96184 matches found
CVE-2026-79570
The software mfish-nocode-pro v1.0.0 is vulnerable to a SQL injection flaw located in the tableName parameter at the /sys/dbConnect/data endpoint. An attacker can exploit this by sending a crafted SQL statement to gain unauthorized access to sensitive database information . The vulnerability has ...
PT-2026-87104
A Cross-Site Request Forgery CSRF vulnerability in WatchGuard Dimension's database snapshot creation feature allows a remote attacker to trigger unauthorized snapshot creation by tricking an authenticated administrator into visiting a specially crafted web page...
CVE-2026-79570
mfish-nocode-pro v1.0.0 was discovered to contain a SQL injection vulnerability in the tableName parameter at /sys/dbConnect/data. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement...
PT-2026-87099
A SQL injection vulnerability in the ap form id parameter in AppNitro MachForm v30 allows attackers to access sensitive database information via a crafted SQL statement...
PT-2026-87144
mfish-nocode-pro v1.0.0 was discovered to contain a SQL injection vulnerability in the tableName parameter at /sys/dbConnect/data. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement...
PT-2026-86948
SAP S/4HANA Intercompany Matching and Reconciliation allows a low-privileged authenticated user to inject malicious input into certain functions, which may be processed by the database without proper validation. This could allow the user to access sensitive information, resulting in high impact o...
PT-2026-87047
Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...
CVE-2026-77098: Improper Neutralization of Special Elements used in an SQL Command
Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...
EulerOS 2.0 SP12 : sqlite (EulerOS-SA-2026-3388)
According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process...
CVE-2026-82753
Allocation of Resources Without Limits or Throttling vulnerability in ash-project ashauthenticationoauth2server allows an unauthenticated attacker to exhaust database storage and memory. The /authorize endpoint is unauthenticated by design. With Client ID Metadata Documents enabled, resolveclient...
CVE-2026-82753
Allocation of Resources Without Limits or Throttling vulnerability in ash-project ashauthenticationoauth2server allows an unauthenticated attacker to exhaust database storage and memory. The /authorize endpoint is unauthenticated by design. With Client ID Metadata Documents enabled, resolveclient...
CVE-2026-38291
creationtimestamp| type| source ---|---|--- 2026-09-07 10:30:03+00:00| seen| https://bsky.app/profile/cvedatabase.bsky.social/post/3muwcgx2jkj23...
r2ai v1.4.4
R2AI - Augmented reversing with LLM for radare2 ╭─────────────────────────────────╮ │ , . . , │ ╭──╮ │ : \ \ |: \ : | │ │ │ │ | |/ || , || : | │ │ O O | : \ \ . || : || | │ │ │╷ │ | |\ :||| || | │ │ ││ │ || : |||| │ │ ─╯│ ╰─────────────────────────────────╯ ╰───╯ Components This repository...
PT-2026-86918
Allocation of Resources Without Limits or Throttling vulnerability in ash-project ash authentication oauth2 server allows an unauthenticated attacker to exhaust database storage and memory. The /authorize endpoint is unauthenticated by design. With Client ID Metadata Documents enabled, resolve...
CVE-2026-82753: Allocation of Resources Without Limits or Throttling
Allocation of Resources Without Limits or Throttling vulnerability in ash-project ashauthenticationoauth2server allows an unauthenticated attacker to exhaust database storage and memory. The /authorize endpoint is unauthenticated by design. With Client ID Metadata Documents enabled, resolveclient...
CVE-2026-86302: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /HIS/his.sql of the component SQL Database Backup File Handler. Performing a manipulation results in information disclosure. Remote exploitation of th...
Construction and Natural Language Querying of a Cybersecurity Knowledge Graph
Cybersecurity vulnerability information is distributed across numerous platforms and databases, making it difficult for researchers and practitioners to obtain a unified and structured understanding of existing threats. This is a critical issue in cybersecurity, where timely access to accurate...
ROS-20260907-73-0063
The vulnerability of the closesqleditorsession and checktransactionstatus functions in the pgAdmin 4 database management tool is related to the lack of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
Malicious code in dropbox-database (npm)
Source: ossf-package-analysis 7e77ce2fd7298faebe08ecd823f0705a710d5aa18d8b81252b08f843ea7ccda2 The OpenSSF Package Analysis project identified 'dropbox-database' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...