperties manually surrounds primary-key column names from pgattribute.attname with double quotes without escaping embedded double-quote characters. A partmanuser who owns a template...
CVE-2026-17607: Improper Neutralization of Special Elements used in an SQL Command
The WP Inventory Manager plugin for WordPress is vulnerable to SQL Injection via the 'where' shortcode attribute of the wpinventory shortcode in versions up to, and including, 2.5.1. This is due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the...
Cisco Identity Services Engine Multiple Vulnerabilities (cisco-sa-ise-sql-inj-3QTKR947)
According to its self-reported version, Cisco ISE is affected by multiple vulnerabilities. - A vulnerability in Cisco ISE could allow an unauthenticated, remote attacker to conduct SQL injection attacks on an affected device. This vulnerability is due to improper validation of user-supplied input...