Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.1Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains an SQL injection vulnerability in some endpoints that lack input validation.EPSS 0.3%Oct 12, 2026
- Low2.1A flaw has been found in SEMCMS up to 5.0.EPSS 0.2%Oct 12, 2026
- Medium5.5A vulnerability has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe.EPSS 0.3%Oct 12, 2026
- Medium5.3A security vulnerability has been detected in ZKTeco BioTime 9.5.6 Build 20260130.3206.EPSS 0.2%Oct 12, 2026
- Low2.1A vulnerability was identified in erzhongxmu JEEWMS up to 2026.09.27-W39.EPSS 0.2%Oct 12, 2026
- Low2.1A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39.EPSS 0.3%Oct 12, 2026
- Medium5.3Furion .NET Framework StringRenderExtensions.cs String.Replace sql injectionEPSS 0.3%Oct 11, 2026
- Critical9.8In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functionsEPSS 0.3%Oct 10, 2026
- High7.1HortusFox (hortusfox-web) before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted include_info values to th…EPSS 0.3%Oct 9, 2026
- Critical9.8IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used i…EPSS 0.3%Oct 8, 2026
- Critical9.8IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection.EPSS 0.3%Oct 8, 2026
- Critical9.8IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection.EPSS 0.3%Oct 8, 2026
- Medium6.1In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to injec…EPSS 0.2%Oct 8, 2026
- Medium6.5In Splunk Enterprise versions below 10.4.3, a user that holds a role with the list_spl2_modules capability could use SQL injection in SPL2 module filtering to access a…EPSS 0.2%Oct 7, 2026
- High8.1LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL que…EPSS 0.3%Oct 6, 2026
- High8.6Payload: SQL injection in SQLite/PostgresEPSS 0.3%Oct 6, 2026
- Critical9.3Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16EPSS 0.3%Oct 5, 2026
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Blind SQL Injection.EPSS 0.2%Sep 30, 2026
- High8.8SQL Injection vulnerability in DIAEnergie.Sep 24, 2026
- Critical9.8SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requestsEPSS 0.5%Sep 23, 2026
- Critical9.8Cisco Secure Email Gateway SQL Injection VulnerabilityKEVEPSS 29.5%Sep 14, 2026
- Critical9.8GeoTools is an open source Java library that provides tools for geospatial data.EPSS 4.0%Aug 21, 2026
- Critical10.0Metabase SQL Injection VulnerabilityKEVEPSS 19.0%Aug 10, 2026
- Critical9.8Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in /show_price_by_pdtId.php.EPSS 0.4%Jul 30, 2026
- Medium5.9WordPress Core SQL Injection VulnerabilityKEVEPSS 5.3%Jul 17, 2026