CVE-2026-107045

The Citrine v3.1.0 (versionCode 62) application is affected by a vulnerability where insecure permissions in the CitrineContentProvider component allow unauthorized attackers to arbitrarily read another user's Nostr event database . This flaw is categorized as an Incorrect Permission Assignment f...

CVE-2026-107045

Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 versionCode 62 allows unauthorized attackers to arbitrarily read another's Nostr event database...

PT-2026-132085

Name of the Vulnerable Software and Affected Versions StylemixThemes Motors versions prior to 1.4.127 Description An improper neutralization of special elements used in an SQL command allows for Blind SQL Injection within the vehicle listings extension. This issue enables an attacker to execute...

PT-2026-132302

Insecure permissions in the MirakelInternalContentProvider component of Mirakel v3.0 versionCode 60 allows unauthorized attackers to arbitrarily read and modify another user's task database...

PT-2026-132422

Missing authorisation checks in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any request to read the full contents of a prefixed user or replicator database via an unauthorised API endpoint. The use of prefixed system databases is very rare. Users are recommended to upgrade to...

EUVD-2026-113173

Insecure permissions in the MirakelInternalContentProvider component of Mirakel v3.0 versionCode 60 allows unauthorized attackers to arbitrarily read and modify another user's task database...

PT-2026-132417

Insufficient filtering of credentials in the replicator database in Apache CouchDB 3.5.2 and below on all platforms allows an authenticated user to read replication credentials of other users’ replications, not just their own. Users are recommended to upgrade to version 3.5.3, which fixes this...

A Bootiful Podcast: 'Data Geekery' with JOOQ creator Lukas Eder

Hi, Spring fans! In this conversation, Josh Long explores how JOOQ turns SQL into a type-safe, fluent Java language—making complex database work safer, cleaner, and far more expressive. They cover everything from dynamic SQL transformation and cross-dialect support to low-level security, stored...

CVE-2026-11587: Centreon: SQL injection allowing an authenticated user with access to ACL management to read and modify the Centreon database

SQL injection allowing an authenticated user with access to ACL management to read and modify the Centreon database...

PT-2026-132176

Name of the Vulnerable Software and Affected Versions helloworld1 AnyMemo version 20260730 Description Insecure permissions in the CardProvider content provider component allow unauthorized attackers to arbitrarily read flashcard content across the user's entire memorization database...

CVE-2026-114358: Radius Synergies Radius Xenia M2M Platform: This vulnerability exists in the Radius Xenia M2M Platform due to insufficient validation of user supplied input in the…

This vulnerability exists in the Radius Xenia M2M Platform due to insufficient validation of user supplied input in the password recovery functionality in the web management interface. An unauthenticated remote attacker could exploit this vulnerability by supplying crafted SQL query through input...

Radius Synergies Radius Xenia M2M Platform SQL injection vulnerability

The Radius Synergies Radius Xenia M2M Platform contains an SQL injection vulnerability. This vulnerability stems from insufficient input validation in the password recovery functionality within its web management interface. Unauthenticated remote attackers can supply specially crafted SQL queries...

CVE-2026-107056

Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows unauthorized attackers to inject crafted tracking data into the victim's location database via a crafted SEND message...

CVE-2026-107056

OpenTracks version 6751 is vulnerable to a security flaw caused by insecure permissions in the io.file.importer.ImportActivity component. This vulnerability allows unauthorized attackers to inject crafted tracking data into a victim's location database by sending a specially designed SEND message...

WordPress Social Web Suite SQL injection vulnerability

WordPress Social Web Suite versions 4.1.12 and earlier contain an SQL injection vulnerability. This vulnerability stems from insufficient escaping of the ‘excludeposts’ parameter and inadequate preparation of SQL queries. Unauthenticated attackers can append additional SQL queries to extract...

Server Optimizer DoS

Vulnerability of the Server component: The Optimizer for Oracle Database Management System MySQL Server is affected by uncontrolled resource consumption. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

Server Optimizer DoS

Vulnerability of the Server component: The Optimizer for Oracle Database Management System MySQL Server is affected by uncontrolled resource consumption. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

Server Optimizer DoS

Vulnerability of the Server component: The Optimizer for Oracle Database Management System MySQL Server is affected by uncontrolled resource consumption. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

Server Optimizer DoS

Vulnerability of the Server component: The Optimizer for Oracle Database Management System MySQL Server is affected by uncontrolled resource consumption. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

CVE-2026-107056: n/a: Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows…

Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows unauthorized attackers to inject crafted tracking data into the victim's location database via a crafted SEND message...