Lucene search
+L

35935 matches found

CVE
CVE
•added 2026/05/22 9:17 p.m.•84 views

CVE-2026-41075

RT (Request Tracker) is affected by an SQL injection in the JSON search path via the entry_aggregator parameter. Affected versions: 5.0.0–5.0.9 and 6.0.0–6.0.2. Root cause: input incorporated into queries without proper validation, enabling authenticated users to read or modify RT database data. ...

8.8CVSS5.8AI score0.00483EPSS
SaveExploits0References3
OSV
OSV
•added 2026/05/22 9:17 p.m.•12 views

CVE-2026-41075 RT: SQL injection via entry_aggregator parameter in JSON search

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.0 through 5.0.9 and 6.0.0 through 6.0.2 contain an SQL injection vulnerability. An authenticated user can craft input that is incorporated into database queries without proper validation, potentially allowing th...

8.8CVSS5.9AI score
SaveExploits0References5
NVD
NVD
•added 2026/05/22 10:16 a.m.•24 views

CVE-2026-25606

A SQL injection vulnerability has been identified in STER. Improper neutralization of input provided by user into multiple Search Filters allows for SQL Injection attacks. It allows an authenticated attacker to view sensitive data such as data belonging to other users, or any other data that the...

8.7CVSS0.00358EPSS
SaveExploits0References2
CVE
CVE
•added 2026/05/22 9:14 a.m.•56 views

CVE-2026-25606

CVE-2026-25606 concerns STER. The vulnerability is a SQL injection affecting multiple Search Filters where improper input neutralization allows an authenticated attacker to view data belonging to other users or any data the application can access. Affected component appears to be the STER web/app...

8.7CVSS5.8AI score0.00358EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/05/22 9:14 a.m.•48 views

CVE-2026-25606 SQL Injection in STER

A SQL injection vulnerability has been identified in STER. Improper neutralization of input provided by user into multiple Search Filters allows for SQL Injection attacks. It allows an authenticated attacker to view sensitive data such as data belonging to other users, or any other data that the...

8.7CVSS0.00358EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/22 9:14 a.m.•24 views

EUVD-2026-31422

A SQL injection vulnerability has been identified in STER. Improper neutralization of input provided by user into multiple Search Filters allows for SQL Injection attacks. It allows an authenticated attacker to view sensitive data such as data belonging to other users, or any other data that the...

8.7CVSS5.8AI score0.00358EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/05/22 9:14 a.m.•15 views

CVE-2026-25606

A SQL injection vulnerability has been identified in STER. Improper neutralization of input provided by user into multiple Search Filters allows for SQL Injection attacks. It allows an authenticated attacker to view sensitive data such as data belonging to other users, or any other data that the...

8.7CVSS5.8AI score0.00358EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/05/22 9:14 a.m.•12 views

CVE-2026-25606 SQL Injection in STER

A SQL injection vulnerability has been identified in STER. Improper neutralization of input provided by user into multiple Search Filters allows for SQL Injection attacks. It allows an authenticated attacker to view sensitive data such as data belonging to other users, or any other data that the...

8.7CVSS5.8AI score0.00358EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/05/22 2:28 a.m.•9 views

CVE-2026-4834

The WP ERP Pro plugin for WordPress is vulnerable to SQL Injection via the 'searchkey' parameter in all versions up to, and including, 1.5.1. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible fo...

7.5CVSS5.9AI score0.00463EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/05/22 2:28 a.m.•58 views

CVE-2026-4834 WP ERP Pro <= 1.5.1 - Unauthenticated SQL Injection via 'search_key' Parameter

The WP ERP Pro plugin for WordPress is vulnerable to SQL Injection via the 'searchkey' parameter in all versions up to, and including, 1.5.1. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible fo...

7.5CVSS0.00463EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/05/22 2:28 a.m.•12 views

CVE-2026-4834 WP ERP Pro <= 1.5.1 - Unauthenticated SQL Injection via 'search_key' Parameter

The WP ERP Pro plugin for WordPress is vulnerable to SQL Injection via the 'searchkey' parameter in all versions up to, and including, 1.5.1. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible fo...

7.5CVSS5.9AI score0.00463EPSS
SaveExploits0References2
CVE
CVE
•added 2026/05/22 2:28 a.m.•55 views

CVE-2026-4834

The CVE-2026-4834 entry concerns the WP ERP Pro plugin for WordPress, affected up to version 1.5.1. The vulnerability is a SQL Injection via the 'search_key' parameter due to insufficient escaping and lack of proper query preparation. This allows unauthenticated attackers to append additional SQL...

7.5CVSS5.9AI score0.00463EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/22 2:28 a.m.•26 views

EUVD-2026-31391

The WP ERP Pro plugin for WordPress is vulnerable to SQL Injection via the 'searchkey' parameter in all versions up to, and including, 1.5.1. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible fo...

7.5CVSS5.9AI score0.00463EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/22 12:00 a.m.•21 views

PT-2026-42742

A SQL injection vulnerability has been identified in STER. Improper neutralization of input provided by user into multiple Search Filters allows for SQL Injection attacks. It allows an authenticated attacker to view sensitive data such as data belonging to other users, or any other data that the...

8.7CVSS5.8AI score0.00358EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/05/22 12:00 a.m.•16 views

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to the use of an unreliable search path. This allows attackers to escalate their privileges and execute arbitrary commands.

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to the use of an unreliable search path. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary commands...

7.8CVSS6.1AI score0.00185EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2026/05/22 12:00 a.m.•20 views

WordPress plugin WP ERP Pro SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

7.5CVSS5.9AI score0.00463EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/22 12:00 a.m.•38 views

PT-2026-42719

Name of the Vulnerable Software and Affected Versions WP ERP Pro versions prior to 1.5.2 Description The WP ERP Pro plugin for WordPress contains a flaw allowing unauthenticated attackers to append additional SQL queries to existing ones. This is caused by insufficient escaping of the user-suppli...

7.5CVSS5.9AI score0.00463EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/05/22 12:00 a.m.•16 views

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: sphinx (UTSA-2026-016628)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016628 advisory. SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal in conjunction with CVE-2019-14511 because the mysql client can be used for CALL...

7.5CVSS7AI score0.02166EPSS
SaveExploits2References4
Tenable Nessus
Tenable Nessus
•added 2026/05/22 12:00 a.m.•14 views

RockyLinux 8 : grub2 (RLSA-2025:3367)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:3367 advisory. grub2: net: Out-of-bounds write in grubnetsearchconfigfile CVE-2025-0624 Tenable has extracted the preceding description block directly from the RockyLinux securi...

7.6CVSS6.8AI score0.01405EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/22 12:00 a.m.•1 views

CVE-2026-25606: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability has been identified in STER. Improper neutralization of input provided by user into multiple Search Filters allows for SQL Injection attacks. It allows an authenticated attacker to view sensitive data such as data belonging to other users, or any other data that the...

8.7CVSS5.7AI score0.00358EPSS
SaveExploits0References2
Rows per page
Query Builder