CVE-2026-111444 - Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKS

CVE-2026-103224 - In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the

CVE-2026-102466 - In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the

CVE-2026-102465 - In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the

CVE-2026-110911 - Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again

CVE-2026-104252 - Vitess is a database clustering system for horizontal scaling of MySQL. Prior to 23.0.5 and 24.0.2,

CVE-2026-109962 - Froxlor 0.10.0 before 2.3.14 contains a missing authorization vulnerability that allows reseller acc

CVE-2026-109116 - A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcf

CVE-2026-108970 - A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbf

CVE-2026-109573 - phpMyFAQ before 4.1.9 contains an SQL injection vulnerability in PdoMysql::escape(), which escapes s

CVE-2026-108921 - A vulnerability was detected in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384

CVE-2026-108807 - A vulnerability was found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9

CVE-2026-108806 - A vulnerability has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36

CVE-2026-108805 - A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae35

CVE-2026-107823 - MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 1

CVE-2026-107822 - MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 1

CVE-2026-107821 - MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 1

CVE-2026-107819 - MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL d

CVE-2026-107818 - MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 1

CVE-2026-107817 - MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 1

CVE-2026-107816 - MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 1

CVE-2026-107815 - MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 1

CVE-2026-107385 - MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL

CVE-2026-107384 - MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL

CVE-2026-107383 - MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL

CVE-2026-107382 - MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL

CVE-2026-105919 - A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff7

CVE-2026-105918 - A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e96643

CVE-2026-105470 - A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca

CVE-2026-105468 - A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d3

CVE-2026-105387 - A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757

CVE-2026-59783 - The Zabbix Server/Proxy has a vulnerability where binary items can crash the Server/Proxy on certain

CVE-2026-105178 - A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. The impacted e

CVE-2026-105158 - A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function

CVE-2026-104457 - YesWiki before 4.6.7 contains an SQL injection vulnerability in the Bazar filtertags action, which w

CVE-2026-103232 - A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcf

CVE-2026-103231 - A vulnerability was identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcf

CVE-2026-103230 - A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcf

CVE-2026-103229 - A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e

CVE-2026-100683 - Budibase (@budibase/server) before 3.45.0 builds MySQL and MSSQL column-rename DDL in packages/backe

CVE-2025-1218 - The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet

CVE-2026-95868 - A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcf

CVE-2026-76803 - Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the nuc

CVE-2026-16651 - temporalio/sqlparser can panic when Parse, ParseStrictDDL, or ParseNext processes a MySQL version co

CVE-2026-94042 - A vulnerability was found in AdithyaYelloju Restaurant Management System up to 7f0e7e84255e8fcfd488e

CVE-2026-54597 - ITFlow provides an IT documentation, ticketing and accounting system for small managed service provi

CVE-2026-90997 - A flaw was found in Keycloak. When deployed in stateless mode with MySQL or MariaDB, a mismatch in r

CVE-2026-61700 - MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases

CVE-2026-92591 - Craft CMS 5.0.0 through 5.10.12 treats a database connection failure as meaning that Craft is not in

CVE-2026-59971 - MySQL MCP Server is a Model Context Protocol server that enables secure interaction with MySQL datab

CVE-2026-91851 - Affected versions of MISP incorrectly filter dashboard templates that are restricted to a specific p

CVE-2026-54629 - Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server exposes file

CVE-2026-54628 - Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server exposes URL-

CVE-2026-50006 - Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server forwards una

CVE-2026-90935 - Froxlor before 2.3.7 fails to validate the mysql_server parameter against a customer's allowed_mysql

CVE-2026-86733 - Snipe-IT before 8.7.0 streams the SQL entry from an uploaded backup archive directly into the MySQL/

CVE-2026-86517 - A flaw has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is the fu

CVE-2026-86426 - LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows u

CVE-2026-86225 - A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by

CVE-2026-86224 - A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected is

CVE-2026-86223 - A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This impacts the

CVE-2026-86222 - A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. This affects

CVE-2026-86221 - A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. The impacted element

CVE-2026-86220 - A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. The affected e

CVE-2026-86213 - A vulnerability was found in Mstfakts College-Management-System. This issue affects the function mys

CVE-2026-52773 - YesWiki is a wiki system written in PHP. From version 4.1.0 to before version 4.6.6, YesWiki's archi

CVE-2026-85643 - A flaw has been found in code-projects Online Shopping System 1.0. Impacted is the function mysqli_q

CVE-2026-82553 - A vulnerability was detected in sambitraj Student Management System up to 56ba287f2e9031523ccb4244cb

CVE-2026-55860 - MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4

CVE-2026-55859 - MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4

CVE-2026-55858 - MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases

CVE-2026-55857 - MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases

CVE-2026-55856 - MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases

CVE-2026-55855 - MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL

CVE-2026-55854 - MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL

CVE-2026-55215 - MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL

CVE-2026-56704 - Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid

CVE-2026-65959 - Vitess is a database clustering system for horizontal scaling of MySQL. In 24.0.2 and earlier, the /

CVE-2026-75857 - CodeWhale versions >= 0.8.41 and < 0.8.64 contain a vulnerability in the exec_shell_interact (alias

CVE-2026-73408 - Budibase is an open-source low-code platform. Prior to 3.39.18, packages/server/src/integrations/mys

CVE-2026-73300 - Budibase is an open-source low-code platform. Prior to 3.40.0, the MySQL integration component in Bu

CVE-2026-72607 - A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allo

CVE-2026-18617 - A flaw was found in the Data Science Pipelines Operator (DSPO). A namespace editor can exploit a vul

CVE-2026-72862 - Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the mariadb.ts, mon

CVE-2026-66738 - SPIP before 4.4.18 contains a code injection vulnerability in SQLite-backed installations. The navig

CVE-2026-63106 - ReadyEcommerce before 4.5.2 contains an unauthenticated SQL injection vulnerability in the product l

CVE-2026-72572 - A path traversal vulnerability in o1lab/xmysql (all versions) allows an unauthenticated remote attac

CVE-2026-71237 - Miantang/IoT-PHP's index.php implements a POST /userlogin route that reads the password directly fro

CVE-2026-69251 - Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.

CVE-2026-39931 - OpenEMR through 8.2.0 contains an authenticated SQL injection vulnerability in the backup configurat

CVE-2025-65336 - Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in /show_price

CVE-2025-67406 - https://www.sourcecodester.com Advocate office management system 1.0 is affected by: SQL Injection.

CVE-2021-32087 - An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs with

CVE-2021-32086 - An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It uses a hardcod

CVE-2021-32085 - An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs with

CVE-2025-50455 - SQL injection vulnerability exists in the order_by parameter of the /customers/search endpoint in Al

CVE-2026-55219 - Paymenter is a free and open-source webshop solution for management of hosting services. In versions

CVE-2026-53595 - FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version