Live August 30, 2026 Sources: NVD · GHSA · OSV · CISA KEV · JVN

Sign in Sign up

JA · EN · FR

Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: sql-injection Clear

ID		Title	Severity	Tags	Detected
CVE-2026-19905		A weakness has been identified in Jinher OA 1.0. Impacted is an unknown function of the file /C6... A weakness has been identified in Jinher OA 1.0. Impacted is an unknown function of the file /C6...	High	SQL Injection Cwe 74 Cwe 89 Sql Injection	2 weeks ago
CVE-2026-18859		A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of... A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of...	High	SQL Injection Cwe 74 Cwe 89 Sql Injection +1	3 weeks ago
CVE-2026-17346		The fix for CVE-2026-12044 in pgAdmin 4 9.16 hardened qtLiteral and switched sixteen COMMENT ON /... The fix for CVE-2026-12044 in pgAdmin 4 9.16 hardened qtLiteral and switched sixteen COMMENT ON /...	High	Cwe 89 PostgreSQL Sql Injection Pgadmin +1	4 weeks ago
CVE-2026-5490		DriveLock SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote... DriveLock SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote...	High	SQL Injection Privilege Escalation Cwe 89 Sql Injection	1 month ago
CVE-2026-63030 KEV		WordPress Core — WordPress Core Interpretation Conflict Vulnerability WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137.	Critical	WordPress Remote Code Execution SQL Injection Cwe 436 +10	1 month ago
CVE-2026-11489		A vulnerability was found in code-projects Online Music Site 1.0. This vulnerability affects... A vulnerability was found in code-projects Online Music Site 1.0. This vulnerability affects...	High	PHP SQL Injection Cwe 74 Cwe 89 +1	2 months ago
CVE-2026-11486		A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by... A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by...	High	PHP SQL Injection Cwe 74 Cwe 89 +1	2 months ago
CVE-2026-9584		A security vulnerability has been detected in code-projects Project Management System 1.0.... A security vulnerability has been detected in code-projects Project Management System 1.0....	High	PHP SQL Injection Cwe 74 Cwe 89 +2	3 months ago
CVE-2023-46453		SQL Injection in network-device (CVE-2023-46453) SQL injection in network-device (CVE-2023-46453). Successful exploitation can lead to full system takeover.	Critical	Authentication Bypass Cwe 89 Sql Injection Network Device +11	3 months ago
CVE-2026-42208 KEV		[KEV] SQL Injection in Berriai litellm (CVE-2026-42208) SQL injection in Berriai litellm (CVE-2026-42208). Successful exploitation can lead to full system takeover. Exploitable via `POST /chat/completions`. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `>=1.83.7` or later.	Critical	Cwe 89 LiteLLM Berriai Sql +17	3 months ago
CVE-2026-36458		Code Injection in sqli (CVE-2026-36458) code injection in sqli (CVE-2026-36458). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 94 Chestnutcms Cms +13	3 months ago
CVE-2026-21643 KEV		[KEV] SQL Injection in Fortinet forticlient-ems (CVE-2026-21643) SQL injection in Fortinet forticlient-ems (CVE-2026-21643). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Fortinet Forticlient Ems Cwe 89 Remote Code Execution +12	4 months ago

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →