共收录 2526 条相关情报。
← 返回所有主题CVE-2026-82655
Admidio before 5.0.12 contains a blind SQL injection vulnerability in the relation_type_list parameter of lists_show.php
CVE-2026-82545
A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the fi
CVE-2026-82655
Admidio before 5.0.12 contains a blind SQL injection vulnerability in the relation_type_list parameter of lists_show.php
CVE-2026-82541
A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an
CVE-2026-82540
A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the fi
CVE-2026-82485
A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unkn
CVE-2026-82484
A flaw has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages
CVE-2026-82424
CVE-2026-82424 是 PHPGurukul Student Information System 1.0 中被发现的一个安全弱点，涉及文件 /student_edit1.php 的未知功能。攻击者可以通过远程方式操纵参数 ID，
CVE-2026-82422
CVE-2026-82422 影响 itsourcecode Sales and Inventory System 1.0。该漏洞位于 /pages/emp_del.php 文件中的未知函数，攻击者可对参数 ID 进行操纵，导致 SQL 注
CVE-2026-82421
该漏洞位于 itsourcecode Sales and Inventory System 1.0 的 /pages/emp_edit.php 文件中，攻击者可通过操纵参数 ID 触发 SQL 注入。该漏洞影响的是未知处理逻辑，CVSS 评
CVE-2026-80488
The WP Ultimate CSV Importer WordPress plugin before 9.0 does not properly sanitise and escape imported field values be
CVE-2026-16061
The Rest Routes WordPress plugin through 5.5.5 does not sanitize and validate a value taken from the URL of one of its
CVE-2026-80488
The WP Ultimate CSV Importer WordPress plugin before 9.0 does not properly sanitise and escape imported field values be
CVE-2026-16061
The Rest Routes WordPress plugin through 5.5.5 does not sanitize and validate a value taken from the URL of one of its
CVE-2026-55855
MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to
CVE-2026-55855
### Summary A SQL injection is possible when the connector escapes Buffer parameters client-side under a multi-byte cli
CVE-2026-77586
In MongoDB Connector for BI, MongoDB object names such as collection, field, and index names are placed into the quoted
CVE-2026-77184
In MongoDB Connector for BI, the description text of a collection's JSON schema validator is incorporated into the comme
CVE-2026-55634
Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, the class-defi
CVE-2026-55509
WsgiDAV is a generic and extendable WebDAV server based on WSGI. Prior to 4.3.5, the sample MySQLBrowserProvider in wsgi