287953 matches found
CVE-2026-86047 MariaDB: Insufficient quoting in mariadb-dump and SHOW commands
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW CREATE SERVER, SHOW CREATE USER, and mariadb-dump are affected because each does not consistently quote identifiers and values when serializing SQL. A...
CVE-2026-86047 MariaDB: Insufficient quoting in mariadb-dump and SHOW commands
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW CREATE SERVER, SHOW CREATE USER, and mariadb-dump are affected because each does not consistently quote identifiers and values when serializing SQL. A...
CVE-2026-86047
The MariaDB server is vulnerable to a SQL injection flaw (CWE-89) in versions 10.6.1 through 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2. The root cause is insufficient quoting of identifiers and values during SQL serialization within the mariadb-dump utility and SHOW CREATE SERVER and...
EUVD-2026-102943
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW CREATE SERVER, SHOW CREATE USER, and mariadb-dump are affected because each does not consistently quote identifiers and values when serializing SQL. A...
WordPress Welcart E-Commerce SQL Injection Vulnerability
WordPress Welcart e-Commerce versions 2.12.4 and earlier have a SQL injection vulnerability. This vulnerability stems from insufficient escaping of the 'wpuscesorderold' parameter provided to users JSON field searchSql/searchSkuSql, as well as inadequate preparation of existing SQL queries. This...
WordPress Welcart e-Commerce plugin <= 2.12.4 - Authenticated (Editor+) SQL Injection vulnerability
Authenticated Editor+ SQL Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin Welcart e-Commerce versions = 2.12.4...
CVE-2026-64959
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection', Missing Authentication for Critical Function vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly...
CVE-2026-111399
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows SQL Injection.This issue affects MapSVG: from n/a through 8.16.1...
SUSE CVE-2025-6472
A vulnerability, which was classified as critical, has been found in code-projects Online Bidding System 1.0. Affected by this issue is some unknown functionality of the file /showprod.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploi...
CVE-2026-111399 WordPress MapSVG plugin <= 8.16.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows SQL Injection.This issue affects MapSVG: from n/a through 8.16.1...
EUVD-2026-102859
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows SQL Injection.This issue affects MapSVG: from n/a through 8.16.1...
CVE-2026-111399 WordPress MapSVG plugin <= 8.16.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows SQL Injection.This issue affects MapSVG: from n/a through 8.16.1...
CVE-2026-111399
The MapSVG WordPress plugin (versions
WordPress MapSVG plugin <= 8.16.1 - SQL Injection vulnerability
SQL Injection vulnerability discovered by hhhai in WordPress Plugin MapSVG versions = 8.16.1...
CVE-2026-64959 Apache Kylin: Missing authentication on certain cache API endpoints
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection', Missing Authentication for Critical Function vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly...
CVE-2026-64959 Apache Kylin: Missing authentication on certain cache API endpoints
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection', Missing Authentication for Critical Function vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly...
CVE-2026-64959
Apache Kylin versions 5 through 5.0.4 are vulnerable to SQL Injection and Missing Authentication for Critical Function (CWE-89, CWE-306). The root cause is that certain backend cache API endpoints lack required authentication, allowing for the execution of injected SQL commands. This poses a high...
EUVD-2026-102854
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection', Missing Authentication for Critical Function vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly...
CVE-2026-64959
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection', Missing Authentication for Critical Function vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly...
OESA-2026-4320 python-sqlparse security update
A non-validating SQL parser. Security Fixes: sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse/filters/output.py fails to escape existing backslashes before quotes in sqlparse.format outputformat='python' and outputformat='php' and the corresponding sqlformat -l...