Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-89 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-34400	SQL Injection in sqli (CVE-2026-34400) SQL injection in sqli (CVE-2026-34400). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Alerta Project Alerta	4 months ago
CVE-2026-5206	Vulnerability in sqli (CVE-2026-5206) vulnerability in sqli (CVE-2026-5206). Risk of unauthorized operations or information disclosure.	Medium	SQL Injection Cwe 74 Cwe 89	4 months ago
CVE-2026-30520	SQL Injection in sqli (CVE-2026-30520) SQL injection in sqli (CVE-2026-30520). Risk of unauthorized operations or information disclosure.	Medium	PHP SQL Injection Cwe 89 Oretnom23 +1	4 months ago
CVE-2026-34220	SQL Injection in sqli (CVE-2026-34220) SQL injection in sqli (CVE-2026-34220). Successful exploitation can lead to full system takeover.	Critical	JavaScript SQL Injection Cwe 89 Mikro Orm +1	4 months ago
CVE-2026-5198	Vulnerability in sqli (CVE-2026-5198) vulnerability in sqli (CVE-2026-5198). Risk of unauthorized operations or information disclosure.	High	PHP SQL Injection Cwe 74 Cwe 89	5 months ago
CVE-2026-4317	SQL Injection in sqli (CVE-2026-4317) SQL injection in sqli (CVE-2026-4317). Risk of unauthorized operations or information disclosure.		SQL Injection Cwe 89	5 months ago
CVE-2026-27876	Code Injection in grafana (CVE-2026-27876) code injection in grafana (CVE-2026-27876). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `11.6.14, 12.1.10, 12.2.8, 12.3.6, 12.4.2` or later.	Critical	Remote Code Execution Cwe 94 Cwe 89 Grafana	5 months ago
CVE-2026-24031	SQL Injection in dovecot (CVE-2026-24031) SQL injection in dovecot (CVE-2026-24031). Confidential information can be exposed externally.	High	Cwe 89 Dovecot Open Xchange	5 months ago
CVE-2026-30463	SQL Injection in sqli (CVE-2026-30463) SQL injection in sqli (CVE-2026-30463). Confidential information can be exposed externally.	High	PHP SQL Injection Cwe 89 Thedaylightstudio +1	5 months ago
CVE-2025-41008	SQL Injection in sqli (CVE-2025-41008) SQL injection in sqli (CVE-2025-41008). Risk of unauthorized operations or information disclosure.		PHP SQL Injection Cwe 89	5 months ago
CVE-2025-41007	SQL Injection in sqli (CVE-2025-41007) SQL injection in sqli (CVE-2025-41007). Risk of unauthorized operations or information disclosure.		PHP SQL Injection Cwe 89	5 months ago
CVE-2026-4324	SQL Injection in katello (CVE-2026-4324) SQL injection in katello (CVE-2026-4324). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.19.1` or later.	Medium	SQL Injection Denial of Service Cwe 89	5 months ago
CVE-2025-62319	SQL Injection in sqli (CVE-2025-62319) SQL injection in sqli (CVE-2025-62319). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Hcltech Unica +1	5 months ago
CVE-2026-21708	SQL Injection in veeam (CVE-2026-21708) SQL injection in veeam (CVE-2026-21708). Confidential information can be exposed externally.	Critical	Remote Code Execution Cwe 89 Veeam Veeam Backup Replication	5 months ago
CVE-2026-31844	SQL Injection in sqli (CVE-2026-31844) SQL injection in sqli (CVE-2026-31844). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Koha	5 months ago
CVE-2026-30951	SQL Injection in sqli (CVE-2026-30951) SQL injection in sqli (CVE-2026-30951). Confidential information can be exposed externally. Mitigation: upgrade to `6.37.8` or later.	High	JavaScript SQL Injection Cwe 89 Sequelizejs +1	5 months ago
CVE-2026-3843	SQL Injection in sqli (CVE-2026-3843) SQL injection in sqli (CVE-2026-3843). Successful exploitation can lead to full system takeover.	Critical	PHP Remote Code Execution SQL Injection Cwe 89 +4	5 months ago
CVE-2025-56421	SQL Injection in sqli (CVE-2025-56421) SQL injection in sqli (CVE-2025-56421). Confidential information can be exposed externally.	High	SQL Injection Cwe 89 Limesurvey	5 months ago
CVE-2026-20002	SQL Injection in sqli (CVE-2026-20002) SQL injection in sqli (CVE-2026-20002). Confidential information can be exposed externally.	High	SQL Injection Cwe 89 Cisco Secure Firewall Management Center	5 months ago
CVE-2026-20003	SQL Injection in sqli (CVE-2026-20003) SQL injection in sqli (CVE-2026-20003). Confidential information can be exposed externally.	Medium	SQL Injection Cwe 89 Cisco Secure Firewall Management Center	5 months ago
CVE-2026-2584	SQL Injection in sqli (CVE-2026-2584) SQL injection in sqli (CVE-2026-2584). Risk of unauthorized operations or information disclosure.		SQL Injection Cwe 89	5 months ago
CVE-2026-28516	SQL Injection in sqli (CVE-2026-28516) SQL injection in sqli (CVE-2026-28516). Successful exploitation can lead to full system takeover.	High	PHP SQL Injection Cwe 89 Opendcim	6 months ago
CVE-2025-11252	SQL Injection in sqli (CVE-2025-11252) SQL injection in sqli (CVE-2025-11252). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Signumtte Windeskfm	6 months ago
CVE-2025-11251	SQL Injection in sqli (CVE-2025-11251) SQL injection in sqli (CVE-2025-11251). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Daynex Woyio	6 months ago
CVE-2026-56351	SQL Injection in n8n (CVE-2026-56351) SQL injection in n8n (CVE-2026-56351). Confidential information can be exposed externally. Exploitable via ``NODES_EXCLUDE``. Mitigation: upgrade to `2.4.0` or later.	High	SQL Injection Cwe 89 N8N	6 months ago
CVE-2026-25554	SQL Injection in c (CVE-2026-25554) SQL injection in c (CVE-2026-25554). Confidential information can be exposed externally.	Medium	C SQL Injection Cwe 89	6 months ago
CVE-2025-10970	SQL Injection in sqli (CVE-2025-10970) SQL injection in sqli (CVE-2025-10970). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89	6 months ago
CVE-2026-26980	SQL Injection in ghost (CVE-2026-26980) SQL injection in ghost (CVE-2026-26980). Confidential information can be exposed externally. Mitigation: upgrade to `6.19.1` or later.	Critical	JavaScript Cwe 89 Ghost	6 months ago
CVE-2025-70397	SQL Injection in sqli (CVE-2025-70397) SQL injection in sqli (CVE-2025-70397). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Jizhicms	6 months ago
CVE-2025-7631	SQL Injection in c (CVE-2025-7631) SQL injection in c (CVE-2025-7631). Risk of unauthorized operations or information disclosure.	High	C SQL Injection Cwe 89	6 months ago
CVE-2025-10969	SQL Injection in sqli (CVE-2025-10969) SQL injection in sqli (CVE-2025-10969). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Farktor E Commerce Package	6 months ago
CVE-2024-43468 KEV	[KEV] SQL Injection in Microsoft configuration-manager (CVE-2024-43468) SQL injection in Microsoft configuration-manager (CVE-2024-43468). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Microsoft Configuration Manager Cwe 89	6 months ago
CVE-2025-7636	SQL Injection in sqli (CVE-2025-7636) SQL injection in sqli (CVE-2025-7636). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89	6 months ago
CVE-2025-6830	SQL Injection in sqli (CVE-2025-6830) SQL injection in sqli (CVE-2025-6830). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89	6 months ago
CVE-2026-1312	SQL Injection in django (CVE-2026-1312) SQL injection in django (CVE-2026-1312). Risk of unauthorized operations or information disclosure. Exploitable via ``FilteredRelation``. Mitigation: upgrade to `4.2.28, 5.2.11, 6.0.2` or later.	Medium	Django SQL Injection Cwe 89 Djangoproject	6 months ago
CVE-2026-1287	SQL Injection in django (CVE-2026-1287) SQL injection in django (CVE-2026-1287). Risk of unauthorized operations or information disclosure. Exploitable via ``FilteredRelation``. Mitigation: upgrade to `4.2.28, 5.2.11, 6.0.2` or later.	Medium	Django SQL Injection Cwe 89 Djangoproject	6 months ago
CVE-2026-1207	SQL Injection in django (CVE-2026-1207) SQL injection in django (CVE-2026-1207). Risk of unauthorized operations or information disclosure. Exploitable via ``RasterField``. Mitigation: upgrade to `4.2.28, 5.2.11, 6.0.2` or later.	Medium	Django Cwe 89 Djangoproject	6 months ago
CVE-2025-5329	SQL Injection in sqli (CVE-2025-5329) SQL injection in sqli (CVE-2025-5329). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89	6 months ago
CVE-2025-5319	SQL Injection in sqli (CVE-2025-5319) SQL injection in sqli (CVE-2025-5319). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89	6 months ago
CVE-2025-8587	SQL Injection in sqli (CVE-2025-8587) SQL injection in sqli (CVE-2025-8587). Risk of unauthorized operations or information disclosure.	High	SQL Injection Cwe 89 Akceyazilim Skspro	6 months ago
CVE-2025-4686	SQL Injection in sqli (CVE-2025-4686) SQL injection in sqli (CVE-2025-4686). Risk of unauthorized operations or information disclosure.	High	SQL Injection Cwe 89	7 months ago
CVE-2025-7714	SQL Injection in sqli (CVE-2025-7714) SQL injection in sqli (CVE-2025-7714). Risk of unauthorized operations or information disclosure.	High	SQL Injection Cwe 89 Globalmedya Content Management System	7 months ago
CVE-2020-37004	SQL Injection in sqli (CVE-2020-37004) SQL injection in sqli (CVE-2020-37004). Confidential information can be exposed externally.	High	SQL Injection Cwe 89	7 months ago
CVE-2025-52025	SQL Injection in sqli (CVE-2025-52025) SQL injection in sqli (CVE-2025-52025). Confidential information can be exposed externally.	Critical	SQL Injection Cwe 89 Aptsys Gemscms Backend	7 months ago
CVE-2026-0603	SQL Injection in sqli (CVE-2026-0603) SQL injection in sqli (CVE-2026-0603). Confidential information can be exposed externally.	High	SQL Injection Denial of Service Cwe 89	7 months ago
CVE-2025-4764	SQL Injection in sqli (CVE-2025-4764) SQL injection in sqli (CVE-2025-4764). Successful exploitation can lead to full system takeover.	High	SQL Injection Cwe 89 Aida Hotel Guest Hotspot	7 months ago
CVE-2025-12504	SQL Injection in sqli (CVE-2025-12504) SQL injection in sqli (CVE-2025-12504). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89	8 months ago
CVE-2025-51683	SQL Injection in sqli (CVE-2025-51683) SQL injection in sqli (CVE-2025-51683). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Mjobtime	8 months ago
CVE-2025-61167	SQL Injection in sqli (CVE-2025-61167) SQL injection in sqli (CVE-2025-61167). Risk of unauthorized operations or information disclosure.	Medium	PHP SQL Injection Cwe 89 Sigb +1	9 months ago
CVE-2025-56401	ZIRA Group WBRM 7.0 is vulnerable to SQL Injection in referenceLookupsByTableNameAndColumnName. ZIRA Group WBRM 7.0 is vulnerable to SQL Injection in referenceLookupsByTableNameAndColumnName.	High	SQL Injection Cwe 89 Ziragroup Wbrm	9 months ago

Vulnerabilities

🍪 About cookies