#cwe-89
共收录 2545 条相关情报。
← 返回所有主题 漏洞预警2026-07-20 发布INFO
CVE-2026-11349
The Modern Event Calendar Pro WordPress plugin before 7.34.0, Modern Events Calendar Lite WordPress plugin before 7.34.0
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-19 发布INFO
CVE-2026-16228
A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-19 发布INFO
CVE-2026-16227
A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This impacts an unkn
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-17 发布INFO
CVE-2026-60137
WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in p
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-17 发布INFO
CVE-2026-44739
Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.6, the columnConfigActi
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-17 发布INFO
CVE-2026-12283
Amazon Athena is a serverless, interactive query service that lets you analyze data directly in Amazon S3 using standard
历史摘要 · 未重新核验 · NVD
安全公告2026-07-17 发布INFO
CVE-2026-44739
Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.6, the columnConfigActi
历史摘要 · 未重新核验 · OSV.dev
安全公告2026-07-17 发布INFO
CVE-2026-12283
Amazon Athena is a serverless, interactive query service that lets you analyze data directly in Amazon S3 using standard
历史摘要 · 未重新核验 · OSV.dev
安全公告2026-07-17 发布INFO
CVE-2026-8297
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Gis Informatics En
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-07-17 发布INFO
CVE-2026-9586
An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The /pa endpoint pr
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-07-17 发布INFO
CVE-2026-9586
An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The /pa endpoint pr
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-17 发布INFO
CVE-2026-8297
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Gis Informatics En
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-17 发布INFO
CVE-2026-16014
A vulnerability was found in code-projects Hospital Bed Management System 1.0. This affects an unknown part of the compo
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-17 发布INFO
CVE-2026-16009
A vulnerability was detected in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file
历史摘要 · 未重新核验 · NVD
安全公告2026-07-17 发布INFO
CVE-2026-62238
OpenRemote before 1.26.0 contain an authenticated SQL injection vulnerability in the datapoint crosstab export endpoint
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-07-17 发布INFO
CVE-2026-62238
OpenRemote before 1.26.0 contain an authenticated SQL injection vulnerability in the datapoint crosstab export endpoint
历史摘要 · 未重新核验 · NVD
安全公告2026-07-17 发布INFO
CVE-2026-14782
The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to SQL Injection via the Cu
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-07-17 发布INFO
CVE-2026-62238
OpenRemote before 1.26.0 contain an authenticated SQL injection vulnerability in the datapoint crosstab export endpoint
历史摘要 · 未重新核验 · OSV.dev
漏洞预警2026-07-16 发布INFO
CVE-2026-14782
The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to SQL Injection via the Cu
历史摘要 · 未重新核验 · NVD
漏洞预警2026-07-16 发布INFO
CVE-2026-38158
A SQL injection vulnerability in the /ureport/datasource/previewData component of ureport v2.2.9 allows attackers to acc
历史摘要 · 未重新核验 · NVD