CVE-2026-48165 - MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27

CVE-2026-48163 - MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27

CVE-2026-44173 - MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26

CVE-2026-44172 - MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an appli

CVE-2026-44171 - MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26

CVE-2026-44170 - MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26

CVE-2026-44169 - MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11

CVE-2026-44168 - MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26

CVE-2026-49261 - MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11

CVE-2026-11529 - A vulnerability was determined in designcomputer mysql-mcp-server up to 0.2.2. The impacted element

CVE-2026-48188 - An improper Input Validation vulnerability in OTRS or ((OTRS)) Community Edition database layer modu

CVE-2026-43917 - Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.19.0 and earlier, the protectedP

CVE-2025-41281 - Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS

CVE-2025-41280 - Nozomi Networks Labs identified a CWE-23: Relative Path Traversal (Zip Slip) in Waterfall WF-500 RX

CVE-2026-44521 - elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1

CVE-2018-25372 - MedDream PACS Server Premium 6.7.1.1 contains an SQL injection vulnerability that allows unauthentic

CVE-2026-48242 - Open ISES Tickets before 3.44.2 contains hardcoded MySQL database connection credentials (host, user

CVE-2026-48241 - Open ISES Tickets before 3.44.2 contains hardcoded MySQL database credentials in loader.php (a publi

CVE-2026-48236 - Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in db_loader.php where the mu

CVE-2026-44047 - An SQL injection vulnerability in the MySQL CNID backend in Netatalk 3.1.0 through 4.4.2 allows a re

CVE-2026-45054 - CubeCart is an ecommerce software solution. Prior to 6.7.0, the admin orders-transactions listing pa

CVE-2024-47091 - Privilege escalation in the mk_mysql agent plugin on Windows in Checkmk <2.4.0p29, <2.3.0p47, and 2.

CVE-2026-8276 - A flaw has been found in bettercap up to 2.41.5. Affected by this issue is some unknown functionalit

CVE-2026-42237 - n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1,

CVE-2026-6524 - MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of serv

CVE-2026-41229 - Froxlor is open source server administration software. Prior to version 2.3.6, `PhpHelper::parseArra

CVE-2026-40899 - DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below con

CVE-2026-33121 - DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below con

CVE-2026-29861 - PHP-MYSQL-User-Login-System v1.0 was discovered to contain a SQL injection vulnerability via the use

CVE-2026-35168 - OpenSTAManager is an open source management software for technical assistance and invoicing. Prior t

CVE-2026-28805 - OpenSTAManager is an open source management software for technical assistance and invoicing. Prior t

CVE-2026-33643 - SQL Injection vulnerability in SchemaHero 0.23.0 via the column parameter to the mysqlColumnAsInsert

CVE-2026-33468 - Kysely is a type-safe TypeScript SQL query builder. Prior to version 0.28.14, Kysely's `DefaultQuery

CVE-2026-33442 - Kysely is a type-safe TypeScript SQL query builder. In versions 0.28.12 and 0.28.13, the `sanitizeSt

CVE-2026-30849 - Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions prior to 2.28.1 running on M

CVE-2019-25576 - Kepler Wallpaper Script 1.1 contains an SQL injection vulnerability that allows unauthenticated atta

CVE-2026-32710 - MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaD

CVE-2026-32949 - SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior t

CVE-2026-32763 - Kysely is a type-safe TypeScript SQL query builder. Versions up to and including 0.28.11 has a SQL i

CVE-2026-29096 - SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software applica