Lucene search
K

4 matches found

NVD
NVD
added 2026/05/27 9:16 a.m.9 views

CVE-2026-40841

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getProjectTags function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

7.1CVSS0.00039EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/27 7:57 a.m.2 views

CVE-2026-40841 Authenticated SQLi in getProjectTags function

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getProjectTags function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

7.1CVSS5.9AI score0.00039EPSS
Exploits0References1
CVE
CVE
added 2026/05/27 7:57 a.m.7 views

CVE-2026-40841

The CVE-2026-40841 entry involves an unauthenticated SQL injection in the getProjectTags function, disclosed across multiple sources. Affected state: it is triggered by improper neutralization of SQL elements in a SELECT, enabling a low-privileged, remote attacker to access data and potentially c...

7.1CVSS5.9AI score0.00039EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.2 views

PT-2026-43607

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getProjectTags function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...

7.1CVSS5.9AI score0.00039EPSS
Exploits0References2
Rows per page
Query Builder