#cwe-89
共收录 2526 条相关情报。
← 返回所有主题 漏洞预警2026-09-09 发布INFO
CVE-2026-87921
A vulnerability was identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. A
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-09 发布INFO
CVE-2026-71808
A SQL Injection vulnerability in Siam Ordering (siam-server) 1.0.0 allows remote authenticated attackers to execute arbi
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-09 发布INFO
CVE-2026-79322
SQL injection in the RelatedProduct block in Mageplaza Blog for Magento 2 (mageplaza/magento-2-blog-extension) through 4
历史摘要 · 未重新核验 · NVD
安全公告2026-09-09 发布INFO
CVE-2026-87034
Tanium addressed a SQL injection vulnerability in Comply.
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-08 发布INFO
CVE-2026-67370
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-08 发布INFO
CVE-2026-66820
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-08 发布INFO
CVE-2026-66819
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-08 发布INFO
CVE-2026-62895
Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-08 发布INFO
CVE-2026-86667
A weakness has been identified in aircheng-org iWebShop-5 up to 5.15. The affected element is the function member_list o
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-08 发布INFO
CVE-2026-79569
Movie_Recommend v1.0.0 was discovered to contain a SQL injection vulnerability in the sort parameter at /loadingmore. Th
历史摘要 · 未重新核验 · NVD
安全公告2026-09-08 发布INFO
CVE-2026-86667
A weakness has been identified in aircheng-org iWebShop-5 up to 5.15. The affected element is the function member_list o
历史摘要 · 未重新核验 · OSV.dev
漏洞预警2026-09-08 发布INFO
CVE-2026-77098
Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-08 发布INFO
CVE-2026-17509
The WPML Multilingual CMS plugin for WordPress is vulnerable to time-based SQL Injection via the ‘elementIds’ parameter
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-08 发布INFO
CVE-2026-86518
A vulnerability has been found in code-projects Student Crud Operation 1.0. This affects an unknown function of the file
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-08 发布INFO
CVE-2026-86517
A flaw has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is the function mysqli_query
历史摘要 · 未重新核验 · NVD
安全公告2026-09-08 发布INFO
CVE-2026-44766
SAP S/4HANA (Intercompany Matching and Reconciliation) allows a low-privileged authenticated user to inject malicious in
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-09-08 发布INFO
CVE-2026-44766
SAP S/4HANA (Intercompany Matching and Reconciliation) allows a low-privileged authenticated user to inject malicious in
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-07 发布INFO
CVE-2026-86310
A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown functi
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-07 发布INFO
CVE-2026-86309
A flaw has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages
历史摘要 · 未重新核验 · NVD
漏洞预警2026-09-07 发布INFO
CVE-2026-86298
A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown func
历史摘要 · 未重新核验 · NVD