PT-2026-103086

Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, leading to a SQL Structured Query Language injection. This...

CVE-2026-102098: Improper Neutralization of Special Elements used in an SQL Command

Kiteworks Core before version 9.5.0 is vulnerable to SQL Injection. A stored SQL injection vulnerability in a Kiteworks administrative reporting feature could allow an authenticated administrator to read sensitive data from the underlying database and to affect the availability of the service...

The vulnerability of the Azure SQL Database, a cloud relational database, stems from the lack of protection for SQL query structures, allowing attackers to exploit their privileges.

The vulnerability of the Azure SQL Database cloud relational database model is related to the lack of security measures for SQL query structures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

The vulnerability of the Azure SQL Database, a cloud relational database, stems from the lack of protection for SQL query structures, allowing attackers to exploit their privileges.

The vulnerability of the Azure SQL Database cloud relational database model is related to the lack of security measures for SQL query structures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

PT-2026-102968

Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipher export convenience function can be used to copy the contents of one attached database into another. It is most often used to convert between plaintext and encrypted databases. It needs to do dynamic schema manipulation, and thus...

CVE-2026-51936: Improper Neutralization of Special Elements used in an SQL Command

Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipherexport convenience function can be used to copy the contents of one attached database into another. It is most often used to convert between plaintext and encrypted databases. It needs to do dynamic schema manipulation, and thus t...

PT-2026-103078

Name of the Vulnerable Software and Affected Versions EasyFlow .NET affected versions not specified Description An SQL Injection flaw allows authenticated remote attackers to inject arbitrary SQL commands, enabling them to read sensitive database contents. Recommendations At the moment, there is ...

CVE-2026-102456: Improper Neutralization of Special Elements used in an SQL Command

EasyFlow .NET developed by Digiwin has an SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL commands to read database contents...

AlmaLinux 9.2 [TuxCare] Security Update: ncurses / ncurses-base / ncurses-c++-libs / ncurses-compat-libs / etc (ALMALINUX9.2:CLSA-2025:1739387560)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1739387560 advisory. - ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security- relevant memory corruption via...

AlmaLinux 9.2 [TuxCare] Security Update: bind / bind-chroot / bind-devel / bind-dnssec-doc / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1739386415)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1739386415 advisory. - A flaw in query-handling code can cause named to exit prematurely with an assertion failure when: - nxdomain-redirect ; is...

CentOS Linux 8 [TuxCare] Security Update: bind / bind-chroot / bind-devel / bind-export-devel / etc (CENTOS-STREAM8:CLSA-2026:1787670751)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1787670751 advisory. - To keep its cache database efficient, named running as a recursive resolver occasionally attempts to clean up the database. It uses...

AlmaLinux 9.2 [TuxCare] Security Update: redis / redis-devel / redis-doc (ALMALINUX9.2:CLSA-2025:1750785864)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1750785864 advisory. - Redis is an open source, in-memory database that persists on disk. In versions starting at 2.6 and prior to 7.4.3, An unauthenticated clien...

Rocky Linux 9.6 [TuxCare] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc (ALMALINUX9.6:CLSA-2026:1774258892)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1774258892 advisory. - Improper validation of type oidvector in PostgreSQL allows a database user to disclose a few bytes of server memory. We have not ruled ou...

CVE-2026-71379

The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request...

Security Bulletin: EDB Postgres AI Database with IBM is affected by Multiple Vulnerabilities.

Summary Multiple Vulnerabilities found in EDB PGAI database products. Hence, IBM strongly recommends upgrading to 18.6 Vulnerability Details CVEID:CVE-2026-30922 DESCRIPTION: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the pyasn1 library is vulnerable to a Denial of Service DoS...

CVE-2026-71379 Toptech TMS7 and TopHAT Files or Directories Accessible to External Parties

The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request...

CVE-2026-71379 Toptech TMS7 and TopHAT Files or Directories Accessible to External Parties

The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request...

CVE-2026-71379

The Toptech TMS7 and TopHAT systems are affected by a vulnerability in the file export endpoint . An unauthenticated attacker can exploit this by sending a crafted POST request to export arbitrary database tables . This flaw allows for unauthorized access to sensitive data. While specific exploit...

CVE-2026-79536

bytebase dbhub v1.2.0 was discovered to contain a SQL injection vulnerability in the /utils/sql-parser.ts component. This vulnerability allows attackers to access sensitive databse information via a crafted SQL statement...

OPENSUSE-SU-2026:22003-1 Security update for python-pymongo

This update for python-pymongo fixes the following issues: Changes in python-pymongo: - CVE-2026-96749: integer overflow in BSON document encoding allows an unprivileged user to write outside the bounds of an allocated buffer bsc1282845 - CVE-2026-96748: host injection in connection string leadin...