Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2020-37004 |
|
SQL Injection in sqli (CVE-2020-37004)
SQL injection in sqli (CVE-2020-37004). Confidential information can be exposed externally.
|
| CVE-2025-52025 |
|
SQL Injection in sqli (CVE-2025-52025)
SQL injection in sqli (CVE-2025-52025). Confidential information can be exposed externally.
|
| CVE-2026-0603 |
|
SQL Injection in sqli (CVE-2026-0603)
SQL injection in sqli (CVE-2026-0603). Confidential information can be exposed externally.
|
| CVE-2025-4764 |
|
SQL Injection in sqli (CVE-2025-4764)
SQL injection in sqli (CVE-2025-4764). Successful exploitation can lead to full system takeover.
|
| CVE-2025-12504 |
|
SQL Injection in sqli (CVE-2025-12504)
SQL injection in sqli (CVE-2025-12504). Successful exploitation can lead to full system takeover.
|
| CVE-2025-51683 |
|
SQL Injection in sqli (CVE-2025-51683)
SQL injection in sqli (CVE-2025-51683). Successful exploitation can lead to full system takeover.
|
| CVE-2025-61167 |
|
SQL Injection in sqli (CVE-2025-61167)
SQL injection in sqli (CVE-2025-61167). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-56401 |
|
ZIRA Group WBRM 7.0 is vulnerable to SQL Injection in referenceLookupsByTableNameAndColumnName.
ZIRA Group WBRM 7.0 is vulnerable to SQL Injection in referenceLookupsByTableNameAndColumnName.
|
| CVE-2025-10437 |
|
SQL Injection in sqli (CVE-2025-10437)
SQL injection in sqli (CVE-2025-10437). Successful exploitation can lead to full system takeover.
|
| CVE-2025-56385 |
|
SQL Injection in sqli (CVE-2025-56385)
SQL injection in sqli (CVE-2025-56385). Successful exploitation can lead to full system takeover.
|
| CVE-2025-10968 |
|
SQL Injection in sqli (CVE-2025-10968)
SQL injection in sqli (CVE-2025-10968). Successful exploitation can lead to full system takeover.
|
| CVE-2022-50589 |
|
SQL Injection in sqli (CVE-2022-50589)
SQL injection in sqli (CVE-2022-50589). Successful exploitation can lead to full system takeover.
|
| CVE-2025-6520 |
|
SQL Injection in sqli (CVE-2025-6520)
SQL injection in sqli (CVE-2025-6520). Successful exploitation can lead to full system takeover.
|
| CVE-2023-49440 |
|
AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter."
AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter."
|
| CVE-2025-11253 |
|
SQL Injection in sqli (CVE-2025-11253)
SQL injection in sqli (CVE-2025-11253). Successful exploitation can lead to full system takeover.
|
| CVE-2025-60641 |
|
SQL Injection in sqli (CVE-2025-60641)
SQL injection in sqli (CVE-2025-60641). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-10610 |
|
SQL Injection in sqli (CVE-2025-10610)
SQL injection in sqli (CVE-2025-10610). Successful exploitation can lead to full system takeover.
|
| CVE-2025-6919 |
|
SQL Injection in sqli (CVE-2025-6919)
SQL injection in sqli (CVE-2025-6919). Successful exploitation can lead to full system takeover.
|
| CVE-2025-60307 |
|
SQL Injection in sqli (CVE-2025-60307)
SQL injection in sqli (CVE-2025-60307). Successful exploitation can lead to full system takeover.
|
| CVE-2025-0603 |
|
SQL Injection in sqli (CVE-2025-0603)
SQL injection in sqli (CVE-2025-0603). Successful exploitation can lead to full system takeover.
|
| CVE-2025-0616 |
|
SQL Injection in sqli (CVE-2025-0616)
SQL injection in sqli (CVE-2025-0616). Confidential information can be exposed externally.
|
| CVE-2024-13150 |
|
SQL Injection in sqli (CVE-2024-13150)
SQL injection in sqli (CVE-2024-13150). Successful exploitation can lead to full system takeover.
|
| CVE-2025-55885 |
|
SQL Injection in sqli (CVE-2025-55885)
SQL injection in sqli (CVE-2025-55885). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-10592 |
|
Vulnerability in sqli (CVE-2025-10592)
vulnerability in sqli (CVE-2025-10592). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-10439 |
|
SQL Injection in sqli (CVE-2025-10439)
SQL injection in sqli (CVE-2025-10439). Successful exploitation can lead to full system takeover.
|
| CVE-2025-57631 |
|
SQL Injection in sqli (CVE-2025-57631)
SQL injection in sqli (CVE-2025-57631). Successful exploitation can lead to full system takeover.
|
| CVE-2024-12913 |
|
SQL Injection in sqli (CVE-2024-12913)
SQL injection in sqli (CVE-2024-12913). Successful exploitation can lead to full system takeover.
|
| CVE-2024-13149 |
|
SQL Injection in sqli (CVE-2024-13149)
SQL injection in sqli (CVE-2024-13149). Successful exploitation can lead to full system takeover.
|
| CVE-2024-13174 |
|
SQL Injection in sqli (CVE-2024-13174)
SQL injection in sqli (CVE-2024-13174). Confidential information can be exposed externally.
|
| CVE-2025-7744 |
|
SQL Injection in sqli (CVE-2025-7744)
SQL injection in sqli (CVE-2025-7744). Successful exploitation can lead to full system takeover.
|
| CVE-2025-4688 |
|
SQL Injection in sqli (CVE-2025-4688)
SQL injection in sqli (CVE-2025-4688). Successful exploitation can lead to full system takeover.
|
| CVE-2025-55849 |
|
SQL Injection in sqli (CVE-2025-55849)
SQL injection in sqli (CVE-2025-55849). Successful exploitation can lead to full system takeover.
|
| CVE-2025-58375 |
|
SQL Injection in sqli (CVE-2025-58375)
SQL injection in sqli (CVE-2025-58375). Confidential information can be exposed externally.
|
| CVE-2025-57819 KEV |
|
[KEV] SQL Injection in Sangoma freepbx (CVE-2025-57819)
SQL injection in Sangoma freepbx (CVE-2025-57819). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2025-34162 |
|
SQL Injection in sqli (CVE-2025-34162)
SQL injection in sqli (CVE-2025-34162). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50383 |
|
SQL Injection in sqli (CVE-2025-50383)
SQL injection in sqli (CVE-2025-50383). Confidential information can be exposed externally.
|
| CVE-2025-50567 |
|
SQL Injection in CVE-2025-50567 (CVE-2025-50567)
SQL injection in CVE-2025-50567 (CVE-2025-50567). Successful exploitation can lead to full system takeover.
|
| CVE-2025-1929 |
|
SQL Injection in sqli (CVE-2025-1929)
SQL injection in sqli (CVE-2025-1929). Successful exploitation can lead to full system takeover.
|
| CVE-2012-10047 |
|
SQL Injection in sqli (CVE-2012-10047)
SQL injection in sqli (CVE-2012-10047). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-50341 |
|
SQL Injection in sqli (CVE-2025-50341)
SQL injection in sqli (CVE-2025-50341). Successful exploitation can lead to full system takeover.
|
| CVE-2025-52327 |
|
SQL Injection in sqli (CVE-2025-52327)
SQL injection in sqli (CVE-2025-52327). Successful exploitation can lead to full system takeover.
|
| CVE-2024-45955 |
|
Rocket Software Rocket Zena 4.4.1.26 is vulnerable to SQL Injection via the filter parameter.
Rocket Software Rocket Zena 4.4.1.26 is vulnerable to SQL Injection via the filter parameter.
|
| CVE-2025-6918 |
|
SQL Injection in sqli (CVE-2025-6918)
SQL injection in sqli (CVE-2025-6918). Successful exploitation can lead to full system takeover.
|
| CVE-2025-44608 |
|
SQL Injection in sqli (CVE-2025-44608)
SQL injection in sqli (CVE-2025-44608). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-4784 |
|
SQL Injection in sqli (CVE-2025-4784)
SQL injection in sqli (CVE-2025-4784). Successful exploitation can lead to full system takeover.
|
| CVE-2025-4822 |
|
SQL Injection in sqli (CVE-2025-4822)
SQL injection in sqli (CVE-2025-4822). Successful exploitation can lead to full system takeover.
|
| CVE-2025-4285 |
|
SQL Injection in sqli (CVE-2025-4285)
SQL injection in sqli (CVE-2025-4285). Successful exploitation can lead to full system takeover.
|
| CVE-2025-50585 |
|
SQL Injection in sqli (CVE-2025-50585)
SQL injection in sqli (CVE-2025-50585). Successful exploitation can lead to full system takeover.
|
| CVE-2025-25257 KEV |
|
[KEV] SQL Injection in Fortinet fortiweb (CVE-2025-25257)
SQL injection in Fortinet fortiweb (CVE-2025-25257). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-20272 |
|
SQL Injection in sqli (CVE-2025-20272)
SQL injection in sqli (CVE-2025-20272). Risk of unauthorized operations or information disclosure.
|