Browse CVEs

HIGH 8.8 CVE-2025-2602 A vulnerability has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0 and classified as critical. This vulnerability aff… Advocate Office Management System No fix yet Fix from $1,9502025-03-21 MEDIUM 6.3 CVE-2025-2593 A vulnerability has been found in FastCMS up to 0.1.5 and classified as critical. Affected by this vulnerability is an unknown functionality of the f… Fastcms after 0.1.5 Fix from $1,6002025-03-21 MEDIUM 5.4 CVE-2025-29640 Phpgurukul Human Metapneumovirus (HMPV) – Testing Management System v1.0 is vulnerable to SQL Injection in /patient-report.php via the parameter sear… Human Metapneumovirus \(hmpv\) Testing Management System No fix yet Fix from $1,6002025-03-21 HIGH 7.3 CVE-2025-29641 Phpgurukul Vehicle Record Management System v1.0 is vulnerable to SQL Injection in /index.php via the 'searchinputdata' parameter. Vehicle Record Management System No fix yet Fix from $1,9502025-03-21 MEDIUM 6.3 CVE-2025-2587 A vulnerability, which was classified as critical, was found in Jinher OA C6 1.0. This affects an unknown part of the file IncentivePlanFulfillApppro… Jinher Oa C6 No fix yet Fix from $1,6002025-03-21 HIGH 8.8 CVE-2025-2585 EBM Maintenance Center From EBM Technologies has a SQL Injection vulnerability, allowing remote attackers with regular privileges to inject arbitrary… Mitigation only Fix from $1,9502025-03-21 CRITICAL 9.8 CVE-2025-26852 DESCOR INFOCAD 3.5.1 and before and fixed in v.3.5.2.0 allows SQL Injection. Infocad 3.5.2.0+ Fix from $2,3002025-03-20 CRITICAL 9.8 CVE-2025-29980 A SQL injection issue has been discovered in eTRAKiT.net release 3.2.1.77. Due to improper input validation, a remote unauthenticated attacker can ru… Etrakit.net Patch available Fix from $2,3002025-03-20 MEDIUM 5.3 CVE-2024-8251 A vulnerability in mintplex-labs/anything-llm prior to version 1.2.2 allows for Prisma injection. The issue exists in the API endpoint "/embed/:embed… Anythingllm 1.2.2+ Fix from $1,6002025-03-20 HIGH 7.5 CVE-2024-8055 Vanna v0.6.3 is vulnerable to SQL injection via Snowflake database in its file staging operations using the `PUT` and `COPY` commands. This vulnerabi… Mitigation only Fix from $1,9502025-03-20 HIGH 8.1 CVE-2024-7764 Vanna-ai v0.6.2 is vulnerable to SQL Injection due to insufficient protection against injecting additional SQL commands from user requests. The vulne… Mitigation only Fix from $1,9502025-03-20 HIGH 7.1 CVE-2024-12911 A vulnerability in the `default_jsonalyzer` function of the `JSONalyzeQueryEngine` in the run-llama/llama_index repository allows for SQL injection v… Llamaindex 0.5.1+ Fix from $1,9502025-03-20 CRITICAL 9.8 CVE-2024-12909 A vulnerability in the FinanceChatLlamaPack of the run-llama/llama_index repository, versions up to v0.12.3, allows for SQL injection in the `run_sql… Llamaindex 0.3.0+ Fix from $2,3002025-03-20 CRITICAL 9.8 CVE-2024-11958 A SQL injection vulnerability exists in the `duckdb_retriever` component of the run-llama/llama_index repository, specifically in the latest version.… Llamaindex 0.4.0+ Fix from $2,3002025-03-20 CRITICAL 9.8 CVE-2024-10835 In eosphoros-ai/db-gpt version v0.6.0, the web API `POST /api/v1/editor/sql/run` allows execution of arbitrary SQL queries without any access control… Db Gpt No fix yet Fix from $2,3002025-03-20 CRITICAL 9.8 CVE-2024-12016 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CM Informatics CM News allows SQL Injection. T… Mitigation only Fix from $2,3002025-03-20 MEDIUM 6.3 CVE-2025-27018 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Airflow MySQL Provider. When user trigg… Apache Airflow Providers Mysql 6.2.0+ Fix from $1,6002025-03-19 HIGH 7.5 CVE-2024-50631EPSS 25% Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in the system syncing daemon in Synology Drive Ser… Drive Server 3.0.4-12699 / 3.2.1-23280+ Fix from $1,9502025-03-19 MEDIUM 6.8 CVE-2024-57151 SQL Injection vulnerability in rainrocka xinhu v.2.6.5 and before allows a remote attacker to execute arbitrary code via the inputAction.php file and… Xinhu after 2.6.5 Fix from $1,6002025-03-18 CRITICAL 9.8 CVE-2025-24799EPSS 86% GLPI is a free asset and IT management software package. An unauthenticated user can perform a SQL injection through the inventory endpoint. This vul… Glpi 10.0.18+ Fix from $2,3002025-03-18 CRITICAL 9.8 CVE-2025-21619 GLPI is a free asset and IT management software package. An administrator user can perfom a SQL injection through the rules configuration forms. This… Glpi 10.0.18+ Fix from $2,3002025-03-18 MEDIUM 6.1 CVE-2025-25582 yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the selectNoticeList() method at /xml/OaNoticeMapper.xml. Yimioa 2024-07-04+ Fix from $1,6002025-03-18 MEDIUM 6.1 CVE-2025-25580 yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the listNameBySql() method at /xml/UserMapper.xml. Yimioa 2024.07.04+ Fix from $1,6002025-03-18 MEDIUM 6.1 CVE-2025-25590 yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the component /mapper/xml/AddressDao.xml. Yimioa 2024.07.04+ Fix from $1,6002025-03-18 CRITICAL 9.8 CVE-2024-8997 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Vestel EVC04 Configuration Interface allows SQL… Evc04 Configuration Interface after 18.03.2025 Fix from $2,3002025-03-18 HIGH 8.8 CVE-2025-2471 A vulnerability, which was classified as critical, was found in PHPGurukul Boat Booking System 1.0. Affected is an unknown function of the file /boat… Boat Booking System No fix yet Fix from $1,9502025-03-18 CRITICAL 9.8 CVE-2025-2472 A vulnerability has been found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. Affected by this vulnerability is a… Apartment Visitors Management System No fix yet Fix from $2,3002025-03-18 CRITICAL 9.8 CVE-2025-2473 A vulnerability was found in PHPGurukul Company Visitor Management System 2.0 and classified as critical. Affected by this issue is some unknown func… Company Visitor Management System No fix yet Fix from $2,3002025-03-18 HIGH 7.5 CVE-2025-2419 A vulnerability classified as critical has been found in code-projects Real Estate Property Management System 1.0. Affected is an unknown function of… Real Estate Property Management System No fix yet Fix from $1,9502025-03-17 CRITICAL 9.8 CVE-2025-2391 A vulnerability classified as critical was found in code-projects Blood Bank Management System 1.0. This vulnerability affects unknown code of the fi… Blood Bank Management System No fix yet Fix from $2,3002025-03-17