Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: cwe-89 Clear
ID Title
CVE-2024-51065 SQL Injection in sqli (CVE-2024-51065)
SQL injection in sqli (CVE-2024-51065). Successful exploitation can lead to full system takeover.
CVE-2024-48733 SQL Injection in sqli (CVE-2024-48733)
SQL injection in sqli (CVE-2024-48733). Successful exploitation can lead to full system takeover.
CVE-2023-6441 SQL Injection in sqli (CVE-2023-6441)
SQL injection in sqli (CVE-2023-6441). Successful exploitation can lead to full system takeover.
CVE-2024-35584 SQL Injection in sqli (CVE-2024-35584)
SQL injection in sqli (CVE-2024-35584). Successful exploitation can lead to full system takeover.
CVE-2024-46532 SQL Injection in sqli (CVE-2024-46532)
SQL injection in sqli (CVE-2024-46532). Successful exploitation can lead to full system takeover.
CVE-2024-4658 SQL Injection in sqli (CVE-2024-4658)
SQL injection in sqli (CVE-2024-4658). Risk of unauthorized operations or information disclosure.
CVE-2024-9286 SQL Injection in sqli (CVE-2024-9286)
SQL injection in sqli (CVE-2024-9286). Risk of unauthorized operations or information disclosure.
CVE-2024-9379 KEV [KEV] SQL Injection in Ivanti cloud-services-appliance-csa (CVE-2024-9379)
SQL injection in Ivanti cloud-services-appliance-csa (CVE-2024-9379). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2024-29824 KEV [KEV] SQL Injection in Ivanti endpoint-manager-epm (CVE-2024-29824)
SQL injection in Ivanti endpoint-manager-epm (CVE-2024-29824). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2024-3373 SQL Injection in sqli (CVE-2024-3373)
SQL injection in sqli (CVE-2024-3373). Risk of unauthorized operations or information disclosure.
CVE-2024-8607 SQL Injection in sqli (CVE-2024-8607)
SQL injection in sqli (CVE-2024-8607). Successful exploitation can lead to full system takeover.
CVE-2024-7735 SQL Injection in sqli (CVE-2024-7735)
SQL injection in sqli (CVE-2024-7735). Risk of unauthorized operations or information disclosure.
CVE-2024-5958 SQL Injection in sqli (CVE-2024-5958)
SQL injection in sqli (CVE-2024-5958). Successful exploitation can lead to full system takeover.
CVE-2024-44004 SQL Injection in sqli (CVE-2024-44004)
SQL injection in sqli (CVE-2024-44004). Confidential information can be exposed externally.
CVE-2024-6401 SQL Injection in sqli (CVE-2024-6401)
SQL injection in sqli (CVE-2024-6401). Successful exploitation can lead to full system takeover.
CVE-2024-6670 KEV [KEV] SQL Injection in Progress whatsup-gold (CVE-2024-6670)
SQL injection in Progress whatsup-gold (CVE-2024-6670). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2024-34334 SQL Injection in sqli (CVE-2024-34334)
SQL injection in sqli (CVE-2024-34334). Confidential information can be exposed externally.
CVE-2024-7076 SQL Injection in sqli (CVE-2024-7076)
SQL injection in sqli (CVE-2024-7076). Successful exploitation can lead to full system takeover.
CVE-2024-7078 SQL Injection in sqli (CVE-2024-7078)
SQL injection in sqli (CVE-2024-7078). Successful exploitation can lead to full system takeover.
CVE-2024-6919 SQL Injection in sqli (CVE-2024-6919)
SQL injection in sqli (CVE-2024-6919). Successful exploitation can lead to full system takeover.
CVE-2024-7071 SQL Injection in sqli (CVE-2024-7071)
SQL injection in sqli (CVE-2024-7071). Successful exploitation can lead to full system takeover.
CVE-2024-38889 SQL Injection in sqli (CVE-2024-38889)
SQL injection in sqli (CVE-2024-38889). Successful exploitation can lead to full system takeover.
CVE-2024-6699 SQL Injection in sqli (CVE-2024-6699)
SQL injection in sqli (CVE-2024-6699). Successful exploitation can lead to full system takeover.
CVE-2024-37857 SQL Injection in sqli (CVE-2024-37857)
SQL injection in sqli (CVE-2024-37857). Successful exploitation can lead to full system takeover.
CVE-2024-37858 SQL Injection in sqli (CVE-2024-37858)
SQL injection in sqli (CVE-2024-37858). Successful exploitation can lead to full system takeover.
CVE-2024-0857 SQL Injection in sqli (CVE-2024-0857)
SQL injection in sqli (CVE-2024-0857). Successful exploitation can lead to full system takeover.
CVE-2024-1153 SQL Injection in sqli (CVE-2024-1153)
SQL injection in sqli (CVE-2024-1153). Confidential information can be exposed externally.
CVE-2024-4228 SQL Injection in sqli (CVE-2024-4228)
SQL injection in sqli (CVE-2024-4228). Successful exploitation can lead to full system takeover.
CVE-2024-1100 SQL Injection in sqli (CVE-2024-1100)
SQL injection in sqli (CVE-2024-1100). Successful exploitation can lead to full system takeover.
CVE-2024-35563 SQL Injection in sqli (CVE-2024-35563)
SQL injection in sqli (CVE-2024-35563). Successful exploitation can lead to full system takeover.
CVE-2024-0851 SQL Injection in sqli (CVE-2024-0851)
SQL injection in sqli (CVE-2024-0851). Risk of unauthorized operations or information disclosure.
CVE-2024-30801 SQL Injection in sqli (CVE-2024-30801)
SQL injection in sqli (CVE-2024-30801). Data can be tampered with by attackers.
CVE-2023-6191 SQL Injection in sqli (CVE-2023-6191)
SQL injection in sqli (CVE-2023-6191). Successful exploitation can lead to full system takeover.
CVE-2024-28714 SQL Injection in sqli (CVE-2024-28714)
SQL injection in sqli (CVE-2024-28714). Confidential information can be exposed externally.
CVE-2023-6173 SQL Injection in sqli (CVE-2023-6173)
SQL injection in sqli (CVE-2023-6173). Successful exploitation can lead to full system takeover.
CVE-2024-2865 SQL Injection in sqli (CVE-2024-2865)
SQL injection in sqli (CVE-2024-2865). Successful exploitation can lead to full system takeover.
CVE-2023-48788 KEV [KEV] SQL Injection in Fortinet forticlient-ems (CVE-2023-48788)
SQL injection in Fortinet forticlient-ems (CVE-2023-48788). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2024-27289 pgx is a PostgreSQL driver and toolkit for Go. Prior to version 4.18.2, SQL injection can occur when all of the following conditions are met: the non-default simple protocol is used; a placeholder for...
pgx is a PostgreSQL driver and toolkit for Go. Prior to version 4.18.2, SQL injection can occur when all of the following conditions are met: the non-default simple protocol is used; a placeholder for a numeric value must be immediately preceded by a minus; there must be a second placeholder for a s...
CVE-2024-27304 SQL Injection in sqli (CVE-2024-27304)
SQL injection in sqli (CVE-2024-27304). Successful exploitation can lead to full system takeover.
CVE-2023-33677 SQL Injection in sqli (CVE-2023-33677)
SQL injection in sqli (CVE-2023-33677). Confidential information can be exposed externally.
CVE-2024-22983 SQL Injection in sqli (CVE-2024-22983)
SQL injection in sqli (CVE-2024-22983). Confidential information can be exposed externally.
CVE-2023-7081 SQL Injection in sqli (CVE-2023-7081)
SQL injection in sqli (CVE-2023-7081). Successful exploitation can lead to full system takeover.
CVE-2023-5155 SQL Injection in sqli (CVE-2023-5155)
SQL injection in sqli (CVE-2023-5155). Successful exploitation can lead to full system takeover.
CVE-2023-6677 SQL Injection in sqli (CVE-2023-6677)
SQL injection in sqli (CVE-2023-6677). Successful exploitation can lead to full system takeover.
CVE-2023-51927 SQL Injection in sqli (CVE-2023-51927)
SQL injection in sqli (CVE-2023-51927). Successful exploitation can lead to full system takeover.
CVE-2023-5806 SQL Injection in sqli (CVE-2023-5806)
SQL injection in sqli (CVE-2023-5806). Successful exploitation can lead to full system takeover.
CVE-2023-51810 SQL Injection in sqli (CVE-2023-51810)
SQL injection in sqli (CVE-2023-51810). Confidential information can be exposed externally.
CVE-2020-26623 SQL Injection in sqli (CVE-2020-26623)
SQL injection in sqli (CVE-2020-26623). Risk of unauthorized operations or information disclosure.
CVE-2020-26624 SQL Injection in sqli (CVE-2020-26624)
SQL injection in sqli (CVE-2020-26624). Risk of unauthorized operations or information disclosure.
CVE-2020-26625 SQL Injection in sqli (CVE-2020-26625)
SQL injection in sqli (CVE-2020-26625). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →