15470 matches found
PT-2026-95975
Name of the Vulnerable Software and Affected Versions itsourcecode Leave Management System version 1.0 Description A SQL injection flaw exists in the /module/department/index.php endpoint. This issue occurs when the ID argument is manipulated, allowing a remote attacker to execute arbitrary SQL...
CVE-2026-84082
IBM Guardium Data Protection 12.2 is affected by a SQL injection vulnerability (CWE-89) caused by improper neutralization of special elements used in an SQL command. A remote unauthenticated attacker can exploit this to execute arbitrary SQL commands, with full impact on confidentiality, integrit...
CVE-2026-84082 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...
CVE-2026-84073 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...
CVE-2026-84064 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...
EUVD-2026-83417
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...
PT-2026-95677
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...
PT-2026-95674
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...
PT-2026-95684
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Improper neutralization of special elements used in an SQL command allows a remote attacker to execute arbitrary SQL commands. This issue is a form of SQL injection, where an attacker can...
CVE-2026-84082: Improper Neutralization of Special Elements used in an SQL Command
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...
CVE-2026-84073: Improper Neutralization of Special Elements used in an SQL Command
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...
VulnCheck KEV: CVE-2017-8917
SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2026-37009
A SQL injection vulnerability in NL2SQLTool in crewai-tools v1.10.2rc1 allows a remote attacker to execute arbitrary SQL commands via an unsanitized sqlquery argument...
PT-2026-80453
Openshift Migration Advisor: Improper input sanitization allows specially crafted RVTools .xlsx files to include malicious SQL commands in github.com/kubev2v/migration-planner...
PT-2026-69295
Name of the Vulnerable Software and Affected Versions lock-upme OPMS versions up to 831440f37a92c1568f2e071d5233bc873a9d8b09 Description A remote SQL injection is possible within the IN Clause Handler component. The issue exists in an unknown function located in the controllers/messages/message.g...
SQL Injection
Overview Affected versions of this package are vulnerable to SQL Injection in the aprdbdoracle provider. An attacker can execute arbitrary SQL commands by injecting specially crafted input. Remediation Upgrade apr-util to version 1.6.5 or higher. References - Apache Mailing List...
CVE-2026-34191
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Portable Runtime Utility via aprdbdoracle provider. This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3...
PT-2026-68669
Name of the Vulnerable Software and Affected Versions chiuwingyan house versions up to dea6bcceaebe2b364a5a209747f48ecc2b2dc670 Description A remote SQL injection exists in the /paid/selectall.action endpoint. This occurs when the zuname argument is manipulated, allowing an attacker to execute...
PT-2026-68496
Name of the Vulnerable Software and Affected Versions Loca Software Informatics Technology Ltd. Co. CMS versions prior to 06082026 Description An SQL injection issue exists due to the improper neutralization of special elements used in an SQL command. This allows an attacker to execute arbitrary...
