287975 matches found
CVE-2026-79834
A security vulnerability in HPE NonStop SQL/MX SQLCAT (specifically version T1055L40 and earlier) may allow an unauthenticated user to perform unauthorized command execution . This issue is attributed to Improper Input Validation (CWE-20). The vulnerability is rated as HIGH severity (CVSS 7.4). H...
CVE-2026-79834 HPE NonStop SQL/MX SQLCAT - Unauthorized command execution vulnerability
A security vulnerability in HPE NonStop SQL/MX SQLCAT may allow an unauthenticated user to perform unauthorized command execution...
CVE-2026-79832
A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in information disclosure or process crash...
CVE-2026-108497
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in TMS Amelia ameliabooking allows SQL Injection.This issue affects Amelia: from n/a through 2.4.10...
Magento-CVE-2019-7139-SQLi-PoC
CVE-2019-7139 PoC: Magento SQL Injection This repository contains a proof-of-concept PoC exploit for CVE-2019-7139 PRODSECBUG-2198, an unauthenticated SQL injection vulnerability in Magento, discovered by Charles Fol of Ambionics Security. Vulnerability Details CVE ID : CVE-2019-7139 Affected...
CVE-2026-108497
The TMS Amelia (ameliabooking) WordPress plugin is vulnerable to SQL Injection due to the improper neutralization of special elements used in an SQL command. This vulnerability affects versions from n/a through 2.4.10 . A successful exploitation could allow an attacker to interact with the underl...
CVE-2026-108497 WordPress Amelia plugin <= 2.4.10 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in TMS Amelia ameliabooking allows SQL Injection.This issue affects Amelia: from n/a through 2.4.10...
EUVD-2026-102005
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in TMS Amelia ameliabooking allows SQL Injection.This issue affects Amelia: from n/a through 2.4.10...
CVE-2026-108497 WordPress Amelia plugin <= 2.4.10 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in TMS Amelia ameliabooking allows SQL Injection.This issue affects Amelia: from n/a through 2.4.10...
CVE-2026-79832
A stack buffer overflow vulnerability exists in the HPE NonStop SQL/MX Executor component. This vulnerability could potentially lead to information disclosure or a process crash . Affected software versions include TSQLEXE T9193L01^AIP and earlier, as well as T9193L02 . HPE has released fixes for...
CVE-2026-79832 HPE NonStop SQL/MX Executor - Buffer overflow vulnerability
A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in information disclosure or process crash...
CVE-2026-79832 HPE NonStop SQL/MX Executor - Buffer overflow vulnerability
A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in information disclosure or process crash...
EUVD-2026-102003
A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in information disclosure or process crash...
PraisonAI: PGVector and Cassandra knowledge stores interpolate vector dimensions into DDL
PGVector and Cassandra knowledge stores interpolate vector dimensions into DDL SummaryThe PGVector and Cassandra knowledge-store backends validate SQL/CQL identifiers such as schema, keyspace, and collection names, but still insert the caller-controlled dimension argument directly into CREATE TAB...
PYSEC-2026-4260 PraisonAI: PGVector and Cassandra knowledge stores interpolate vector dimensions into DDL
PGVector and Cassandra knowledge stores interpolate vector dimensions into DDL Summary The PGVector and Cassandra knowledge-store backends validate SQL/CQL identifiers such as schema, keyspace, and collection names, but still insert the caller-controlled dimension argument directly into CREATE...
soda-sql (>=2.0.0b17, <=2.0.0b27), soda-sql-snowflake (>=2.1.0b12, <=2.1.6) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.4.0)
snowflake-connector-python PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - soda-sql =2.0.0b17, =2.1.0b12, =2.1.6 Source cves: CVE-2026-86597 Source advisory: OSV:PYSEC-2026-4301...
PYSEC-2026-4242 LlamaIndex DuckDBVectorStore vulnerable to SQL injection through ref_doc_id
An SQL injection vulnerability exists in the delete function of DuckDBVectorStore in run-llama/llamaindex version v0.12.19. This vulnerability allows an attacker to manipulate the refdocid parameter, enabling them to read and write arbitrary files on the server, potentially leading to remote code...
LlamaIndex DuckDBVectorStore vulnerable to SQL injection through ref_doc_id
An SQL injection vulnerability exists in the delete function of DuckDBVectorStore in run-llama/llamaindex version v0.12.19. This vulnerability allows an attacker to manipulate the refdocid parameter, enabling them to read and write arbitrary files on the server, potentially leading to remote code...
CVE-2026-26245
A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Video Station 5.8.8 and later...
CVE-2026-26244
A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Video Station 5.8.8 and later...