90064 matches found
CVE-2026-37591
Sourcecodester Storage Unit Rental Management System v1.0 is vulnerable to SQL injection in the file /storage/admin/tenants/viewdetails.php...
KB5084821 - Description of the security update for SQL Server 2016 SP3 GDR: April 14, 2026
None None...
KB5084815 - Description of the security update for SQL Server 2022 GDR: April 14, 2026
None None...
WordPress JetEngine plugin <= 3.8.6.1 - Unauthenticated SQL Injection via '_cct_search' Parameter vulnerability
Unauthenticated SQL Injection via 'cctsearch' Parameter vulnerability discovered by hoshino in WordPress Plugin JetEngine versions = 3.8.6.1...
CVE-2026-40315 PraisonAI: SQLiteConversationStore didn't validate table_prefix when constructing SQL queries
PraisonAI is a multi-agent teams system. Prior to 4.5.133, there is an SQL identifier injection vulnerability in SQLiteConversationStore where the tableprefix configuration value is directly concatenated into SQL queries via f-strings without any validation or sanitization. Since SQL identifiers...
CVE-2026-36922
Sourcecodester Cab Management System v1.0 is vulnerable to SQL injection in the file /cms/admin/categories/viewcategory.php...
CVE-2026-36923
Sourcecodester Cab Management System 1.0 is vulnerable to SQL Injection in the file /cms/admin/bookings/viewbooking.php...
CVE-2026-36872
Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/loadbook.php...
CVE-2026-34262
Information Disclosure Vulnerability in SAP HANA Cockpit and HANA Database Explorer...
CVE-2026-34262 Information Disclosure Vulnerability in SAP HANA Cockpit and HANA Database Explorer
Information Disclosure Vulnerability in SAP HANA Cockpit and HANA Database Explorer...
CVE-2026-34262 Information Disclosure Vulnerability in SAP HANA Cockpit and HANA Database Explorer
Information Disclosure Vulnerability in SAP HANA Cockpit and HANA Database Explorer...
CVE-2026-34262
Information Disclosure Vulnerability in SAP HANA Cockpit and HANA Database Explorer...
EUVD-2026-22173
Information Disclosure Vulnerability in SAP HANA Cockpit and HANA Database Explorer...
CVE-2026-34262
CVE-2026-34262 concerns an information disclosure in SAP HANA Cockpit and SAP HANA Database Explorer. Connected sources indicate the issue allows leakage of X.509 private keys via Database Explorer access, enabling potential server impersonation. The PT-2026-32569 note emphasizes that patching al...
Craft Commerce hasVariant/hasProduct Blind SQL Injection
Overview Craft Commerce’s ProductQuery::hasVariant and VariantQuery::hasProduct properties bypass the unset blocklist added to ElementIndexesController in GHSA-2453-mppf-46cj. The blocklist only strips top-level Yii2 Query properties where, orderBy, etc., but hasVariant and hasProduct pass throug...
SAP ERP和SAP S/4HANA 安全漏洞
SAP ERP and SAP S/4HANA are both products of the German company SAP. SAP ERP is a suite of software used for ERP management. SAP S/4HANA is an enterprise resource management software based on the SAP HANA in-memory database system. There are security vulnerabilities in SAP ERP and SAP S/4HANA...
PT-2026-33235
Name of the Vulnerable Software and Affected Versions @vendure/core versions prior to 2.3.4 @vendure/core versions 3.0.0 through 3.5.6 @vendure/core versions 3.6.0 through 3.6.1 Description An unauthenticated SQL injection exists in the Shop API and an authenticated SQL injection exists in the...
CVE-2025-65133: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability exists in the School Management System version 1.0 by manikandan580. An unauthenticated or authenticated remote attacker can supply a crafted HTTP request to the affected endpoint to manipulate SQL query logic and extract sensitive database information...
PT-2026-32881
CVE-2026-33120 | Microsoft SQL Server 2022 GDR | Remote Code Execution Description Untrusted pointer dereference in Microsoft SQL Server 2022 GDR allows an auth'd attacker to achieve RCE over a network by triggering invalid memory access. Severity: High Exploitation: Unknown Public PoC: Unknown...