PT-2026-72887

Name of the Vulnerable Software and Affected Versions WPML Multilingual CMS versions prior to 4.9.6 Description Insufficient escaping of user-supplied input and lack of proper preparation in SQL queries allow authenticated attackers with translator-level access or higher to perform SQL Injection...

PT-2026-72157

Name of the Vulnerable Software and Affected Versions The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress versions prior to 30.0.8 Description An issue exists where authenticated attackers with author-level access and above can perform a Second-Order...

PT-2026-72148

Name of the Vulnerable Software and Affected Versions Image Uploader for Welcart versions prior to 1.4.7 Description The Image Uploader for Welcart plugin for WordPress contains a SQL Injection flaw. This occurs because the plugin does not sufficiently escape the post title parameter and fails to...

PT-2026-72151

Name of the Vulnerable Software and Affected Versions KiviCare – Clinic & Patient Management System EHR versions prior to 4.5.2 Description An issue exists where authenticated attackers with custom-level access and above can perform a generic SQL Injection. This occurs due to insufficient escapin...

CVE-2026-19846

creationtimestamp| type| source ---|---|--- 2026-08-14 23:04:57+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117096362627838188...

EUVD-2026-58786

LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Database CPDB workflow that copies survey participant tokens to the central participant list...

CVE-2026-18403

LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Database CPDB workflow that copies survey participant tokens to the central participant list...

CVE-2026-18403 LimeSurvey Community Edition 7.0.5 - Authenticated SQL injection in CPDB

LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Database CPDB workflow that copies survey participant tokens to the central participant list...

CVE-2026-48528

Metacat is data repository software that helps researchers preserve, share, and discover data. Metacat versions 2.0.0 through 3.4.0 contain an unauthenticated SQL injection vulnerability in the /cn/v1/object and /cn/v2/object REST API endpoints due to unsanitized user input that can be passed...

CVE-2026-19680

A SQL injection vulnerability exists in Security Center that could allow an attacker to access unauthorized data from the application's database...

CVE-2026-48528 Metacat has an unauthenticated SQL injection vulnerability

Metacat is data repository software that helps researchers preserve, share, and discover data. Metacat versions 2.0.0 through 3.4.0 contain an unauthenticated SQL injection vulnerability in the /cn/v1/object and /cn/v2/object REST API endpoints due to unsanitized user input that can be passed...

CVE-2026-48528

CVE-2026-48528 affects Metacat versions 2.0.0–3.4.0 and describes an unauthenticated SQL injection in the /cn/v1/object and /cn/v2/object REST endpoints due to unsanitized nodeId input. The backend SQL queries concatenate user input, enabling arbitrary data extraction from PostgreSQL and potentia...

CVE-2026-73847 Emlog: Missing CSRF protection in AI Assistant execute_tool leads to full database compromise and admin account takeover

Emlog is an open source website building system. In 2.6.26 and earlier, missing CSRF protection on the AI Assistant executetool action in admin/ai.php lets a remote unauthenticated attacker submit a forged cross-site request from an attacker-controlled page to a recently logged-in administrator...

EUVD-2026-58740

Emlog is an open source website building system. In 2.6.26 and earlier, missing CSRF protection on the AI Assistant executetool action in admin/ai.php lets a remote unauthenticated attacker submit a forged cross-site request from an attacker-controlled page to a recently logged-in administrator...

CVE-2026-73847 Emlog: Missing CSRF protection in AI Assistant execute_tool leads to full database compromise and admin account takeover

Emlog is an open source website building system. In 2.6.26 and earlier, missing CSRF protection on the AI Assistant executetool action in admin/ai.php lets a remote unauthenticated attacker submit a forged cross-site request from an attacker-controlled page to a recently logged-in administrator...

CVE-2017-17663

creationtimestamp| type| source ---|---|--- 2026-08-14 16:00:11+00:00| seen| https://t.me/purpsec/810 2026-08-15 00:00:12+00:00| seen| https://t.me/purpsec/810...

GO-2026-5529 vulnerabilities

Vulnerabilities for packages: dgraph...

GO-2026-6006 vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator, gitlab-operator-fips, datadog-agent-fips, gitlab-operator, tigera-operator-fips...

GO-2024-3072 vulnerabilities

Vulnerabilities for packages: hubble, cilium, cilium-fips, hubble-ui, hubble-ui-backend-fips...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin-fips, nvidia-container-toolkit, podman-fips, k8s-device-plugin, node-feature-discovery-fips, node-feature-discovery, nvidia-container-toolkit-fips, prometheus-podman-exporter-fips, sriov-network-device-plugin, k8s-device-plugin-fips,...