240644 matches found
MiracleLinux 8 : perl-DBI:1.641 (AXSA:2026-1574:01)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1574:01 advisory. DBI: Heap overflow when preparsing SQL statements with excessive placeholders CVE-2026-14739 DBI: Arbitrary code execution via caller-influenced...
RHEL 10 : php8.4 (RHSA-2026:56969)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:56969 advisory. PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also...
UBUNTU-CVE-2026-23937
The Zabbix API host.get action can be exploited by authenticated users...
PT-2026-78790
Name of the Vulnerable Software and Affected Versions Splunk SOAR versions prior to 8.6.0 Description A user with the Automation Engineer role can execute arbitrary Structured Query Language SQL statements against the database. This allows for the creation, reading, updating, or deletion of all...
PT-2026-78490
Name of the Vulnerable Software and Affected Versions Cisco Crosswork affected versions not specified Description Multiple issues exist involving improper neutralization of special elements used in SQL commands, which can lead to SQL injection. SQL injection is a technique where an attacker inser...
EUVD-2026-62481
SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the apivedo/chat endpoint and the utentechat parameter...
PT-2026-78373
Name of the Vulnerable Software and Affected Versions FAYDAM Datalogger versions 2.7.1 through 2.7.x Description Improper neutralization of special elements used in an SQL command allows for SQL injection. This occurs when the application fails to properly sanitize user-supplied data before...
CVE-2026-51366
SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the apivedo/chat endpoint and the utentechat parameter...
PT-2026-78792
Name of the Vulnerable Software and Affected Versions Splunk SOAR versions prior to 8.6.0 Description A user with the Automation Engineer role can execute arbitrary Structured Query Language SQL statements against the database. This occurs during custom list retrieval within a playbook, enabling...
ALSA-2026:56969 Important: php8.4 security, bug fix, and enhancement update
PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...
PT-2026-78770
Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Description Users without admin or power roles can execute arbitrary...
MiracleLinux 8 : perl-DBI:1.641 (AXSA:2026-1570:01)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1570:01 advisory. DBI: Heap overflow when preparsing SQL statements with excessive placeholders CVE-2026-14739 DBI: Arbitrary code execution via caller-influenced...
The vulnerability of the jsonArrayContains() function in the GeoTools library, a software solution for administrative and publishing of geodata on the OSGeo GeoServer server, allows an attacker to disclose protected information and execute arbitrary code.
The vulnerability of the jsonArrayContains function in the GeoTools library, a software solution for administrative and publishing of geodata on the OSGeo GeoServer server, is related to the lack of protective measures for the SQL query structure during the processing of the CQLFILTER parameter...
MiracleLinux 8 : perl-DBI:1.641 (AXSA:2026-1572:02)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1572:02 advisory. DBI: Heap overflow when preparsing SQL statements with excessive placeholders CVE-2026-14739 DBI: Arbitrary code execution via caller-influenced...
PT-2026-78421
Name of the Vulnerable Software and Affected Versions stigmem-node version 0.9.0a1 Description The software interpolates Postgres backend schema identifiers into SQL strings without defensive quoting. While the schema value in the affected code path is operator-controlled, this pattern could allo...
PT-2026-78253
Name of the Vulnerable Software and Affected Versions xianrendzw EasyReport versions prior to 2.0.17.0522 Beta Description Improper neutralization of special elements used in a template engine occurs within the SQL Preview Endpoint component. A remote attacker can manipulate the sqlText argument ...
PT-2026-78791
Name of the Vulnerable Software and Affected Versions Splunk SOAR versions prior to 8.6.0 Description A user with the Automation Engineer role can execute arbitrary Structured Query Language SQL statements against the database via custom function results. This occurs because the system constructs...
PT-2026-78736
Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Description A low-privileged user without admin or power roles can...
The vulnerability of the Phoca Cart component in the Joomla content management system allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Phoca Cart component in the Joomla content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...