238998 matches found
CVE-2026-62532
Oracle Hyperion Calculation Manager version 11.2.25.0.000 has a Security component flaw exploitable via SQL by a high-privileged network attacker, allowing unauthorized read and update/insert/delete access to a subset of application data (CVSS 3.8, LOW). No patch version or remediation details ar...
EUVD-2026-61531
Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via SQL to compromise Oracle Hyperion Calculation...
EUVD-2026-61512
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion component: Common Events. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via SQL to compromise Oracle Hyperion...
EUVD-2026-61455
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Configuration Manager. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via SQL to compromise PeopleSoft Enterprise...
Froxlor: Second-Order SQL Injection via `Admins.add` `ipaddress` Parameter Allows Full Database Exfiltration
Summary A second-order SQL injection vulnerability in Froxlor's admin API allows an authenticated administrator to store a crafted SQL payload in the paneladmins.ip column via the Admins.add or Admins.update endpoint. The payload executes as a UNION-based SQL injection the next time...
GHSA-W27M-RMMF-G5W4 Froxlor: Second-Order SQL Injection via `Admins.add` `ipaddress` Parameter Allows Full Database Exfiltration
Summary A second-order SQL injection vulnerability in Froxlor's admin API allows an authenticated administrator to store a crafted SQL payload in the paneladmins.ip column via the Admins.add or Admins.update endpoint. The payload executes as a UNION-based SQL injection the next time...
CVE-2026-59893 vulnerabilities
Vulnerabilities for packages: apache-beam-python-3.14-sdk, label-studio, openstack-keystone-2025.1, openstack-glance-2025.2, openstack-glance-2025.2-fips, openstack-keystone-2025.1-fips, openstack-horizon-2025.1-fips, mlflow, netbox, openstack-horizon-2026.1, airflow, airflow-postgres-fips,...
GHSA-PWGV-4X5Q-6M9F vulnerabilities
Vulnerabilities for packages: apache-beam-python-3.14-sdk, label-studio, openstack-keystone-2025.1, openstack-glance-2025.2, openstack-glance-2025.2-fips, openstack-keystone-2025.1-fips, openstack-horizon-2025.1-fips, mlflow, netbox, openstack-horizon-2026.1, airflow, airflow-postgres-fips,...
GHSA-3496-9G83-7V6X vulnerabilities
Vulnerabilities for packages: apache-beam-python-3.14-sdk, label-studio, openstack-keystone-2025.1, openstack-glance-2025.2, openstack-glance-2025.2-fips, openstack-keystone-2025.1-fips, openstack-horizon-2025.1-fips, mlflow, netbox, openstack-horizon-2026.1, airflow, airflow-postgres-fips,...
CVE-2026-75876
A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522Beta. Affected by this issue is some unknown functionality of the file ModuleController.java of the component Move Operations. Such manipulation of the argument sourcePath leads to sql injection. The attack may b...
CVE-2026-47720
FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. Prior to 1.3.2, the TDengine DAQ storage connector's escapeTdString function in server/runtime/storage/tdengine/index.js doubles single quotes but does not escape backslashes. A remote unauthenticated attacker can submit a...
CVE-2026-54348 Froxlor: Second-Order SQL Injection via `Admins.add` `ipaddress` Parameter Allows Full Database Exfiltration
Froxlor is open source server administration software. Prior to 2.3.8, the Admins.add and Admins.update endpoints in lib/Froxlor/Api/Commands/Admins.php accept an attacker-controlled ipaddress array and store it as JSON in paneladmins.ip without enforcing numeric element types. When the poisoned...
EUVD-2026-61218
Froxlor is open source server administration software. Prior to 2.3.8, the Admins.add and Admins.update endpoints in lib/Froxlor/Api/Commands/Admins.php accept an attacker-controlled ipaddress array and store it as JSON in paneladmins.ip without enforcing numeric element types. When the poisoned...
CVE-2026-54348
Froxlor is open source server administration software. Prior to 2.3.8, the Admins.add and Admins.update endpoints in lib/Froxlor/Api/Commands/Admins.php accept an attacker-controlled ipaddress array and store it as JSON in paneladmins.ip without enforcing numeric element types. When the poisoned...
CVE-2026-54348 Froxlor: Second-Order SQL Injection via `Admins.add` `ipaddress` Parameter Allows Full Database Exfiltration
Froxlor is open source server administration software. Prior to 2.3.8, the Admins.add and Admins.update endpoints in lib/Froxlor/Api/Commands/Admins.php accept an attacker-controlled ipaddress array and store it as JSON in paneladmins.ip without enforcing numeric element types. When the poisoned...
CVE-2026-47720 FUXA: SQL injection in TDengine DAQ connector via backslash bypass of escapeTdString
FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. Prior to 1.3.2, the TDengine DAQ storage connector's escapeTdString function in server/runtime/storage/tdengine/index.js doubles single quotes but does not escape backslashes. A remote unauthenticated attacker can submit a...
CVE-2026-47720
FUXA (SCADA/HMI/Dashboard) versions before 1.3.2 contain a SQL injection (CWE-89) in the escapeTdString function at server/runtime/storage/tdengine/index.js:10, which doubles single quotes but fails to escape backslashes. Because TDengine's SQL parser treats \' as a literal quote, a crafted sids ...
CVE-2026-47720 FUXA: SQL injection in TDengine DAQ connector via backslash bypass of escapeTdString
FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. Prior to 1.3.2, the TDengine DAQ storage connector's escapeTdString function in server/runtime/storage/tdengine/index.js doubles single quotes but does not escape backslashes. A remote unauthenticated attacker can submit a...
CVE-2026-75876
EasyReport versions up to 2.0.17.0522_Beta contain a SQL injection in ModuleController.java via the sourcePath argument in the Move Operations component, exploitable remotely with low privileges; CVSS 6.3 (Medium) with proof-of-concept exploit disclosed; no patch version provided, project unrespo...
CVE-2026-75876 xianrendzw EasyReport Move Operations ModuleController.java sql injection
A security vulnerability has been detected in xianrendzw EasyReport up to 2.0.17.0522Beta. Affected by this issue is some unknown functionality of the file ModuleController.java of the component Move Operations. Such manipulation of the argument sourcePath leads to sql injection. The attack may b...