Oracle Trusted Answer Search security vulnerability

Version 26.1 of Oracle Trusted Answer Search contains a security vulnerability stemming from issues with the PLSQL package component. Unauthenticated attackers can exploit this vulnerability via the Oracle Net network, potentially leading to the takeover of Trusted Answer Search...

Oracle Trusted Answer Search security vulnerability

Version 26.1 of Oracle Trusted Answer Search contains a security vulnerability stemming from issues with the PLSQL package component. This vulnerability may allow low-privilege attackers to gain access to Oracle Trusted Answer Search via the Oracle Net environment, potentially affecting other...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools version 8.62 has a security vulnerability. This vulnerability stems from issues with the Search Framework component. Unauthorized attackers can access data via the HTTP network. With user interaction, unauthorized updates, insertions, or deletions of...

CVE-2026-112152 vraj404 Criminal-Management-System Search searchOff.php mysqli_query sql injection

A security vulnerability has been detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected by this issue is the function mysqliquery of the file Officers/searchOff.php of the component Search Page. Such manipulation of the argument Search leads to sq...

CVE-2026-112152

The vraj404 Criminal-Management-System is vulnerable to a SQL injection flaw in the Search Page component. The issue resides in the mysqli_query function within the Officers/searchOff.php file, where a lack of proper input validation on the Search argument allows for remote manipulation. While th...

CVE-2026-112152 vraj404 Criminal-Management-System Search searchOff.php mysqli_query sql injection

A security vulnerability has been detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected by this issue is the function mysqliquery of the file Officers/searchOff.php of the component Search Page. Such manipulation of the argument Search leads to sq...

EUVD-2026-104394

A security vulnerability has been detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected by this issue is the function mysqliquery of the file Officers/searchOff.php of the component Search Page. Such manipulation of the argument Search leads to sq...

CVE-2026-112152 vraj404 Criminal-Management-System Search searchOff.php mysqli_query sql injection

A security vulnerability has been detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected by this issue is the function mysqliquery of the file Officers/searchOff.php of the component Search Page. Such manipulation of the argument Search leads to sq...

CVE-2026-112150 vraj404 Criminal-Management-System search.php sql injection

A security flaw has been discovered in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected is an unknown function of the file search.php. The manipulation of the argument Search results in sql injection. The attack can be executed remotely. The exploit has...

CVE-2026-112150

The vraj404 Criminal-Management-System (up to commit 2808d057e7ddc5295519a487365b0cacfd0ba8c4 ) is vulnerable to a remote SQL injection flaw. The vulnerability exists within an unknown function of the search.php file, where manipulating the Search argument allows an attacker to execute arbitrary ...

CVE-2026-112150 vraj404 Criminal-Management-System search.php sql injection

A security flaw has been discovered in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected is an unknown function of the file search.php. The manipulation of the argument Search results in sql injection. The attack can be executed remotely. The exploit has...

CVE-2026-112286

Krayin CRM before 2.2.7 contains an insecure direct object reference vulnerability that allows scope-restricted authenticated users to read other users' quotes by bypassing per-user data scope checks in QuoteController. Attackers can query the quotes search and lead-products endpoints to retrieve...

CVE-2026-112286

Krayin CRM versions before 2.2.7 are vulnerable to an insecure direct object reference (IDOR) vulnerability within the QuoteController . This flaw allows scope-restricted authenticated users to bypass per-user data scope checks. By querying the quotes search and lead-products endpoints, an attack...

CVE-2026-112286 Krayin CRM before 2.2.7 IDOR via Quote Search and Lead-Products Endpoints

Krayin CRM before 2.2.7 contains an insecure direct object reference vulnerability that allows scope-restricted authenticated users to read other users' quotes by bypassing per-user data scope checks in QuoteController. Attackers can query the quotes search and lead-products endpoints to retrieve...

CVE-2026-112286 Krayin CRM before 2.2.7 IDOR via Quote Search and Lead-Products Endpoints

Krayin CRM before 2.2.7 contains an insecure direct object reference vulnerability that allows scope-restricted authenticated users to read other users' quotes by bypassing per-user data scope checks in QuoteController. Attackers can query the quotes search and lead-products endpoints to retrieve...

CVE-2026-112286 Krayin CRM before 2.2.7 IDOR via Quote Search and Lead-Products Endpoints

Krayin CRM before 2.2.7 contains an insecure direct object reference vulnerability that allows scope-restricted authenticated users to read other users' quotes by bypassing per-user data scope checks in QuoteController. Attackers can query the quotes search and lead-products endpoints to retrieve...

WordPress Ajax Search Lite plugin <= 4.14.6 - SQL Injection vulnerability

SQL Injection vulnerability discovered by dzaku in WordPress Plugin Ajax Search Lite versions = 4.14.6...

CVE-2026-79620

Exposure of sensitive information through data queries vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An improper authorization check in the similar-question search allowed authenticated users to view metadata of non-public questions. Users are recommended to...

EUVD-2026-104161

Exposure of sensitive information through data queries vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An improper authorization check in the similar-question search allowed authenticated users to view metadata of non-public questions. Users are recommended to...

CVE-2026-79620

Exposure of sensitive information through data queries vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An improper authorization check in the similar-question search allowed authenticated users to view metadata of non-public questions. Users are recommended to...