Lucene search
+L

84102 matches found

NVD
NVD
added 2026/07/17 5:17 p.m.7 views

CVE-2026-63307

Chat2DB before 5.3.0 contains an insecure direct object reference vulnerability in the GET /api/connection/datasource/id endpoint. The handler calls dataSourceService.queryExistentid, ... without an ownership check and returns the decrypted password field, allowing any authenticated non-admin use...

7.1CVSS0.00231EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/17 5:17 p.m.9 views

CVE-2026-49209

Symfony UX is a JavaScript ecosystem for Symfony. From 2.5.0 until 2.36.0 and 3.1.0, Symfony\UX\LiveComponent\Controller\BatchActionController::invoke iterates over the client-supplied actions array and issues a full HttpKernel sub-request for each entry; because the array size is never bounded, ...

6.5CVSS0.00312EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/17 3:57 p.m.14 views

CVE-2026-9586

CVE-2026-9586 describes an unauthenticated SQL injection in Sangoma Switchvox SMB Edition 8.3. The vulnerable component is the /pa endpoint, which processes XML beginning with and directly concatenates the user-controlled PhoneIP value into PostgreSQL queries, enabling arbitrary SQL execution an...

9.3CVSS6.7AI score0.00411EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/17 3:57 p.m.37 views

CVE-2026-9586 Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB

An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 104997. The /pa endpoint processes XML content beginning with and directly concatenates the user-controlled PhoneIP value into PostgreSQL queries without sanitization or parameterization. An unauthenticated...

9.3CVSS0.00411EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/17 3:57 p.m.13 views

EUVD-2026-45205

An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 104997. The /pa endpoint processes XML content beginning with and directly concatenates the user-controlled PhoneIP value into PostgreSQL queries without sanitization or parameterization. An unauthenticated...

9.3CVSS6.6AI score0.00411EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/17 3:50 p.m.9 views

EUVD-2026-45201

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Gis Informatics Engineering Consulting Laboratory R&D and Software Services Inc. GisLab Laboratory Management System allows SQL Injection. This issue affects GisLab Laboratory Management System: fr...

9.8CVSS5.6AI score0.0026EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/17 3:50 p.m.14 views

CVE-2026-8297 SQLi in GIS Informatics' GisLab Laboratory Management System

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Gis Informatics Engineering Consulting Laboratory R&D and Software Services Inc. GisLab Laboratory Management System allows SQL Injection. This issue affects GisLab Laboratory Management System: fr...

9.8CVSS5.7AI score0.0026EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/17 12:45 p.m.17 views

CVE-2026-16014

The CVE-2026-16014 entry concerns code-projects Hospital Bed Management System 1.0. It identifies a vulnerability in an unspecified part of the Login Form, where manipulating the Username argument triggers a SQL injection. The vulnerability enables remote exploitation, and public exploits exist. ...

7.5CVSS7.1AI score0.00263EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/17 11:39 a.m.3 views

SUSE-SU-2026:3098-1 Security update for shibboleth-sp

This update for shibboleth-sp fixes the following issue: - CVE-2025-9943: SQL injection in the 'ID' attribute of the SAML response when the replay cache of the Shibboleth Service Provider SP is configured to use an SQL database as storage service bsc1249394...

9.1CVSS5.6AI score0.00368EPSS
SaveExploits0References3
Veracode
Veracode
added 2026/07/17 11:31 a.m.10 views

Exposure Of Sensitive Information

github.com/forgekeep/nebula-mesh is vulnerable to Exposure of Sensitive Information. The vulnerability is due to operator session tokens being stored in plaintext in the database rather than in a protected or hashed form, which allows an attacker with access to the database e.g., through backups,...

5.3AI score
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2026/07/17 11:15 a.m.39 views

CVE-2026-16009 itsourcecode Hospital Management System prescriptionorderdetail.php sql injection

A vulnerability was detected in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /prescriptionorderdetail.php. The manipulation of the argument delid results in sql injection. The attack can be launched remotely. The exploit is now public and may be used...

6.5CVSS0.002EPSS
SaveExploits0References6
Microsoft CVE
Microsoft CVE
added 2026/07/17 8:2 a.m.10 views

DBI::ProfileData versions before 1.651 for Perl do not limit the path index

...

7.5CVSS5.2AI score0.00379EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/07/17 8:2 a.m.9 views

DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row

...

9.1CVSS5.2AI score0.00387EPSS
SaveExploits0
NVD
NVD
added 2026/07/17 2:18 a.m.13 views

CVE-2026-62238

OpenRemote before 1.26.0 contain an authenticated SQL injection vulnerability in the datapoint crosstab export endpoint that constructs PostgreSQL queries by concatenating asset display names into raw SQL. An authenticated attacker with asset creation or rename permissions can inject SQL through...

8.8CVSS0.00333EPSS
SaveExploits1References2
Fedora
Fedora
added 2026/07/17 1:9 a.m.15 views

[SECURITY] Fedora 43 Update: perl-DBI-1.650-1.fc43

DBI is a database access Application Programming Interface API for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used...

9.8CVSS6.1AI score0.00479EPSS
SaveExploits0
EUVD
EUVD
added 2026/07/17 12:7 a.m.36 views

EUVD-2026-45084

OpenRemote before 1.26.0 contain an authenticated SQL injection vulnerability in the datapoint crosstab export endpoint that constructs PostgreSQL queries by concatenating asset display names into raw SQL. An authenticated attacker with asset creation or rename permissions can inject SQL through...

7.2CVSS6.1AI score0.00333EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2026/07/17 12:0 a.m.13 views

PT-2026-60805

Name of the Vulnerable Software and Affected Versions Chat2DB versions prior to 5.3.0 Description An insecure direct object reference occurs when the application provides direct access to objects based on user-supplied input. In the 'GET /api/connection/datasource/id' endpoint, the handler calls...

7.1CVSS5.9AI score0.00231EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/17 12:0 a.m.24 views

PT-2026-60855

Name of the Vulnerable Software and Affected Versions WordPress versions 6.8.0 through 6.8.5 WordPress versions 6.9.0 through 6.9.4 WordPress versions 7.0.0 through 7.0.1 Description WordPress Core contains multiple security issues that can be chained to allow a remote, unauthenticated attacker t...

9.8CVSS6.7AI score0.98417EPSS
SaveExploits68References140
Tenable Nessus
Tenable Nessus
added 2026/07/17 12:0 a.m.5 views

Fedora 43 : perl-DBI (2026-71d7e4d1da)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-71d7e4d1da advisory. 1.650 bump - Fix CVE-2026-14739, CVE-2026-14740 and CVE-2026-14380 Tenable has extracted the preceding description block directly from the Fedora...

9.8CVSS5.5AI score0.00479EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/17 12:0 a.m.13 views

PT-2026-60861

Name of the Vulnerable Software and Affected Versions IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.4 Description A trap occurs during the compilation of specially crafted statements containing subqueries, which can lead to a denial of service. Recommendations At the...

5.5CVSS5.9AI score0.00103EPSS
SaveExploits0References4
Rows per page
Query Builder