#cwe-89

共收录 2523 条相关情报。

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in jegtheme JNews - Pay Writer jnews-pay-writer allows Blind SQL Injection.Thi...

CVE-2026-96328

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in jegtheme JNews - P

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms_plugin allows Blind SQL Injection.This issue affects...

CVE-2026-96327

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS w

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue af...

CVE-2026-95610

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UpSolution UpSolut

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms allows Blind SQL Injection.This issue affects WPLMS...

CVE-2026-95607

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Taskbuilder Taskbuilder taskbuilder allows Blind SQL Injection.This issue a...

CVE-2026-95599

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Taskbuilder Taskbu

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allo...

CVE-2026-94663

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileG

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-09 发布INFO

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shinetheme Traveler traveler allows Blind SQL Injection.This issue affects ...

CVE-2026-93947

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shinetheme Travele

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-09 发布INFO

The Code Snippets WordPress plugin before 3.10.0 does not sanitise and escape a user-supplied parameter before using it in a SQL query in some of its snippet-migration import en...

CVE-2026-106097

The Code Snippets WordPress plugin before 3.10.0 does not sanitise and escape a user-supplied parameter before using it

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

安全公告2026-10-09 发布INFO

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary...

CVE-2026-84209

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to imp

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:high

安全公告2026-10-09 发布INFO

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute...

CVE-2026-80381

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements d

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:critical

安全公告2026-10-09 发布INFO

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote...

CVE-2026-81932

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker coul

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:high

安全公告2026-10-09 发布INFO

Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike...

CVE-2025-71428

Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike() that allows authenti

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-89 #severity:medium

漏洞预警2026-10-08 发布INFO

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL c...

CVE-2026-84209

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to imp

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-08 发布INFO

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allo...

CVE-2026-81932

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker coul

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-08 发布INFO

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection.

CVE-2026-80381

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements d

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-08 发布INFO

Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike() that allows authenticated administrators to inject SQL via the username param...

CVE-2025-71428

Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike() that allows authenti

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

安全公告2026-10-08 发布INFO

Jivejdon through 5.0 SQL Injection via username in userListAction

CVE-2025-71428

Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike() that allows authenti

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-89

漏洞预警2026-10-08 发布INFO

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to modify data and cause a denial...

CVE-2026-16830

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-08 发布INFO

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.5, 3.3.4, 3.4.7, and 3.5.4, text-protocol escaping al...

CVE-2026-107385

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to

历史摘要 · 未重新核验 · NVD

#cve #cwe-89

漏洞预警2026-10-08 发布INFO

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. From 3.2.0 until 3.2.5, 3.3.4, 3.4.7, and 3.5.4, applications that...

CVE-2026-107384

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. From 3.2.

历史摘要 · 未重新核验 · NVD

#cve #cwe-89