Lucene search
+L

283789 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/09 12:00 a.m.•6 views

CVE-2026-96330: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This issue affects tagDiv Opt-In Builder: from n/a through 1.7.6...

9.3CVSS5.8AI score0.00229EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/08 10:17 p.m.•11 views

CVE-2026-84209

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

9.8CVSS0.00319EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/08 10:17 p.m.•12 views

CVE-2026-81932

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

9.8CVSS0.00288EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/08 10:17 p.m.•11 views

CVE-2026-80381

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection...

9.8CVSS0.00317EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/08 10:17 p.m.•11 views

CVE-2025-71428

Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike that allows authenticated administrators to inject SQL via the username parameter. Attackers with the Admin role can submit crafted input to /admin/user/userListAction to read database contents,...

6.9CVSS0.0036EPSS
SaveExploits0References6
vulnersOsv
vulnersOsv
•added 2026/10/08 10:09 p.m.•3 views

cn.spider-node:client (>=1.0.2, <=1.0.2.2), cn.spider-node:linker-client (>=1.0.2, <=1.0.3) +28 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (4.2.8)

com.hazelcast:hazelcast MAVEN version 4.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - cn.spider-node:client =1.0.2, =1.0.2, =1.3.0, =0.23.0, =0.23.0, =4.4.3, =4.4.3, =4.4.3, =3.5.7, =3.5.11 and more...

8.7CVSS5.8AI score0.00385EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/10/08 10:09 p.m.•5 views

com.hazelcast:hazelcast-build-utils (4.1.3), com.hazelcast:hazelcast-spring (4.1.3) +4 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (4.1.3)

com.hazelcast:hazelcast MAVEN version 4.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.1.3 - com.hazelcast:hazelcast-spring 4.1.3 - com.hazelcast:hazelcast-sql...

8.7CVSS5.8AI score0.00385EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/10/08 10:09 p.m.•2 views

com.hazelcast:hazelcast-build-utils (4.1-beta-1), com.hazelcast:hazelcast-spring (4.1-beta-1) +1 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (4.1-beta-1)

com.hazelcast:hazelcast MAVEN version 4.1-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.1-beta-1 - com.hazelcast:hazelcast-spring 4.1-beta-1 -...

8.7CVSS5.8AI score0.00385EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/10/08 10:09 p.m.•1 views

com.hazelcast:hazelcast-build-utils (4.1.7), com.hazelcast:hazelcast-spring (4.1.7) +2 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (4.1.7)

com.hazelcast:hazelcast MAVEN version 4.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.1.7 - com.hazelcast:hazelcast-spring 4.1.7 - com.hazelcast:hazelcast-sql...

8.7CVSS5.8AI score0.00385EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/10/08 10:09 p.m.•3 views

com.hazelcast.jet:hazelcast-jet-core (4.5.4), com.hazelcast.jet:hazelcast-jet-hadoop-core (4.5.4) +24 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (4.2.6)

com.hazelcast:hazelcast MAVEN version 4.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast.jet:hazelcast-jet-core 4.5.4 - com.hazelcast.jet:hazelcast-jet-hadoop-core 4.5.4 -...

8.7CVSS5.8AI score0.00385EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/10/08 10:09 p.m.•5 views

com.hazelcast:hazelcast-build-utils (4.1.6), com.hazelcast:hazelcast-spring (4.1.6) +3 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (4.1.6)

com.hazelcast:hazelcast MAVEN version 4.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.1.6 - com.hazelcast:hazelcast-spring 4.1.6 - com.hazelcast:hazelcast-sql...

8.7CVSS5.8AI score0.00385EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/10/08 10:09 p.m.•3 views

com.efluid.oss:efluid-datagate-app (>=3.1.22, <=5.1.6), com.efluid.oss:efluid-datagate-app-cucumber (>=3.1.22, <=5.1.6) +8 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (4.1.5)

com.hazelcast:hazelcast MAVEN version 4.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.efluid.oss:efluid-datagate-app =3.1.22, =3.1.22, =2.5.1, =3.11.2, =3.13.0 Source cves: CVE-2026-107725 Source...

8.7CVSS5.8AI score0.00385EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/10/08 10:09 p.m.•5 views

com.hazelcast:hazelcast-build-utils (4.2-beta-1), com.hazelcast:hazelcast-spring (4.2-beta-1) +2 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (4.2-beta-1)

com.hazelcast:hazelcast MAVEN version 4.2-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.2-beta-1 - com.hazelcast:hazelcast-spring 4.2-beta-1 -...

8.7CVSS5.8AI score0.00385EPSS
SaveExploits0
CVE
CVE
•added 2026/10/08 9:51 p.m.•16 views

CVE-2025-71428

Versions of Jivejdon through 5.0 are vulnerable to a SQL injection flaw in the AccountDaoSql.getAccountByNameLike() method. Authenticated users with the Admin role can exploit this by submitting crafted input to the /admin/user/userListAction endpoint via the username parameter . Successful explo...

6.9CVSS5.8AI score0.0036EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/08 9:51 p.m.•47 views

CVE-2025-71428 Jivejdon through 5.0 SQL Injection via username in userListAction

Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike that allows authenticated administrators to inject SQL via the username parameter. Attackers with the Admin role can submit crafted input to /admin/user/userListAction to read database contents,...

6.9CVSS0.0036EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2026/10/08 9:51 p.m.•11 views

CVE-2025-71428 Jivejdon through 5.0 SQL Injection via username in userListAction

Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike that allows authenticated administrators to inject SQL via the username parameter. Attackers with the Admin role can submit crafted input to /admin/user/userListAction to read database contents,...

6.9CVSS5.9AI score
SaveExploits0References8
Cvelist
Cvelist
•added 2026/10/08 9:29 p.m.•41 views

CVE-2026-80381 Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection...

9.8CVSS0.00317EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/08 9:29 p.m.•28 views

CVE-2026-80381

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a SQL injection flaw within the Sniffer component . This vulnerability (CWE-89) could allow a remote attacker to execute unauthorized SQL statements . To remediate this, IBM strongly recommends applying the latest Sniffe...

9.8CVSS6.4AI score0.00317EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2026/10/08 9:29 p.m.•21 views

CVE-2026-81932

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to SQL injection within the Sniffer component . A remote unauthenticated attacker can send specially crafted SQL statements to view, add, modify, or delete information in the back-end database. IBM recommends applying the l...

9.8CVSS6AI score0.00288EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/10/08 9:29 p.m.•37 views

CVE-2026-81932 Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

8.6CVSS0.00288EPSS
SaveExploits0References1
Rows per page
Query Builder