CVE-2026-108125: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in wp-post-author. This issue affects wp-post-author version 4.0.0 prior to 4.1.0...

CVE-2026-89235: Improper Neutralization of Special Elements used in an SQL Command

The Testimonials by BestWebSoft WordPress plugin through 1.0.8 does not sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated attackers to append additional SQL to the query...

Microsoft SQL Server Buffer Overflow

The vulnerability of the Microsoft SQL Server database management system is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Microsoft SQL Server Buffer Overflow

The vulnerability of the Microsoft SQL Server database management system is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Microsoft SQL Server Buffer Overflow

The vulnerability of the Microsoft SQL Server database management system is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Microsoft SQL Server Privilege Escalation

The vulnerability of the Microsoft SQL Server database management system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

PT-2026-108851

Name of the Vulnerable Software and Affected Versions tagDiv Opt-In Builder versions prior to 1.7.6 Description The td-subscription component contains an SQL Injection flaw, specifically allowing Blind SQL Injection. This occurs due to the improper neutralization of special elements used in an SQ...

CVE-2026-107803: Improper Neutralization of Special Elements used in an SQL Command

ProcessMaker is an open source workflow management software suite. Prior to 2026.14.3, the GET /api/1.0/tasks endpoint in ProcessMaker is vulnerable to SQL injection through the orderby parameter because ProcessMaker\Traits\TaskControllerIndexMethods::applyColumnOrdering concatenates a...

CVE-2026-84209

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

CVE-2026-81932

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

CVE-2026-80381

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection...

CVE-2025-71428

Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike that allows authenticated administrators to inject SQL via the username parameter. Attackers with the Admin role can submit crafted input to /admin/user/userListAction to read database contents,...

com.hazelcast.jet:hazelcast-jet-core (4.5.4), com.hazelcast.jet:hazelcast-jet-hadoop-core (4.5.4) +24 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (4.2.6)

com.hazelcast:hazelcast MAVEN version 4.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast.jet:hazelcast-jet-core 4.5.4 - com.hazelcast.jet:hazelcast-jet-hadoop-core 4.5.4 -...

cn.spider-node:client (>=1.0.2, <=1.0.2.2), cn.spider-node:linker-client (>=1.0.2, <=1.0.3) +28 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (4.2.8)

com.hazelcast:hazelcast MAVEN version 4.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - cn.spider-node:client =1.0.2, =1.0.2, =1.3.0, =0.23.0, =0.23.0, =4.4.3, =4.4.3, =4.4.3, =3.5.7, =3.5.11 and more...

com.hazelcast:hazelcast-build-utils (4.1-beta-1), com.hazelcast:hazelcast-spring (4.1-beta-1) +1 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (4.1-beta-1)

com.hazelcast:hazelcast MAVEN version 4.1-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.1-beta-1 - com.hazelcast:hazelcast-spring 4.1-beta-1 -...

com.hazelcast:hazelcast-build-utils (4.2-beta-1), com.hazelcast:hazelcast-spring (4.2-beta-1) +2 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (4.2-beta-1)

com.hazelcast:hazelcast MAVEN version 4.2-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.2-beta-1 - com.hazelcast:hazelcast-spring 4.2-beta-1 -...

com.hazelcast.jet:hazelcast-jet-core (4.5.2), com.hazelcast.jet:hazelcast-jet-hadoop-core (4.5.2) +5 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (4.2.3)

com.hazelcast:hazelcast MAVEN version 4.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast.jet:hazelcast-jet-core 4.5.2 - com.hazelcast.jet:hazelcast-jet-hadoop-core 4.5.2 -...

com.hazelcast:hazelcast-build-utils (4.1.7), com.hazelcast:hazelcast-spring (4.1.7) +2 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (4.1.7)

com.hazelcast:hazelcast MAVEN version 4.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.1.7 - com.hazelcast:hazelcast-spring 4.1.7 - com.hazelcast:hazelcast-sql...

com.hazelcast:hazelcast-build-utils (4.1.6), com.hazelcast:hazelcast-spring (4.1.6) +3 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (4.1.6)

com.hazelcast:hazelcast MAVEN version 4.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 4.1.6 - com.hazelcast:hazelcast-spring 4.1.6 - com.hazelcast:hazelcast-sql...

com.efluid.oss:efluid-datagate-app (>=5.1.7, <=5.1.14), com.efluid.oss:efluid-datagate-app-cucumber (>=5.1.7, <=5.1.14) +8 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (4.1.8)

com.hazelcast:hazelcast MAVEN version 4.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.efluid.oss:efluid-datagate-app =5.1.7, =5.1.7, =4.32.0, =3.11.5, =3.11.7 Source cves: CVE-2026-107726 Source...