#cwe-89

共收录 2526 条相关情报。

← 返回所有主题
漏洞预警2026-08-19 发布INFO

A flaw has been found in code-projects Hospital Information System 1.0. The impacted element is the function User::login of the file includes/users/UsersController.php of the co...

CVE-2026-76574

A flaw has been found in code-projects Hospital Information System 1.0. The impacted element is the function User::login

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.0, a single quote in a schema property name is emitted in...

CVE-2026-71867

Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. From version 8.19.0 until 8.21.0, a double quote in a schema property n...

CVE-2026-71866

Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. From version 8

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

ISPConfig contains an authenticated SQL injection vulnerability in the Remote API. The primary_id parameter passed to delete and update API methods is concatenated directly into...

CVE-2026-61518

ISPConfig contains an authenticated SQL injection vulnerability in the Remote API. The primary_id parameter passed to de

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.6.0 until 4.14.6 and 5.0.0-beta3, DB::getFile() and DB::searchFile() in src/...

CVE-2026-49392

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.6.0 until 4.14.6 an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack a...

CVE-2026-20327

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. Thi...

CVE-2026-20030

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team ha

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

Joomla Extension - cmsjunkie.com - SQL injection in trips search in J-BusinessDirectory < 6.2.3 - Search keywords and ORDER BY were concatenated into SQL. 6.2.3 quotes keywords...

CVE-2026-75954

Joomla Extension - cmsjunkie.com - SQL injection in trips search in J-BusinessDirectory < 6.2.3 - Search keywords and O

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privil...

CVE-2026-71176

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

stigmem-node 0.9.0a1 interpolates Postgres backend schema identifiers into SQL strings without defensive quoting. In the affected code path the schema value is operator-controll...

CVE-2026-76240

stigmem-node 0.9.0a1 interpolates Postgres backend schema identifiers into SQL strings without defensive quoting. In the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

phpMyFAQ before 4.1.7 contains a SQL injection vulnerability in the glossary create and update endpoints caused by truncating an escaped string before embedding it in a SQL lite...

CVE-2026-76205

phpMyFAQ before 4.1.7 contains a SQL injection vulnerability in the glossary create and update endpoints caused by trunc

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

Joomla Extension - yootheme.com - Unauthenticated SQL injection in ItemController::element() in Zoo < 4.1.64 - The filter_type request value is interpolated into the query as a....

CVE-2026-74804

Joomla Extension - yootheme.com - Unauthenticated SQL injection in ItemController::element() in Zoo < 4.1.64 - The filte

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privil...

CVE-2026-70422

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privil...

CVE-2026-56088

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Faydam Innovation Inc. FAYDAM Datalogger allows SQL Injection. This issue ...

CVE-2026-16019

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Faydam Innovation

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

Unauthenticated SQL Injection in Total Donations <= 2.0.5 versions.

CVE-2026-73391

Unauthenticated SQL Injection in Total Donations <= 2.0.5 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

Unauthenticated SQL Injection in Nikstore Core <= 1.5 versions.

CVE-2026-73388

Unauthenticated SQL Injection in Nikstore Core <= 1.5 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

Unauthenticated SQL Injection in NGG Smart Image Search < 4.0.0 versions.

CVE-2026-73185

Unauthenticated SQL Injection in NGG Smart Image Search < 4.0.0 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

Unauthenticated SQL Injection in Maps Marker Pro <= 4.32 versions.

CVE-2026-73183

Unauthenticated SQL Injection in Maps Marker Pro <= 4.32 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

Subscriber SQL Injection in Community by PeepSo <= 9.0.5.2 versions.

CVE-2026-66668

Subscriber SQL Injection in Community by PeepSo <= 9.0.5.2 versions.

历史摘要 · 未重新核验 · NVD