Lucene search
+L

236648 matches found

NVD
NVD
added 1 hour ago4 views

CVE-2026-4978

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in UMAI Vision Traffic Analysis System allows SQL Injection. This issue affects Traffic Analysis System: from 30 before 34...

9.8CVSS
SaveExploits0References1
CVE
CVE
added 2 hours ago8 views

CVE-2026-23985

CVE-2026-23985 is a ReDoS vulnerability in Apache Superset versions 1.5.0–5.0.0, arising from the sql_parse.py component’s integration with the sqlparse library. The issue centers on the SQL_REGEX used to parse SQL statements, where overlapping disjunctions share a common outer quantifier, enabli...

5.3CVSS5.9AI score
SaveExploits0References2
Cvelist
Cvelist
added 2 hours ago7 views

CVE-2026-23985 Apache Superset: Regular Expression Denial of Service (ReDoS) in SQL Parser

A Regular Expression Denial of Service ReDoS vulnerability exists in Apache Superset versions 1.5.0 through 5.0.0. The vulnerability is located in the sqlparse.py component, specifically within the SQLREGEX used for parsing SQL statements in the sqlparse library integration. The affected regular...

5.3CVSS
SaveExploits0References1
Cvelist
Cvelist
added 3 hours ago7 views

CVE-2026-4978 SQLi in UMAI Vision's Traffic Analysis System

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in UMAI Vision Traffic Analysis System allows SQL Injection. This issue affects Traffic Analysis System: from 30 before 34...

9.8CVSS
SaveExploits0References1
CVE
CVE
added 3 hours ago6 views

CVE-2026-4978

CVE-2026-4978 describes an SQL injection in UMAI Vision Traffic Analysis System. The vulnerability arises from improper neutralization of special elements in SQL commands. Affected software: Traffic Analysis System (listed as: from 30 before 34). CVSS v3.1 base metrics indicate a critical impact ...

9.8CVSS5.9AI score
SaveExploits0References1
NVD
NVD
added 4 hours ago5 views

CVE-2026-54368

CentreStack before 17.4 contains a SQL injection vulnerability in GladDBFiles.SearchEx and SearchExUnder that allows authenticated attackers to execute arbitrary SQL statements by supplying a crafted x-glad-filter request header through the jsondir API endpoint. Attackers can exploit unsanitized...

8.8CVSS
SaveExploits0References2
Cvelist
Cvelist
added 5 hours ago11 views

CVE-2026-54368 CentreStack < 17.4 SQL Injection via x-glad-filter Header

CentreStack before 17.4 contains a SQL injection vulnerability in GladDBFiles.SearchEx and SearchExUnder that allows authenticated attackers to execute arbitrary SQL statements by supplying a crafted x-glad-filter request header through the jsondir API endpoint. Attackers can exploit unsanitized...

8.8CVSS
SaveExploits0References2
EUVD
EUVD
added 5 hours ago5 views

EUVD-2026-51104

CentreStack before 17.4 contains a SQL injection vulnerability in GladDBFiles.SearchEx and SearchExUnder that allows authenticated attackers to execute arbitrary SQL statements by supplying a crafted x-glad-filter request header through the jsondir API endpoint. Attackers can exploit unsanitized...

8.8CVSS6.5AI score
SaveExploits0References2
CVE
CVE
added 5 hours ago6 views

CVE-2026-54368

CVE-2026-54368 (CentreStack) : CentreStack versions before 17.4 are vulnerable to an SQL injection in GladDBFiles.SearchEx() and SearchExUnder(). An authenticated attacker can supply a crafted x-glad-filter header to the jsondir API endpoint, causing unsanitized interpolation of the Field paramet...

8.8CVSS6.5AI score
SaveExploits0References2
NVD
NVD
added 5 hours ago3 views

CVE-2026-17543

Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2. before 8.2.33, from 8.3. before 8.3.33, from 8.4. before 8.4.24, and from 8.5. before 8.5.9...

9.3CVSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 6 hours ago3 views

CVE-2026-17543

Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2. before 8.2.33, from 8.3. before 8.3.33, from 8.4. before 8.4.24, and from 8.5. before 8.5.9...

9.3CVSS5.9AI score
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 6 hours ago10 views

CVE-2026-17543 SQL injection in ext-pgsql via E'...' backslash breakout

Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2. before 8.2.33, from 8.3. before 8.3.33, from 8.4. before 8.4.24, and from 8.5. before 8.5.9...

9.3CVSS
SaveExploits0References1
CVE
CVE
added 6 hours ago13 views

CVE-2026-17543

CVE-2026-17543 affects PHP with ext-pgsql, where improper escaping of backslashes in attacker-provided parameters enables SQL injection via E'...' backslash breakout. Vulnerable PHP versions: 8.2.x before 8.2.33, 8.3.x before 8.3.33, 8.4.x before 8.4.24, and 8.5.x before 8.5.9. Affected component...

9.3CVSS5.9AI score
SaveExploits0References1
EUVD
EUVD
added 6 hours ago4 views

EUVD-2026-51090

Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2. before 8.2.33, from 8.3. before 8.3.33, from 8.4. before 8.4.24, and from 8.5. before 8.5.9...

9.3CVSS5.9AI score
SaveExploits0References1
Nuclei
Nuclei
added 11 hours ago17 views

Nortek Linear eMerge E3-Series - SQL Injection

Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e were discovered to contain a SQL injection vulnerability via the idt parameter. id: CVE-2022-38627 info: name: Nortek Linear eMerge E3-Series - SQL Injection author: daffainfo,omarhashem666...

9.8CVSS7.2AI score0.0427EPSS
SaveExploits2References3
Nuclei
Nuclei
added 11 hours ago61 views

AeroCMS 0.1.1 - SQL Injection

AeroCMS 0.1.1 contains a SQL injection caused by unsanitized author parameter, letting attackers execute arbitrary SQL commands, exploit requires crafted author input. id: CVE-2022-38812 info: name: AeroCMS 0.1.1 - SQL Injection author: shivampand3y severity: medium description: | AeroCMS 0.1.1...

6.5CVSS6.9AI score0.02181EPSS
SaveExploits1References4
Nuclei
Nuclei
added 11 hours ago80 views

MCMS 5.2.5 - SQL Injection

MCMS 5.2.5 contains a SQL injection vulnerability via the categoryId parameter in the file IContentDao.xml. An attacker can potentially obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. id: CVE-2022-23898 info:...

9.8CVSS7.3AI score0.07734EPSS
SaveExploits1References3
Nuclei
Nuclei
added 11 hours ago10 views

Cost Calculator Builder <= 3.2.15 - SQL Injection

The Cost Calculator Builder plugin for WordPress is vulnerable to SQL Injection via discount codes in versions up to, and including, 3.2.15 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

9.8CVSS5.9AI score0.02002EPSS
SaveExploits0References3
Nuclei
Nuclei
added 11 hours ago47 views

wpForo Forum <= 2.4.14 - SQL Injection

wpForo Forum WordPress plugin = 2.4.14 contains a time-based SQL injection caused by insufficient escaping of the 'wpfob' parameter, letting unauthenticated attackers extract sensitive database information. id: CVE-2026-1581 info: name: wpForo Forum = 2.4.14 - SQL Injection author: Shivam Kamboj...

7.5CVSS5.9AI score0.01727EPSS
SaveExploits1References2
Nuclei
Nuclei
added 11 hours ago37 views

LearnPress < 4.2.7.1 - SQL Injection

The LearnPress WordPress LMS Plugin before 4.2.7.1 is vulnerable to unauthenticated SQL injection via the 'cfields' parameter in the /wp-json/lp/v1/courses/archive-course REST API endpoint, allowing attackers to extract sensitive information from the database. id: CVE-2024-8529 info: name:...

10CVSS5.9AI score0.11831EPSS
SaveExploits2References3
Rows per page
Query Builder