CVE-2026-123491

Craft CMS versions 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 are vulnerable to an SQL injection within the GraphQL eager-loading functionality. The root cause is that arguments on eager-loadable nodes absent from the public schema are copied into EagerLoadPlan criteria without proper cleansing....

CVE-2026-123491 Craft CMS 4.0.0 before 4.18.9 Unauthenticated SQL Injection via GraphQL Eager-Load Select

Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains an SQL injection vulnerability in GraphQL eager-loading: arguments on eager-loadable nodes absent from the public schema are copied into EagerLoadPlan criteria without cleansing. Unauthenticated attackers can supply a parenthesized...

CVE-2026-123488

Craft CMS versions 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 are vulnerable to an unauthenticated SQL injection in the element search endpoint. The vulnerability exists because the attribute parameter is concatenated into the query unsanitized, and the use of emulated PDO prepares allows for st...

EUVD-2026-118288

Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains an unauthenticated SQL injection vulnerability in the element search endpoint because the attribute parameter is concatenated into the query unsanitized and emulated PDO prepares allow stacked statements. Remote attackers can read and...

CVE-2026-123488 Craft CMS 4.0.0 before 4.18.9 SQL Injection via Element Search Endpoint

Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains an unauthenticated SQL injection vulnerability in the element search endpoint because the attribute parameter is concatenated into the query unsanitized and emulated PDO prepares allow stacked statements. Remote attackers can read and...

CVE-2026-76181

LibreOffice includes a dBASE database driver, which reads dBASE tables and their .ndx index files when a folder of dBASE files is used as a data source. A heap buffer overflow existed when an index page was read. The number of entries recorded in a page was not checked against the number of entri...

CVE-2026-123285

In JetBrains Datalore before 2026.3 command execution was possible in the database task container via JVM options injection...

EUVD-2026-118050

In JetBrains Datalore before 2026.3 command execution was possible in the database task container via JVM options injection...

CVE-2026-123285

In JetBrains Datalore before 2026.3 command execution was possible in the database task container via JVM options injection...

CVE-2026-123285

In JetBrains Datalore versions prior to 2026.3 , a vulnerability exists that allows for command execution within the database task container. This is caused by a JVM options injection flaw, which is classified under CWE-88 (Improper Neutralization of Argument Delimiters in a Command). The vulnera...

CVE-2026-123087

SQL injection vulnerability in Atmira’s SIREC. The server retrieves the value of a field from a JSON object containing user-supplied information and concatenates it into an SQL statement without properly sanitising the input. This allows the original query to be altered via malicious input, causi...

CVE-2026-109977 YaySMTP <= 2.7.8 - Authenticated (Administrator+) SQL Injection via 'params[searchKey]' Parameter

The YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports plugin for WordPress is vulnerable to time-based SQL Injection via the 'paramssearchKey' parameter in all versions up to, and including, 2.7.8 due to insufficient escaping on the user supplied parameter and lack of sufficient...

EUVD-2026-118028

SQL injection vulnerability in Atmira’s SIREC. The server retrieves the value of a field from a JSON object containing user-supplied information and concatenates it into an SQL statement without properly sanitising the input. This allows the original query to be altered via malicious input, causi...

CVE-2026-76181

A flaw was found in LibreOffice. The application's dBASE database driver fails to validate entry counts against page capacity and does not prevent circular page references when parsing index .ndx files. By convincing a user to open a data source with a specially crafted dBASE index file, an...

CVE-2026-112910

A flaw was found in filelock. On Windows platforms, the library ignores requested file mode permissions when creating lock files and database files, causing them to inherit default permissions from the parent directory's access control list ACL. A local user on the same system can exploit this fl...

CVE-2026-119376

A flaw was found in SQLite. An attacker can cause a Denial of Service DoS by supplying specially crafted SQL queries or an untrusted database view containing deeply chained COLLATE operators. This flaw bypasses expression depth limitations, triggering unbounded recursion and stack exhaustion that...

CVE-2026-115997

A flaw was found in pig. The application fails to properly sanitize sorting parameters, leading to a Structured Query Language SQL injection vulnerability in the SQL filter argument resolver. A remote attacker could exploit this flaw by submitting specially crafted sorting requests to execute...

CVE-2025-54554

CVE-2025-54554 CVE-2025-54554 – Unauthenticated Access in tiaudit REST API leading to Sensitive Information Disclosure Discoverer: Amanpreet Parmar | Sr. Security Engineer @Harvard Medical School Summary: CVE-2025-54554 identifies a vulnerability in the tiaudit component of the ticrypt platform,...

CVE-2026-113370

A flaw was found in Sonatype Nexus Repository. An authenticated user with task creation privileges can modify records in the underlying application database by exploiting a Structured Query Language SQL injection vulnerability. When the optional search reindexing task is enabled, an attacker can...

H2 Database Console - JNDI Injection RCE

The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. An attacker may pass a JNDI driver name and a URL leading to a LDAP or RMI servers, causing remote code execution via the H2 web console versions before...