CVE-2026-80381 Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection...

CVE-2026-80381

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a SQL injection flaw within the Sniffer component . This vulnerability (CWE-89) could allow a remote attacker to execute unauthorized SQL statements . To remediate this, IBM strongly recommends applying the latest Sniffe...

CVE-2026-81932

IBM Guardium Data Protection versions 12.0 , 12.1 , and 12.2 are vulnerable to an SQL injection (CWE-89) within the Sniffer component . A remote unauthenticated attacker could send specially crafted SQL statements to view, add, modify, or delete information in the back-end database. To remediate ...

CVE-2026-84209

IBM Guardium Data Protection versions 12.2.2 and 12.1 are susceptible to an SQL Injection vulnerability (CWE-89). A remote attacker can execute arbitrary SQL commands due to the improper neutralization of special elements used in an SQL command. The vulnerability has a HIGH base severity score of...

CVE-2026-84209 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

CVE-2026-16830

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to modify data and cause a denial of service due to an SQL injection vulnerability...

CVE-2026-24416

CVE-2026-24416: OpenSTAManager の商品価格設定モジュールにおける Time-Based Blind SQL Injection 概要 フィールド| 詳細 ---|--- CVE ID| CVE-2026-24416 重要度| HIGH アドバイザリ| アドバイザリを表示 発見者| Lukasz Rybak 影響を受ける製品 devcode-it/openstamanager （バージョン: = 2.9.8） CWE 分類 CWE-89: SQL コマンドで使用される特殊要素の不適切な無害化（'SQL インジェクション'） 詳細 概要 OpenSTAManag...

CVE-2026-16830 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to modify data and cause a denial of service due to an SQL injection vulnerability...

EUVD-2026-95281

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to modify data and cause a denial of service due to an SQL injection vulnerability...

CVE-2026-16830

An SQL injection vulnerability (CWE-89 ) exists in IBM Security Verify Access (versions 10.0 through 10.0.9.2) and IBM Verify Identity Access (versions 11.0 through 11.0.3). A remote authenticated attacker could exploit this flaw to modify data and trigger a denial of service . To remediate, IBM ...

CVE-2026-2413

CVE-2026-2413 Ally – Web Accessibility & Usability = 4.0.3 - URLパスを介した未認証SQLインジェクション 説明 WordPress用プラグイン「Ally – Web Accessibility & Usability」は、バージョン4.0.3までの全バージョンにおいて、URLパスを介したSQLインジェクションに対して脆弱です。これは、getglobalremediations メソッドにおいて、ユーザーが指定したURLパラメータのエスケープが不十分なためです。このパラメータはSQL...

CVE-2026-78070

plgcontentdpcalendar における ORDER BY ショートコード経由の SQL インジェクション DPCalendar Free ≤ 10.11.2 — 作成者レベルのユーザーが時間ベースのブラインドインジェクションでデータベース全体を抽出 概要 plgcontentdpcalendar コンテンツプラグインは、Joomla の記事本文に埋め込まれた events order="..."/events ショートコードを解析します。order パラメータの値は EventsModel::setState'list.ordering', ... に直接渡され、モデル自身の...

CVE-2026-24419

CVE-2026-24419: OpenSTAManager の Prima Nota モジュールに SQL インジェクション 概要 フィールド| 詳細 ---|--- CVE ID| CVE-2026-24419 深刻度| HIGH アドバイザリ| アドバイザリを表示 発見者| Lukasz Rybak 影響を受ける製品 devcode-it/openstamanager バージョン: fetchOne'SELECT idanagrafica FROM codocumenti WHERE id IN'.$iddocumenti ? implode',', $iddocumenti...

CVE-2026-33910_SqlInjectionVulnerabilityOpenEMR8.0.0.2

CVE-2026-33910 - OpenEMR 弱点 CWE-89 SQLコマンドで使用される特殊要素の不適切な無害化（'SQLインジェクション'）...

sqli-hunter-CVE-2024-51482-PoC

sqli-hunter-CVE-2024-51482-PoC CVE-2024-51482 ZoneMinder SQLi 공격을 위한 Python 스크립트 — HTB CCTV sqli-hunter — CVE-2024-51482 설명 이 스크립트는 CVE-2024-51482를 악용하여 데이터베이스, 테이블, 열 및 자격 증명을 자동으로 추출합니다. 이 취약점은 ZoneMinder ≤ 1.37.64의 removetag 엔드포인트에 있는 tid 매개변수의 Boolean 기반 SQL Injection입니다. web/ajax/event.php의...

CVE-2025-10351-POC

CVE-2025-10351 POC - SQLインジェクションエクスプロイト 💉 CVE-2025-10351のPOC: Melis Platform Frameworkの特定のエンドポイントに影響を与える、認証されていないSQLインジェクションの脆弱性。 🔗 参照 📄 MITREのCVE-2025-10351 📄 INCIBE（スペイン国立サイバーセキュリティ研究所）のMelis Platform警告 🚀 説明 このPOCは、以下のエンドポイントの認証されていないエラーベースSQLインジェクション の脆弱性を対象としています:...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-82896 DESCRIPTION: IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to traverse directories on the system due to a path traversal vulnerability...

GHSA-R3RV-JM3R-62Q2 MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES

Description When escaping string and binary parameters for the text protocol, the connector always escaped the quote character with a backslash, without ever consulting the session's NOBACKSLASHESCAPES SQL mode. The server status flag was declared STATUSNOBACKSLASHESCAPES but never read. Under a...

NPM: MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES

NPM: MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NOBACKSLASHESCAPES vulnerability discovered by ? in WordPress Npm mariadb versions 3.2.5...

MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES

Description When escaping string and binary parameters for the text protocol, the connector always escaped the quote character with a backslash, without ever consulting the session's NOBACKSLASHESCAPES SQL mode. The server status flag was declared STATUSNOBACKSLASHESCAPES but never read. Under a...