Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Results for "cwe:89"
1,098 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-56064 |
high | 8.5 | 0.0036 | 2026-06-26 | Subscriber SQL Injection in Tourfic <= 2.22.5 versions. | |
CVE-2026-57636 |
high | 8.5 | 0.0036 | 2026-06-26 | Contributor SQL Injection in wpForo Forum <= 3.0.9 versions. | |
CVE-2026-57642 |
high | 8.5 | 0.0036 | 2026-06-26 | Contributor SQL Injection in Gallery <= 4.7.8 versions. | |
CVE-2026-57643 |
high | 8.5 | 0.0036 | 2026-06-26 | Contributor SQL Injection in WP Post Author <= 3.9.1 versions. | |
CVE-2026-57644 |
high | 8.5 | 0.0036 | 2026-06-26 | Contributor SQL Injection in Restaurant Menu by MotoPress <= 2.4.10 versions. | |
CVE-2026-57653 |
high | 8.5 | 0.0036 | 2026-06-26 | Contributor SQL Injection in WP Job Portal <= 2.5.2 versions. | |
CVE-2026-57662 |
high | 8.5 | 0.0036 | 2026-06-26 | Contributor SQL Injection in Contest Gallery <= 30.0.0 versions. | |
CVE-2026-57663 |
high | 8.5 | 0.0036 | 2026-06-26 | Contributor SQL Injection in Recipe Maker For Your Food Blog from Zip Recipes <= 8.2.7 versions. | |
CVE-2026-57667 |
high | 8.5 | 0.0036 | 2026-06-26 | Sales Representative SQL Injection in Groundhogg <= 4.5 versions. | |
CVE-2026-57687 |
high | 8.5 | 0.0036 | 2026-07-02 | Contributor SQL Injection in Custom Field Template <= 2.7.8 versions. | |
CVE-2026-57752 |
high | 8.5 | 0.0036 | 2026-07-02 | Contributor SQL Injection in iNET Webkit 1.2.4 versions. | |
CVE-2026-57756 |
high | 8.5 | 0.0036 | 2026-07-02 | Contributor SQL Injection in nicen-localize-image <= 1.4.9 versions. | |
CVE-2026-57765 |
high | 8.5 | 0.0036 | 2026-07-02 | Contributor SQL Injection in WP EasyCart <= 5.9.0 versions. | |
CVE-2026-56690 |
high | 8.5 | 0.0032 | 2026-07-10 | Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special E | |
CVE-2026-57385 |
high | 8.5 | 0.0036 | 2026-07-13 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i | |
CVE-2026-57771 |
high | 8.5 | 0.0036 | 2026-07-13 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i | |
CVE-2026-57772 |
high | 8.5 | 0.0036 | 2026-07-13 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i | |
CVE-2026-57787 |
high | 8.5 | 0.0036 | 2026-07-13 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i | |
CVE-2026-57810 |
high | 8.5 | 0.0036 | 2026-07-13 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i | |
CVE-2026-24552 |
high | 8.5 | 0.0036 | 2026-07-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i | |
CVE-2026-25405 |
high | 8.5 | 0.0036 | 2026-07-23 | Contributor SQL Injection in eRoom <= 1.7.1 versions. | |
CVE-2026-65450 |
high | 8.5 | 0.0036 | 2026-07-23 | Contributor SQL Injection in MapSVG <= 8.14.0 versions. | |
CVE-2026-65451 |
high | 8.5 | 0.0036 | 2026-07-23 | Contributor SQL Injection in MapSVG <= 8.14.0 versions. | |
CVE-2026-65454 |
high | 8.5 | 0.0036 | 2026-07-23 | Contributor SQL Injection in Quiz And Survey Master <= 11.2.0 versions. | |
CVE-2026-65526 |
high | 8.5 | 0.0036 | 2026-07-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i | |
CVE-2026-65707 |
high | 8.5 | 0.0046 | 2026-07-24 | Likeshop through 3.0.5 contains an authenticated SQL injection vulnerability that allows admin-level | |
CVE-2026-59551 |
high | 8.5 | 0.0036 | 2026-07-27 | Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions. | |
CVE-2026-17191 |
high | 8.5 | 0.0035 | 2026-07-27 | An input validation vulnerability exists in an API component of the orchestrator. An authenticated u | |
CVE-2026-65569 |
high | 8.5 | 0.0036 | 2026-08-06 | Subscriber SQL Injection in WP Job Portal <= 2.5.6 versions. | |
CVE-2026-28002 |
high | 8.5 | 0.0036 | 2026-08-13 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i | |
CVE-2026-28156 |
high | 8.5 | 0.0036 | 2026-08-13 | Subscriber SQL Injection in Do Lasso <= 358 versions. | |
CVE-2026-28168 |
high | 8.5 | 0.0036 | 2026-08-13 | Subscriber SQL Injection in CubeWP <= 1.1.30 versions. | |
CVE-2026-66430 |
high | 8.5 | 0.0036 | 2026-08-13 | Subscriber SQL Injection in Visitor Traffic Real Time Statistics Pro <= 11.10 versions. | |
CVE-2026-66658 |
high | 8.5 | 0.0036 | 2026-08-13 | Subscriber SQL Injection in Reviewer <= 3.14.2 versions. | |
CVE-2026-32466 |
high | 8.5 | 0.0036 | 2026-08-18 | Subscriber SQL Injection in Gravity Forms Bookings premium <= 2.1 versions. | |
CVE-2026-46682 |
high | 8.5 | 0.0058 | 2026-08-20 | BigBlueButton is an open-source virtual classroom. Prior to 3.0.23, BigBlueButton allowed authentica | |
CVE-2026-95610 |
high | 8.5 | 0.0021 | 2026-10-09 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i | |
CVE-2026-112822 |
high | 8.5 | 0.0029 | 2026-10-22 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i | |
CVE-2026-112837 |
high | 8.5 | 0.0031 | 2026-10-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i | |
CVE-2026-115608 |
high | 8.5 | 0.0029 | 2026-10-26 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i | |
CVE-2026-115948 |
high | 8.5 | 0.0029 | 2026-10-26 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i | |
CVE-2026-115965 |
high | 8.5 | — | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i | |
CVE-2026-39736 |
high | 8.5 | — | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i | |
CVE-2026-61996 |
high | 8.5 | — | 2026-10-29 | Subscriber SQL Injection in MLS On The Fly <= 1.8.1.5 versions. | |
CVE-2026-65151 |
high | 8.4 | 0.0018 | 2026-10-27 | NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue | |
CVE-2026-88890 |
high | 8.4 | 0.0039 | 2026-09-10 | OpenPanel through 2.3.0 contains an SQL injection vulnerability in the analytics filter builder that | |
CVE-2026-114081 |
high | 8.3 | 0.0040 | 2026-10-21 | Trigger.dev before 4.5.6 contains an SQL injection vulnerability in the TSQL query compiler, which c | |
CVE-2026-114084 |
high | 8.3 | 0.0040 | 2026-10-21 | Trigger.dev before 4.5.6 contains an SQL injection vulnerability in the /realtime/v1/runs endpoint, | |
CVE-2026-41490 |
high | 8.3 | 0.0027 | 2026-05-07 | Dagster is an orchestration platform for the development, production, and observation of data assets | |
CVE-2026-34914 |
high | 8.3 | 0.0039 | 2026-06-23 | A missing sanitisation of user input in the zone-include.php script of Revive Adserver 6.0.6 and ear |