#cwe-89
共收录 2560 条相关情报。
← 返回所有主题 漏洞预警2026-05-27 发布INFO
CVE-2026-40819
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the sync_data24 task du
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-27 发布INFO
CVE-2026-40818
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the _mb24confi_getDevic
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-27 发布INFO
CVE-2026-40817
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAlarmProfiles fu
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-27 发布INFO
CVE-2026-40816
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the mb24alarm.php files
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-27 发布INFO
CVE-2026-40815
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the _mb24api_getUserAcc
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-27 发布INFO
CVE-2026-40814
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dataapi.php files _
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-27 发布INFO
CVE-2026-40813
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getLiveValues funct
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-27 发布INFO
CVE-2026-40812
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getLiveValues funct
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-27 发布INFO
CVE-2026-40811
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the ssoabstractservice
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-27 发布INFO
CVE-2026-40810
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the userinfo endpoint d
历史摘要 · 未重新核验 · NVD
安全公告2026-05-27 发布INFO
CVE-2026-44741
# GM-369
## Summary
SQL injection in Pimcore's translation grid date filter — the user-supplied `property` field from t
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-05-27 发布INFO
CVE-2026-44739
### Summary
The columnConfigAction endpoint in the CustomReportsBundle is vulnerable to SQL injection. An attacker with
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-05-27 发布INFO
CVE-2026-9607
A vulnerability was found in itsourcecode Courier Management System 1.0. The affected element is an unknown function of
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-27 发布INFO
CVE-2026-9606
A vulnerability has been found in itsourcecode Courier Management System 1.0. Impacted is an unknown function of the fil
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-26 发布INFO
CVE-2026-9584
A security vulnerability has been detected in code-projects Project Management System 1.0. Affected is an unknown functi
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-26 发布INFO
CVE-2026-9575
A vulnerability has been found in itsourcecode Student Transcript Processing System 1.0. This issue affects some unknown
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-26 发布INFO
CVE-2026-9574
A flaw has been found in itsourcecode Student Transcript Processing System 1.0. This vulnerability affects unknown code
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-26 发布INFO
CVE-2026-9573
A vulnerability was detected in itsourcecode Student Transcript Processing System 1.0. This affects an unknown part of t
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-26 发布INFO
CVE-2026-46624
Twenty is an open source CRM. From 1.7.7 through 1.16.7, a critical Remote Code Execution (RCE) vulnerability exists in
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-26 发布INFO
CVE-2026-44706
Chatwoot is a customer engagement suite. From 2.2.0 to before 4.11.2, a SQL injection vulnerability exists in the conver
历史摘要 · 未重新核验 · NVD