CVE-2026-51366

Vedo Suite v1.2.5 is vulnerable to SQL injection at the api_vedo/chat endpoint via the utente_chat parameter, enabling unauthenticated remote attackers to execute arbitrary code. Exploitation in the wild is not documented; patch version and mitigation details are not provided in the documents.

EUVD-2026-62481

SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the apivedo/chat endpoint and the utentechat parameter...

PT-2026-78490

Name of the Vulnerable Software and Affected Versions Cisco Crosswork affected versions not specified Description Multiple issues exist involving improper neutralization of special elements used in SQL commands, which can lead to SQL injection. SQL injection is a technique where an attacker inser...

MiracleLinux 8 : perl-DBI:1.641 (AXSA:2026-1572:02)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1572:02 advisory. DBI: Heap overflow when preparsing SQL statements with excessive placeholders CVE-2026-14739 DBI: Arbitrary code execution via caller-influenced...

MiracleLinux 8 : perl-DBI:1.641 (AXSA:2026-1570:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1570:01 advisory. DBI: Heap overflow when preparsing SQL statements with excessive placeholders CVE-2026-14739 DBI: Arbitrary code execution via caller-influenced...

The vulnerability of the jsonArrayContains() function in the GeoTools library, a software solution for administrative and publishing of geodata on the OSGeo GeoServer server, allows an attacker to disclose protected information and execute arbitrary code.

The vulnerability of the jsonArrayContains function in the GeoTools library, a software solution for administrative and publishing of geodata on the OSGeo GeoServer server, is related to the lack of protective measures for the SQL query structure during the processing of the CQLFILTER parameter...

ALSA-2026:56969 Important: php8.4 security, bug fix, and enhancement update

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

PT-2026-78345

Unauthenticated SQL Injection in Nikstore Core = 1.5 versions...

Photon OS 5.0: Postgresql15 PHSA-2026-5.0-92-0959

An update of the postgresql15 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0959. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

PT-2026-78522

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker coul...

CVE-2026-54347

creationtimestamp| type| source ---|---|--- 2026-08-18 22:35:28+00:00| published-proof-of-concept| https://github.com/froxlor/froxlor/security/advisories/GHSA-43gm-9rr3-cx7g...

CVE-2026-54348

creationtimestamp| type| source ---|---|--- 2026-08-18 22:35:25+00:00| published-proof-of-concept| https://github.com/froxlor/froxlor/security/advisories/GHSA-w27m-rmmf-g5w4 2026-08-19 13:32:06+00:00| seen| https://gist.github.com/alon710/af2c8d3762565eaa4715277e9dc15159...

CVE-2026-55593

creationtimestamp| type| source ---|---|--- 2026-08-18 22:35:23+00:00| published-proof-of-concept| https://github.com/froxlor/froxlor/security/advisories/GHSA-xpr4-8vp6-c87j 2026-08-19 11:32:39+00:00| seen| https://gist.github.com/alon710/3948341428804c685cf1bc5b4fc0d3f1...

CVE-2026-71308

creationtimestamp| type| source ---|---|--- 2026-08-18 22:35:09+00:00| published-proof-of-concept| https://github.com/Netflix/lemur/security/advisories/GHSA-cfh6-pv5c-38jv 2026-08-19 01:22:20+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mtfky2ijcb2v 2026-08-19 06:44:38+00:00...

CVE-2026-73919

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 3.2.18. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

CVE-2026-71091

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via SQL to compromise Oracle Hyperion Financial...

CVE-2026-70925

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Hyperion Financial...

CVE-2026-70928

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Hyperion Financial...

CVE-2026-70920

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Hyperion Financial...

CVE-2026-70893

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via SQL to compromise Oracle...