#cwe-89
共收录 2560 条相关情报。
← 返回所有主题 漏洞预警2026-06-24 发布INFO
CVE-2026-56052
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Funnel B
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-24 发布INFO
CVE-2026-9179
The WP Forms Connector plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the /wp-json/wp/
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-24 发布INFO
CVE-2026-8705
The ClearSale Total plugin for WordPress is vulnerable to SQL Injection via the `pagseguro[metodo]` POST parameter of th
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-23 发布INFO
CVE-2026-47384
NocoDB is software for building databases as spreadsheets. Prior to 2026.05.1, an authenticated user with column-create
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-23 发布INFO
CVE-2026-47375
NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, an authenticated user with columnAdd perm
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-23 发布INFO
CVE-2026-44792
n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an attacker with write access
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-22 发布INFO
CVE-2026-56221
Cap-go before 12.128.2 contains multiple SQL injection vulnerabilities in cloudflare.ts where user-controlled values fro
历史摘要 · 未重新核验 · NVD
安全公告2026-06-22 发布INFO
CVE-2026-44272
Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements use
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-06-22 发布INFO
CVE-2026-44271
Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements use
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-06-22 发布INFO
CVE-2026-44272
Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements use
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-22 发布INFO
CVE-2026-44271
Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements use
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-22 发布INFO
CVE-2025-66336
Apache Doris MCP Server contains a SQL injection vulnerability in a metadata query path. A user-controlled database name
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-21 发布INFO
CVE-2026-12789
A vulnerability was identified in ILIAS Learning Management System 11.0. This issue affects the function ilTrQuery::exec
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-21 发布INFO
CVE-2026-12776
A flaw has been found in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. This affects a
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-21 发布INFO
CVE-2026-12775
A vulnerability was detected in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. Affecte
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-19 发布INFO
CVE-2019-25761
Joomla! Component JoomCRM 1.1.1 contains an SQL injection vulnerability that allows authenticated attackers to execute a
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-19 发布INFO
CVE-2019-25759
Joomla! Component vBizz 1.0.7 contains an SQL injection vulnerability that allows authenticated attackers to execute arb
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-19 发布INFO
CVE-2019-25757
Joomla vWishlist 1.0.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-19 发布INFO
CVE-2019-25756
Joomla! Component vAccount 2.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execut
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-19 发布INFO
CVE-2019-25755
Joomla Component vReview 1.9.11 contains an SQL injection vulnerability that allows unauthenticated attackers to execute
历史摘要 · 未重新核验 · NVD