# Other injection. LDAP, XPath, NoSQL, CRLF, header and log injection. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [kylecui NetForensicMCP index.js execAsync command injection](https://agentprime.io/advisories/CVE-2026-75011.md) `CVE-2026-75011` · CVE record: kylecui NetForensicMCP · CVSS 5.3 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Other injection, Command injection - [Uptrain vulnerable to remote code execution via \`/new_run\` endpoint](https://agentprime.io/advisories/CVE-2025-27772.md) `CVE-2025-27772` · CVE record: uptrain-ai uptrain · CVSS 7.4 High · Not analysed yet · Published 17 Aug 2026 · Tags: Other injection - [Uptrain vulnerable to remote code execution via \`/add_prompts\` endpoint](https://agentprime.io/advisories/CVE-2025-27771.md) `CVE-2025-27771` · CVE record: uptrain-ai uptrain · CVSS 7.4 High · Not analysed yet · Published 17 Aug 2026 · Tags: Other injection - [UpTrain vulnerable to Remote code execution at \`/create_project\`](https://agentprime.io/advisories/CVE-2025-27770.md) `CVE-2025-27770` · CVE record: uptrain-ai uptrain · CVSS 7.4 High · Not analysed yet · Published 17 Aug 2026 · Tags: Other injection - [openssl_encrypt versions before 1.4.0 contain a logging bug in restore_hidden_modules() that logs module counts after clearing, always showing zero restored modules and corrupting audit trails. Add...](https://agentprime.io/advisories/GHSA-43r4-3hf9-m84q.md) `GHSA-43r4-3hf9-m84q`, `CVE-2026-74885`, `PYSEC-2026-3762` · PyPI `openssl-encrypt`: affected `<1.4.0`, fixed in `1.4.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Aug 2026 · Tags: Other injection - [itsourcecode Hospital Management System viewprescriptionrecord.php sql injection](https://agentprime.io/advisories/CVE-2026-20000.md) `CVE-2026-20000` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Other injection, SQL injection - [Alaev SEO Tools Extension Popup UI popup.html addDiv cross site scripting](https://agentprime.io/advisories/CVE-2026-19988.md) `CVE-2026-19988` · CVE record: Alaev SEO Tools Extension · CVSS 5.3 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Other injection, Cross-site scripting (XSS) - [GL.iNet XE3000 Language Update ui.update_langs code injection](https://agentprime.io/advisories/CVE-2026-19980.md) `CVE-2026-19980` · CVE record: GL.iNet A1300 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Other injection, Code injection - [COMFAST CF-N1-S mbox-config sub_44A968 command injection](https://agentprime.io/advisories/CVE-2026-19976.md) `CVE-2026-19976` · CVE record: COMFAST CF-N1-S · CVSS 5.1 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Other injection, Command injection - [itsourcecode Hospital Management System viewpaymentreport.php sql injection](https://agentprime.io/advisories/CVE-2026-19973.md) `CVE-2026-19973` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Other injection, SQL injection - [itsourcecode Hospital Management System viewpatient.php sql injection](https://agentprime.io/advisories/CVE-2026-19972.md) `CVE-2026-19972` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Other injection, SQL injection - [Jij-Inc Jij-MCP-Server jm_check python_repr.py PythonREPL.run code injection](https://agentprime.io/advisories/CVE-2026-19964.md) `CVE-2026-19964` · CVE record: Jij-Inc Jij-MCP-Server · CVSS 5.1 Medium · Not analysed yet · Published 16 Aug 2026 · Tags: Other injection, Code injection - [Edimax EW-7478APC stainfo command injection](https://agentprime.io/advisories/CVE-2026-19963.md) `CVE-2026-19963` · CVE record: Edimax EW-7478APC · CVSS 5.3 Medium · Not analysed yet · Published 16 Aug 2026 · Tags: Other injection, Command injection - [Edimax EW-7478APC setWAN command injection](https://agentprime.io/advisories/CVE-2026-19962.md) `CVE-2026-19962` · CVE record: Edimax EW-7478APC · CVSS 5.3 Medium · Not analysed yet · Published 16 Aug 2026 · Tags: Other injection, Command injection - [Edimax EW-7478APC formWlbasic command injection](https://agentprime.io/advisories/CVE-2026-19960.md) `CVE-2026-19960` · CVE record: Edimax EW-7478APC · CVSS 5.3 Medium · Not analysed yet · Published 16 Aug 2026 · Tags: Other injection, Command injection - [iatsiuk pptr-mcp execute Tool vm-executor.ts executeCode code injection](https://agentprime.io/advisories/CVE-2026-19958.md) `CVE-2026-19958` · CVE record: iatsiuk pptr-mcp · CVSS 5.3 Medium · Not analysed yet · Published 16 Aug 2026 · Tags: Other injection, Code injection - [itsourcecode Hospital Management System vieworder.php sql injection](https://agentprime.io/advisories/CVE-2026-19934.md) `CVE-2026-19934` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 16 Aug 2026 · Tags: Other injection, SQL injection - [Product Table & List Builder For WooCommerce <= 5.6.0 - Unauthenticated CSS Injection via 'laptop_scroll_offset' Parameter](https://agentprime.io/advisories/CVE-2026-15441.md) `CVE-2026-15441` · CVE record: wcproducttable Product Table & List Builder For WooCommerce · CVSS 5.3 Medium · Not analysed yet · Published 16 Aug 2026 · Tags: Other injection - [DefaultFuction Notice-System-Managent NoticeController execute GroovyShell.evaluate code injection](https://agentprime.io/advisories/CVE-2026-19932.md) `CVE-2026-19932` · CVE record: DefaultFuction Notice-System-Managent · CVSS 5.3 Medium · Not analysed yet · Published 16 Aug 2026 · Tags: Other injection, Code injection - [Dolibarr User Cloning card.php ldap injection](https://agentprime.io/advisories/CVE-2026-19930.md) `CVE-2026-19930` · CVE record: Dolibarr · CVSS 5.3 Medium · Not analysed yet · Published 16 Aug 2026 · Tags: Other injection - [Evergreen open-ils.fielder OpenSRF Service osrf-gateway-v1 sql injection](https://agentprime.io/advisories/CVE-2026-19926.md) `CVE-2026-19926` · CVE record: Evergreen · CVSS 6.9 Medium · Not analysed yet · Published 16 Aug 2026 · Tags: Other injection, SQL injection - [SourceCodester Stock Management System Master.php delete_supplier sql injection](https://agentprime.io/advisories/CVE-2026-19925.md) `CVE-2026-19925` · CVE record: SourceCodester Stock Management System · CVSS 5.1 Medium · Not analysed yet · Published 16 Aug 2026 · Tags: Other injection, SQL injection - [code-projects Online Shopping System checkout_process.php sql injection](https://agentprime.io/advisories/CVE-2026-19923.md) `CVE-2026-19923` · CVE record: code-projects Online Shopping System · CVSS 5.3 Medium · Not analysed yet · Published 16 Aug 2026 · Tags: Other injection, SQL injection - [code-projects Online Shopping System homeaction.php sql injection](https://agentprime.io/advisories/CVE-2026-19921.md) `CVE-2026-19921` · CVE record: code-projects Online Shopping System · CVSS 5.3 Medium · Not analysed yet · Published 16 Aug 2026 · Tags: Other injection, SQL injection - [code-projects Online Shopping System action.php sql injection](https://agentprime.io/advisories/CVE-2026-19920.md) `CVE-2026-19920` · CVE record: code-projects Online Shopping System · CVSS 5.3 Medium · Not analysed yet · Published 15 Aug 2026 · Tags: Other injection, SQL injection - [code-projects Online Shopping System Login login.php sql injection](https://agentprime.io/advisories/CVE-2026-19919.md) `CVE-2026-19919` · CVE record: code-projects Online Shopping System · CVSS 6.9 Medium · Not analysed yet · Published 15 Aug 2026 · Tags: Other injection, SQL injection - [code-projects Online Food Order System delete_food_items1.php sql injection](https://agentprime.io/advisories/CVE-2026-19917.md) `CVE-2026-19917` · CVE record: code-projects Online Food Order System · CVSS 5.3 Medium · Not analysed yet · Published 15 Aug 2026 · Tags: Other injection, SQL injection - [Jinher OA attendance_out_approve.aspx sql injection](https://agentprime.io/advisories/CVE-2026-19905.md) `CVE-2026-19905` · CVE record: Jinher OA · CVSS 6.9 Medium · Not analysed yet · Published 15 Aug 2026 · Tags: Other injection, SQL injection - [SourceCodester Class and Exam Timetabling System edit_teacher.php sql injection](https://agentprime.io/advisories/CVE-2026-19899.md) `CVE-2026-19899` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 6.9 Medium · Not analysed yet · Published 15 Aug 2026 · Tags: Other injection, SQL injection - [itsourcecode Hospital Management System viewmedicine.php sql injection](https://agentprime.io/advisories/CVE-2026-19894.md) `CVE-2026-19894` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 15 Aug 2026 · Tags: Other injection, SQL injection - [Quay: ldap referral filter injection in quay external ldap authentication](https://agentprime.io/advisories/CVE-2026-74241.md) `CVE-2026-74241` · CVE record: Red Hat Red Hat OpenShift Update Service and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: Other injection - [Fabric CA Developer's Guide: LDAP Injection via Unescaped Username in GetUser Filter](https://agentprime.io/advisories/GHSA-xghw-p77p-3r7x.md) `GHSA-xghw-p77p-3r7x`, `CVE-2026-53658`, `GO-2026-6234` · Go `github.com/hyperledger/fabric-ca`: affected `<1.5.21`, fixed in `1.5.21` · CVSS 6.3 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: Other injection - [SourceCodester Simple Client Management System Master.php save_service sql injection](https://agentprime.io/advisories/CVE-2026-19825.md) `CVE-2026-19825` · CVE record: SourceCodester Simple Client Management System · CVSS 6.9 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: Other injection, SQL injection - [SourceCodester Air Cargo Management System Master.php save_cargo_type sql injection](https://agentprime.io/advisories/CVE-2026-19787.md) `CVE-2026-19787` · CVE record: SourceCodester Air Cargo Management System · CVSS 5.1 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: Other injection, SQL injection - [francoisjacquet RosarioSIS Student Medical Medical.inc.php sql injection](https://agentprime.io/advisories/CVE-2026-19785.md) `CVE-2026-19785` · CVE record: francoisjacquet RosarioSIS · CVSS 5.3 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: Other injection, SQL injection - [itsourcecode Hospital Management System viewdoctortimings.php sql injection](https://agentprime.io/advisories/CVE-2026-19767.md) `CVE-2026-19767` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: Other injection, SQL injection - [Raisecom Communication Command and Dispatch Management Platform getpwd.php sql injection](https://agentprime.io/advisories/CVE-2026-19764.md) `CVE-2026-19764` · CVE record: Raisecom Communication Command and Dispatch Management Platform · CVSS 6.9 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: Other injection, SQL injection - [IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution](https://agentprime.io/advisories/CVE-2026-17481.md) `CVE-2026-17481` · CVE record: IBM Documentation Offline · CVSS 8.8 High · Not analysed yet · Published 13 Aug 2026 · Tags: Other injection - [Tenda CH7 ATE Module Kylin HandleCmd command injection](https://agentprime.io/advisories/CVE-2026-19747.md) `CVE-2026-19747` · CVE record: Tenda CH7 and 4 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2026 · Tags: Other injection, Command injection - [SourceCodester Simple Student Information System view_department.php sql injection](https://agentprime.io/advisories/CVE-2026-19710.md) `CVE-2026-19710` · CVE record: SourceCodester Simple Student Information System · CVSS 6.9 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Other injection, SQL injection - [rsync < 3.5.0 Newline Injection via name-converter uid/gid mapping](https://agentprime.io/advisories/CVE-2026-53788.md) `CVE-2026-53788` · CVE record: RsyncProject rsync · CVSS 6.9 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Other injection - [Local privilege escalation via improper input sanitization in execl() call](https://agentprime.io/advisories/CVE-2026-16455.md) `CVE-2026-16455` · CVE record: Teltonika Networks RUTOS and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Other injection - [Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access](https://agentprime.io/advisories/CVE-2026-12618.md) `CVE-2026-12618` · CVE record: IBM Security Verify Access and 3 more · CVSS 7.2 High · Not analysed yet · Published 12 Aug 2026 · Tags: Other injection - [IBM i is Affected By Multiple Vulnerabilities in Navigator for i](https://agentprime.io/advisories/CVE-2026-18148.md) `CVE-2026-18148` · CVE record: IBM i · CVSS 4.3 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: Other injection - [Kirki < 6.2.1 - Unauthenticated Arbitrary Shortcode Execution via Form Email Actions](https://agentprime.io/advisories/CVE-2026-16747.md) `CVE-2026-16747` · CVE record: Unknown Kirki · CVSS 6.5 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: Other injection - [Velociraptor CSV Formula Injection in Export Pipeline](https://agentprime.io/advisories/CVE-2026-64955.md) `CVE-2026-64955` · CVE record: Rapid7 Velociraptor · CVSS 6.1 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: Other injection - [TypeBot vulnerable to CSV injection in result export](https://agentprime.io/advisories/CVE-2026-47705.md) `CVE-2026-47705` · CVE record: baptisteArno typebot.io · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Aug 2026 · Tags: Other injection - [Wildfly-core: wildfly core: denial of service via malformed payload injection by an authenticated administrative user.](https://agentprime.io/advisories/CVE-2026-24329.md) `CVE-2026-24329` · CVE record: Red Hat Red Hat Fuse 7 and 4 more · CVSS 4.9 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Other injection - [Kitty: Command injection into the child shell via chained @kitty-echo + @kitty-ssh DCS escape sequences](https://agentprime.io/advisories/CVE-2026-72913.md) `CVE-2026-72913` · CVE record: kovidgoyal kitty · CVSS 7.3 High · Not analysed yet · Published 10 Aug 2026 · Tags: Command injection, Other injection, CWE-150 - [alseambusher crontab-ui - Unauthenticated RCE via Newline Injection in env_vars Parameter](https://agentprime.io/advisories/CVE-2026-72590.md) `CVE-2026-72590` · CVE record: alseambusher crontab-ui · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Aug 2026 · Tags: Other injection - [SourceCodester Simple Doctors Appointment System ajax.php set_appointment sql injection](https://agentprime.io/advisories/CVE-2026-19384.md) `CVE-2026-19384` · CVE record: SourceCodester Simple Doctors Appointment System · CVSS 6.9 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: Other injection, SQL injection - [Predicate injection in manage_relationship belongs_to lookup discloses secret lookup keys in Ash](https://agentprime.io/advisories/GHSA-vvp6-3wv6-833j.md) `GHSA-vvp6-3wv6-833j`, `CVE-2026-70395`, `EEF-CVE-2026-70395` · Hex `ash`: affected `>=1.52.0-rc.11, <3.31.1`, fixed in `3.31.1` · CVSS 2.1 Low · Not analysed yet · Published 9 Aug 2026 · Tags: Other injection - [itsourcecode Hospital Management System viewdoctorconsultancycharge.php sql injection](https://agentprime.io/advisories/CVE-2026-19364.md) `CVE-2026-19364` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 9 Aug 2026 · Tags: Other injection, SQL injection - [MingSoft MCMS ms-mdiy list.do ModelDataImpl.queryDiyFormData sql injection](https://agentprime.io/advisories/CVE-2026-19355.md) `CVE-2026-19355` · CVE record: MingSoft MCMS · CVSS 6.9 Medium · Not analysed yet · Published 9 Aug 2026 · Tags: Other injection, SQL injection - [lock-upme OPMS IN Clause message.go sql injection](https://agentprime.io/advisories/CVE-2026-19354.md) `CVE-2026-19354` · CVE record: lock-upme OPMS · CVSS 5.3 Medium · Not analysed yet · Published 9 Aug 2026 · Tags: Other injection, SQL injection - [dresende node-sql-query Request Parameter Select.js SelectQuery.build sql injection](https://agentprime.io/advisories/CVE-2026-19351.md) `CVE-2026-19351` · CVE record: dresende node-sql-query · CVSS 6.9 Medium · Not analysed yet · Published 9 Aug 2026 · Tags: Other injection, SQL injection - [Shenzhen Aitemi M300 Wi-Fi Repeater protocol.csp sprintf command injection](https://agentprime.io/advisories/CVE-2026-19348.md) `CVE-2026-19348` · CVE record: Shenzhen Aitemi M300 Wi-Fi Repeater · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Aug 2026 · Tags: Other injection, Command injection - [itsourcecode Hospital Management System viewdoctor.php sql injection](https://agentprime.io/advisories/CVE-2026-19347.md) `CVE-2026-19347` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 9 Aug 2026 · Tags: Other injection, SQL injection - [Tenda CH22 CertListInfo formCertListInfo command injection](https://agentprime.io/advisories/CVE-2026-19346.md) `CVE-2026-19346` · CVE record: Tenda CH22 · CVSS 8.7 High · Not analysed yet · Published 9 Aug 2026 · Tags: Other injection, Command injection - [code-projects Task Management System comment_count_user.php sql injection](https://agentprime.io/advisories/CVE-2026-19344.md) `CVE-2026-19344` · CVE record: code-projects Task Management System · CVSS 6.9 Medium · Not analysed yet · Published 9 Aug 2026 · Tags: Other injection, SQL injection Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .