共收录 2591 条相关情报。
← 返回所有主题CVE-2026-9544
A vulnerability was found in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 10. Affected by thi
CVE-2026-9542
A weakness has been identified in CodeAstro Leave Management System 1.0. The affected element is an unknown function of
CVE-2026-48136
When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access
CVE-2026-48134
When the DLP is active, the UserCheck Web Portal contains an input-handling issue in the UserChoice flow. Under specific
CVE-2026-9528
A vulnerability was identified in itsourcecode Electronic Judging System 1.0. Impacted is an unknown function of the fil
CVE-2026-9526
A vulnerability was found in itsourcecode Electronic Judging System 1.0. This vulnerability affects unknown code of the
CVE-2026-9525
A vulnerability has been found in itsourcecode Electronic Judging System 1.0. This affects an unknown part of the file /
CVE-2026-9524
A flaw has been found in xianrendzw EasyReport up to 2.0.17.0522_Beta. Affected by this issue is the function execute of
CVE-2026-9523
A vulnerability was detected in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 3000WEBV
CVE-2026-48837
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements
CVE-2026-42774
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngi
CVE-2026-42773
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in eMagicOne eMagicOn
CVE-2026-48842
Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query
CVE-2026-9474
A vulnerability was found in yashpokharna2555 StudentManagementSystem up to cb2f558ddf8d19396de0f92abf2d224d46a0a203. Af
CVE-2026-27768
SQL Injection affecting the Access Manager role.
CVE-2026-46670
### Summary An unauthenticated SQL injection in the Bazar form-import path (`FormManager::create()`) allows any unauthe
CVE-2026-25606
CVE-2026-25606 是 STER 应用程序中的一个 SQL 注入漏洞，影响版本 9.5 之前。该漏洞存在于多个搜索过滤器组件中，由于未能正确中和用户输入，经过身份验证的攻击者可以通过注入恶意 SQL 语句，查看其他用户的敏感数据以
CVE-2026-4834
The WP ERP Pro plugin for WordPress is vulnerable to SQL Injection via the 'search_key' parameter in all versions up to,
CVE-2026-4834
The WP ERP Pro plugin for WordPress is vulnerable to SQL Injection via the 'search_key' parameter in all versions up to,
CVE-2026-48240
Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in ajax/statistics.php where the tick_id and f_ti