#cwe-89

共收录 2545 条相关情报。

← 返回所有主题
漏洞预警2026-07-20 发布INFO

The Modern Event Calendar Pro WordPress plugin before 7.34.0, Modern Events Calendar Lite WordPress plugin before 7.34.0 do not sanitise and escape a request parameter before us...

CVE-2026-11349

The Modern Event Calendar Pro WordPress plugin before 7.34.0, Modern Events Calendar Lite WordPress plugin before 7.34.0

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-19 发布INFO

A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /edit_schoolyr.php. Performing a manipulation o...

CVE-2026-16228

A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-19 发布INFO

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This impacts an unknown function of the file /edit_subject.php. Such manipula...

CVE-2026-16227

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This impacts an unkn

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-17 发布INFO

WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query, which could allow SQL Injection whe...

CVE-2026-60137

WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-17 发布INFO

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.6, the columnConfigAction endpoint in bundles/CustomReportsBundle/src/Controller...

CVE-2026-44739

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.6, the columnConfigActi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-17 发布INFO

Amazon Athena is a serverless, interactive query service that lets you analyze data directly in Amazon S3 using standard SQL. Athena Query Federation is a feature that allows yo...

CVE-2026-12283

Amazon Athena is a serverless, interactive query service that lets you analyze data directly in Amazon S3 using standard

历史摘要 · 未重新核验 · NVD

安全公告2026-07-17 发布INFO

Pimcore: SQL Injection in Custom Reports Column Configuration

CVE-2026-44739

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.6, the columnConfigActi

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-17 发布INFO

SQL injection in Amazon Athena Synapse connector

CVE-2026-12283

Amazon Athena is a serverless, interactive query service that lets you analyze data directly in Amazon S3 using standard

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-07-17 发布INFO

Improper neutralization of special elements used in an SQL command ('SQL injection')...

CVE-2026-8297

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Gis Informatics En

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-17 发布INFO

An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 ...

CVE-2026-9586

An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The /pa endpoint pr

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-17 发布INFO

An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The /pa endpoint processes XML content beginning with <PolycomIPPhone> and d...

CVE-2026-9586

An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The /pa endpoint pr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-17 发布INFO

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Gis Informatics Engineering Consulting Laboratory R&D and Software Services...

CVE-2026-8297

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Gis Informatics En

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-17 发布INFO

A vulnerability was found in code-projects Hospital Bed Management System 1.0. This affects an unknown part of the component Login Form. Performing a manipulation of the argumen...

CVE-2026-16014

A vulnerability was found in code-projects Hospital Bed Management System 1.0. This affects an unknown part of the compo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-17 发布INFO

A vulnerability was detected in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /prescriptionorderdetail.php. The manipulation of the ar...

CVE-2026-16009

A vulnerability was detected in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file

历史摘要 · 未重新核验 · NVD

安全公告2026-07-17 发布INFO

OpenRemote before 1.26.0 contain an authenticated SQL injection vulnerability in the datapoint...

CVE-2026-62238

OpenRemote before 1.26.0 contain an authenticated SQL injection vulnerability in the datapoint crosstab export endpoint

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-07-17 发布INFO

OpenRemote before 1.26.0 contain an authenticated SQL injection vulnerability in the datapoint crosstab export endpoint that constructs PostgreSQL queries by concatenating asset...

CVE-2026-62238

OpenRemote before 1.26.0 contain an authenticated SQL injection vulnerability in the datapoint crosstab export endpoint

历史摘要 · 未重新核验 · NVD

安全公告2026-07-17 发布INFO

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to...

CVE-2026-14782

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to SQL Injection via the Cu

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-07-17 发布INFO

OpenRemote < 1.26.0 SQL Injection via Crosstab Export

CVE-2026-62238

OpenRemote before 1.26.0 contain an authenticated SQL injection vulnerability in the datapoint crosstab export endpoint

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-07-16 发布INFO

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to SQL Injection via the Customer Import in all versions up to, and including, 2.4.3...

CVE-2026-14782

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to SQL Injection via the Cu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-16 发布INFO

A SQL injection vulnerability in the /ureport/datasource/previewData component of ureport v2.2.9 allows attackers to access sensitive database information via crafted SQL statem...

CVE-2026-38158

A SQL injection vulnerability in the /ureport/datasource/previewData component of ureport v2.2.9 allows attackers to acc

历史摘要 · 未重新核验 · NVD