262437 matches found
CVE-2026-88414
MCMS 6.1.1 through 6.2.1 contains a SQL injection vulnerability in the PageAction.verify endpoint GET /ms/mdiy/page/verify.do...
Security Bulletin: NVIDIA Infrastructure Controller - September 2026
NVIDIA has released a software update for NVIDIA® Infrastructure Controller. To protect your system, clone or update this software to version 2.0 or later from NVIDIA/infra-controller on GitHub. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities th...
CVE-2026-88414
Versions 6.1.1 through 6.2.1 of MCMS are affected by a SQL injection vulnerability located in the PageAction.verify endpoint (GET /ms/mdiy/page/verify.do). The vulnerability allows for unauthorized interaction with the backend database. While the technical impact is rated as critical with high sc...
CVE-2026-88416
The MCMS software versions 6.1.1 through 6.2.1 are susceptible to a SQL injection vulnerability within the custom model/form import feature . This flaw allows an attacker to insert malicious SQL statements into entry fields, potentially leading to unauthorized database access . While the vulnerab...
PT-2026-96961
Name of the Vulnerable Software and Affected Versions MCMS versions 6.1.1 through 6.2.1 Description SQL injection occurs in the 'PageAction.verify' endpoint GET '/ms/mdiy/page/verify.do'. SQL injection is a type of vulnerability that allows an attacker to interfere with the queries that an...
Traccar GPS Disclosure
The vulnerability of the Traccar GPS system’s application programming interface is related to the lack of measures taken to protect the SQL query structure when processing an HTTP DELETE /api/permissions request. Exploiting this vulnerability can allow a remote attacker to disclose sensitive...
PT-2026-97106
Name of the Vulnerable Software and Affected Versions anirbandutta9 College-Notes-Gallery versions up to 8c1cf3d98f30982d069c88ca172612c001eb39f6 Description A remote SQL injection exists in the login.php file. This issue occurs when the user and pass arguments are manipulated, allowing an attack...
PT-2026-96910
Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC affected versions not specified Description An Improper Neutralization of Special Elements used in an SQL Command, known as SQL Injection, allows a low-privileged attacker to bypass security features. This issue...
CVE-2026-12718: Improper Neutralization of Special Elements used in an SQL Command
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Karel Electronic Industry and Trade Inc. KarelIPS allows Blind SQL Injection. This issue affects KarelIPS: through 22092026. NOTE: The vendor was contacted and it was learned that the product is no...
PT-2026-96730
Name of the Vulnerable Software and Affected Versions KarelIPS versions prior to 22092026 Description An issue involving improper neutralization of special elements used in an SQL command allows for Blind SQL Injection. Blind SQL Injection is a technique where an attacker asks the database true o...
CVE-2026-18137: Improper Neutralization of Special Elements used in an SQL Command
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to execute arbitrary ESQL commands due to improper neutralization of special elements used in an ESQL command...
CVE-2026-94492: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in Yonyou U8cloud 5.x. This vulnerability affects unknown code of the file /u8cloud/openapi/so.saleorder.sendaudit of the component OpenAPI. The manipulation of the argument operator leads to sql injection. The attack can be initiated remotely. The explo...
CVE-2026-75682: Improper Neutralization of Special Elements used in an SQL Command
Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary SQL...
CVE-2026-88416: Improper Neutralization of Special Elements used in an SQL Command
MCMS 6.1.1 through 6.2.1 has a SQL injection vulnerability in the custom model/form import feature...
PT-2026-96695
Name of the Vulnerable Software and Affected Versions DevItems HashBar – WordPress Notification Bar versions prior to 2.0.4 Description An issue involving improper neutralization of special elements used in an SQL command allows for Blind SQL Injection. Blind SQL Injection is a technique where an...
CVE-2026-88414
MCMS 6.1.1 through 6.2.1 contains a SQL injection vulnerability in the PageAction.verify endpoint GET /ms/mdiy/page/verify.do...
PT-2026-96908
Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to...
PT-2026-96327
Name of the Vulnerable Software and Affected Versions Yonyou KSOA version 9.0 Description A weakness in the /cardcase/search list.jsp file allows for remote SQL injection. This occurs when the address argument is manipulated, enabling an attacker to execute unauthorized database queries...
