PT-2026-106758

A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of the file search class.php. Such manipulation of the argument school year leads to sql injection. The attack may be launched remotely. The...

RockyLinux 9 : mariadb-connector-c (RLSA-2026:75673)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:75673 advisory. mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysqlrealescapestring CVE-2026-44172 Tenable has extracted...

PT-2026-106420

Unauthenticated SQL Injection in Booknetic = 4.8.5 versions...

PT-2026-106786

Name of the Vulnerable Software and Affected Versions SourceCodester Performance Indicator System version 1.0 Description An issue exists in the /opils/admin/view product.php file where manipulating the Category argument allows for SQL injection, a technique used to interfere with the queries tha...

PT-2026-106389

Subscriber SQL Injection in Paid Member Subscriptions = 3.1.1 versions...

PT-2026-106421

Subscriber SQL Injection in Woffice = 5.4.35 versions...

PT-2026-106291

Name of the Vulnerable Software and Affected Versions girishsaraf Online-Appointment-Booking-System versions up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5 Description A remote SQL injection exists within the Booking Handler component in the book.php file. The issue occurs when the...

PT-2026-106443

Subscriber SQL Injection in Buddyboss Platform = 3.1.0 versions...

CVE-2026-105920: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The impacted element is an unknown function of the file studentsignup.php of the component Student Registration Endpoint. This manipulation causes sql injection. The attack ma...

PT-2026-106728

Name of the Vulnerable Software and Affected Versions Kusalkasilva Learning-Management-System versions up to ffeb873f8803f1e9664384ff75000c7da45466d2 Description A remote SQL injection exists within the Student Registration Endpoint component, specifically affecting an unknown function in the...

PT-2026-107194

Name of the Vulnerable Software and Affected Versions ClearPass Policy Manager affected versions not specified Description A SQL injection flaw exists in the web-based management interface of ClearPass Policy Manager. This issue allows an authenticated remote attacker to execute arbitrary databas...

PT-2026-106453

Unauthenticated SQL Injection in Gmedia Photo Gallery = 1.25.1 versions...

PT-2026-107193

Name of the Vulnerable Software and Affected Versions ClearPass Policy Manager affected versions not specified Description An unauthenticated remote attacker can perform SQL injection attacks against an affected interface of ClearPass Policy Manager. SQL injection is a technique where malicious S...

PT-2026-107209

Name of the Vulnerable Software and Affected Versions ClearPass Policy Manager affected versions not specified Description A SQL injection flaw exists in the API of ClearPass Policy Manager. This issue allows a remote authenticated attacker with administrative privileges to perform SQL injection...

PT-2026-106394

Subscriber SQL Injection in WP2LEADS = 3.5.7 versions...

PT-2026-106719

A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The affected element is the function mysql query of the file admin/login.php of the component Administrator Login Endpoint. The manipulation of the argument username/password resul...

AlmaLinux 8 : mariadb-connector-c (ALSA-2026:75674)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:75674 advisory. mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysqlrealescapestring CVE-2026-44172 Tenable has extracted t...

RHEL 7 : Red Hat Single Sign-On 7.6.13 security update on RHEL 7 (Important) (RHSA-2026:76128)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:76128 advisory. Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single...

RHEL 9 : Red Hat Single Sign-On 7.6.13 security update on RHEL 9 (Important) (RHSA-2026:76130)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:76130 advisory. Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single...

AlmaLinux 9 : mariadb-connector-c (ALSA-2026:75673)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:75673 advisory. mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysqlrealescapestring CVE-2026-44172 Tenable has extracted t...