Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5Link Library <= 7.9.2 - Unauthenticated SQL Injection via 'link_url' ParameterOct 15, 2026
- High8.6Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement.Oct 15, 2026
- Critical9.8Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as findOneByEmail), the query build…Oct 15, 2026
- High7.0n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection vulnerability in version 1 of the Microsoft SQL node, which substitutes Query field expression val…Oct 14, 2026
- Medium6.9A vulnerability was found in cemtan sar2html 4.0.0.Oct 14, 2026
- Medium5.5A weakness has been identified in cemtan sar2html 4.0.0.Oct 14, 2026
- Critical9.8WeGIA is a web manager for charitable institutions.Oct 14, 2026
- High8.8WeGIA is a web manager for charitable institutions.Oct 14, 2026
- Medium6.5WeGIA is a web manager for charitable institutions.Oct 14, 2026
- Critical9.8WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameterOct 14, 2026
- Critical9.8WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.phpOct 14, 2026
- High7.1InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates.Oct 14, 2026
- High8.7DataEase is an open source data visualization and analysis tool.Oct 14, 2026
- High8.7DataEase is an open source data visualization and analysis tool.Oct 14, 2026
- Critical10.0e107 is a content management system (CMS).Oct 14, 2026
- High8.7Redash is a package for data visualization and sharing.Oct 14, 2026
- High8.7An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus.Oct 14, 2026
- Critical9.2An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ipfd of Juniper Networks Junos OS on SRX Series allows an unau…Oct 14, 2026
- High7.1Yiuman citrus through 0.15.0 contains an ORDER BY sql injection vulnerability in the citrus-support generic query framework that allows users to inject SQL via the sor…Oct 14, 2026
- High7.1Dromara Skyeye through commit 65d3ddcede70 contains an sql injection vulnerability that allows authenticated low-privileged users to inject SQL via the keyword paramet…Oct 14, 2026
- High7.2Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Progress MOVEit Transfer (Custom Reports module).Oct 14, 2026
- Medium6.1Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.Oct 14, 2026
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codepeople CP Multi View Event Calendar cp-multi-view-calendar al…EPSS 0.3%Oct 14, 2026
- High7.2Koha is vulnerable to SQL injection in the Most-circulated items report.EPSS 0.3%Oct 14, 2026
- Critical9.4A parameter taken from the request body is inserted into a T-SQL statement without parameterization or escaping, allowing a remote attacker to execute arbitrary SQL st…EPSS 0.5%Oct 14, 2026
124 records · page 1 of 5
PreviousNext