# Other injection. LDAP, XPath, NoSQL, CRLF, header and log injection. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [KMS request injection via unsanitized key vault and provider values in libmongocrypt](https://agentprime.io/advisories/CVE-2026-114655.md) `CVE-2026-114655` · CVE record: MongoDB libmongocrypt · CVSS 6.0 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Other injection - [Update operator injection via single-element list rewriting in the update builder](https://agentprime.io/advisories/CVE-2026-114652.md) `CVE-2026-114652` · CVE record: MongoDB C# Driver · CVSS 7.1 High · Not analysed yet · Published 22 Oct 2026 · Tags: Other injection - [NoSQL injection via dot and dollar characters in LINQ filter field names and dictionary keys](https://agentprime.io/advisories/CVE-2026-114648.md) `CVE-2026-114648` · CVE record: MongoDB C# Driver · CVSS 7.2 High · Not analysed yet · Published 22 Oct 2026 · Tags: Other injection - [NoSQL operator injection via unvalidated replacement document in findOneAndReplace](https://agentprime.io/advisories/CVE-2026-114647.md) `CVE-2026-114647` · CVE record: MongoDB C# Driver · CVSS 5.3 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Other injection - [oretnom23 php-travel-agency-system Insertion insert.php sql injection](https://agentprime.io/advisories/CVE-2026-114577.md) `CVE-2026-114577` · CVE record: oretnom23 php-travel-agency-system · CVSS 6.9 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Other injection, SQL injection - [CRLF injection in Roundcube Webmail](https://agentprime.io/advisories/CVE-2026-114720.md) `CVE-2026-114720` · CVE record: Roundcube Webmail · CVSS 7.1 High · Not analysed yet · Published 22 Oct 2026 · Tags: Other injection - [TOTOLINK A950RG product.so UploadCustomModule command injection](https://agentprime.io/advisories/CVE-2026-114575.md) `CVE-2026-114575` · CVE record: TOTOLINK A950RG · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2026 · Tags: Other injection, Command injection - [Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab](https://agentprime.io/advisories/CVE-2026-15723.md) `CVE-2026-15723` · CVE record: GitLab GitLab · CVSS 8.2 High · Not analysed yet · Published 21 Oct 2026 · Tags: Other injection - [SPL Injection through the REST API in Splunk Secure Gateway](https://agentprime.io/advisories/CVE-2026-76295.md) `CVE-2026-76295` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Other injection - [oretnom23 php-travel-agency-system update.php sql injection](https://agentprime.io/advisories/CVE-2026-114441.md) `CVE-2026-114441` · CVE record: oretnom23 php-travel-agency-system · CVSS 6.9 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Other injection, SQL injection - [oretnom23 php-travel-agency-system delete.php sql injection](https://agentprime.io/advisories/CVE-2026-114440.md) `CVE-2026-114440` · CVE record: oretnom23 php-travel-agency-system · CVSS 6.9 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Other injection, SQL injection - [itsourcecode Online Cake Ordering System transactionsave.php sql injection](https://agentprime.io/advisories/CVE-2026-114384.md) `CVE-2026-114384` · CVE record: itsourcecode Online Cake Ordering System · CVSS 5.3 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Other injection, SQL injection - [itsourcecode Online Cake Ordering System orderdetail.php sql injection](https://agentprime.io/advisories/CVE-2026-114381.md) `CVE-2026-114381` · CVE record: itsourcecode Online Cake Ordering System · CVSS 5.3 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Other injection, SQL injection - [itsourcecode Online Cake Ordering System inserttrans.php sql injection](https://agentprime.io/advisories/CVE-2026-114380.md) `CVE-2026-114380` · CVE record: itsourcecode Online Cake Ordering System · CVSS 5.3 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Other injection, SQL injection - [itsourcecode Online Cake Ordering System deleteproduct.php sql injection](https://agentprime.io/advisories/CVE-2026-114378.md) `CVE-2026-114378` · CVE record: itsourcecode Online Cake Ordering System · CVSS 5.3 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Other injection, SQL injection - [ProjectWorlds Advanced Library Management System profile.php mysqli_query sql injection](https://agentprime.io/advisories/CVE-2026-114266.md) `CVE-2026-114266` · CVE record: ProjectWorlds Advanced Library Management System · CVSS 5.3 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Other injection, SQL injection - [ProjectWorlds Advanced Library Management System Search Form returned_book_search.php mysqli_query sql injection](https://agentprime.io/advisories/CVE-2026-114265.md) `CVE-2026-114265` · CVE record: ProjectWorlds Advanced Library Management System · CVSS 5.3 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Other injection, SQL injection - [ProjectWorlds Advanced Library Management System edit_member.php sql injection](https://agentprime.io/advisories/CVE-2026-114264.md) `CVE-2026-114264` · CVE record: ProjectWorlds Advanced Library Management System · CVSS 5.1 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Other injection, SQL injection - [ProjectWorlds Advanced Library Management System individual_report_search.php mysqli_query sql injection](https://agentprime.io/advisories/CVE-2026-114263.md) `CVE-2026-114263` · CVE record: ProjectWorlds Advanced Library Management System · CVSS 6.9 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Other injection, SQL injection - [oretnom23 file-management-system-php File Management files.php sql injection](https://agentprime.io/advisories/CVE-2026-114258.md) `CVE-2026-114258` · CVE record: oretnom23 file-management-system-php · CVSS 6.9 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Other injection, SQL injection - [Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.](https://agentprime.io/advisories/CVE-2026-76473.md) `CVE-2026-76473` · CVE record: Cisco Cisco Emergency Responder and 3 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Oct 2026 · Tags: Other injection - [oretnom23 file-management-system-php File Download download.php readfile sql injection](https://agentprime.io/advisories/CVE-2026-114257.md) `CVE-2026-114257` · CVE record: oretnom23 file-management-system-php · CVSS 6.9 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Other injection, SQL injection - [oretnom23 file-management-system-php Folder Management admin_class.php save_files sql injection](https://agentprime.io/advisories/CVE-2026-114256.md) `CVE-2026-114256` · CVE record: oretnom23 file-management-system-php · CVSS 6.9 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Other injection, SQL injection - [oretnom23 file-management-system-php User Account Management admin_class.php save_user sql injection](https://agentprime.io/advisories/CVE-2026-114255.md) `CVE-2026-114255` · CVE record: oretnom23 file-management-system-php · CVSS 6.9 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Other injection, SQL injection - [oretnom23 file-management-system-php admin_class.php login sql injection](https://agentprime.io/advisories/CVE-2026-114254.md) `CVE-2026-114254` · CVE record: oretnom23 file-management-system-php · CVSS 6.9 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Other injection, SQL injection - [itsourcecode Sales-and-Inventory-System cust_searchfrm.php sql injection](https://agentprime.io/advisories/CVE-2026-114252.md) `CVE-2026-114252` · CVE record: itsourcecode Sales-and-Inventory-System · CVSS 5.3 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Other injection, SQL injection - [itsourcecode Sales-and-Inventory-System cust_del.php sql injection](https://agentprime.io/advisories/CVE-2026-114251.md) `CVE-2026-114251` · CVE record: itsourcecode Sales-and-Inventory-System · CVSS 5.3 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Other injection, SQL injection - [itsourcecode Sales-and-Inventory-System cust_edit.php sql injection](https://agentprime.io/advisories/CVE-2026-114250.md) `CVE-2026-114250` · CVE record: itsourcecode Sales-and-Inventory-System · CVSS 5.3 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Other injection, SQL injection - [Trudesk through 1.2.11 Username Enumeration via Regex Injection in /api/v1/login](https://agentprime.io/advisories/CVE-2026-114401.md) `CVE-2026-114401` · CVE record: polonel trudesk · CVSS 6.9 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Other injection - [Trudesk through 1.2.11 MongoDB $where Injection via tickets search API](https://agentprime.io/advisories/CVE-2026-114396.md) `CVE-2026-114396` · CVE record: polonel trudesk · CVSS 7.1 High · Not analysed yet · Published 21 Oct 2026 · Tags: Other injection - [dhikshitha29 Insurance-Management-System EditPolicyHolder.php mysqli_query sql injection](https://agentprime.io/advisories/CVE-2026-114243.md) `CVE-2026-114243` · CVE record: dhikshitha29 Insurance-Management-System · CVSS 6.9 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Other injection, SQL injection - [dhikshitha29 Insurance-Management-System editPlan.php mysqli_query sql injection](https://agentprime.io/advisories/CVE-2026-114242.md) `CVE-2026-114242` · CVE record: dhikshitha29 Insurance-Management-System · CVSS 6.9 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Other injection, SQL injection - [projectworlds Advanced Library Management System report_search.php mysqli_query sql injection](https://agentprime.io/advisories/CVE-2026-114039.md) `CVE-2026-114039` · CVE record: projectworlds Advanced Library Management System · CVSS 5.3 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Other injection, SQL injection - [itsourcecode Online Cake Ordering System deletecustomer.php sql injection](https://agentprime.io/advisories/CVE-2026-113740.md) `CVE-2026-113740` · CVE record: itsourcecode Online Cake Ordering System · CVSS 5.3 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Other injection, SQL injection - [Injection in Google Chrome](https://agentprime.io/advisories/CVE-2026-113213.md) `CVE-2026-113213` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Other injection - [ApostropheCMS import-export: NoSQL injection via update-key value lets a crafted import match and overwrite an unidentified document](https://agentprime.io/advisories/GHSA-jqw5-w6h3-44g6.md) `GHSA-jqw5-w6h3-44g6`, `CVE-2026-113662` · npm `@apostrophecms/import-export`: affected `<3.7.0`, fixed in `3.7.0` · CVSS 5.4 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Broken access control, Other injection - [DrayTek Vigor2960 IPsec mainfunction.cgi ruequest_certificate command injection](https://agentprime.io/advisories/CVE-2026-113397.md) `CVE-2026-113397` · CVE record: DrayTek Vigor2960 · CVSS 5.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Other injection, Command injection - [DrayTek Vigor2960 Rename Table mainfunction.cgi rename_table command injection](https://agentprime.io/advisories/CVE-2026-113396.md) `CVE-2026-113396` · CVE record: DrayTek Vigor2960 · CVSS 5.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Other injection, Command injection - [DrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injection](https://agentprime.io/advisories/CVE-2026-113391.md) `CVE-2026-113391` · CVE record: DrayTek Vigor2960 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Other injection, Command injection - [DrayTek Vigor2960 CGI Process mainfunction.cgi set_table command injection](https://agentprime.io/advisories/CVE-2026-113389.md) `CVE-2026-113389` · CVE record: DrayTek Vigor2960 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Other injection, Command injection - [opensource-socialnetwork Cache Settings dynamic.php input code injection](https://agentprime.io/advisories/CVE-2026-113388.md) `CVE-2026-113388` · CVE record: opensource-socialnetwork · CVSS 4.8 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Other injection, Code injection - [Osclass Item Model Item.php findUserItems sql injection](https://agentprime.io/advisories/CVE-2026-113381.md) `CVE-2026-113381` · CVE record: Osclass · CVSS 6.9 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Other injection, SQL injection - [ArmorX Global Technology｜ArmorX Spam - Command Injection](https://agentprime.io/advisories/CVE-2026-113403.md) `CVE-2026-113403` · CVE record: ArmorX Global Technology ArmorX Spam · CVSS 7.1 High · Not analysed yet · Published 20 Oct 2026 · Tags: Other injection - [CRLF injection in Roundcube Webmail](https://agentprime.io/advisories/CVE-2026-113386.md) `CVE-2026-113386` · CVE record: Roundcube Webmail · CVSS 7.1 High · Not analysed yet · Published 20 Oct 2026 · Tags: Other injection - [H3C Magic NX15 RPC esps write code injection](https://agentprime.io/advisories/CVE-2026-112371.md) `CVE-2026-112371` · CVE record: H3C Magic NX15 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Oct 2026 · Tags: Other injection, Code injection - [Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System ws.asmx xp_cmdshell sql injection](https://agentprime.io/advisories/CVE-2026-112252.md) `CVE-2026-112252` · CVE record: Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System · CVSS 6.9 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Other injection, SQL injection - [IBM Concert Software Improper Output Neutralization for Logs](https://agentprime.io/advisories/CVE-2026-15661.md) `CVE-2026-15661` · CVE record: IBM Concert · CVSS 5.3 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Other injection - [vraj404 Criminal-Management-System Officer Registration Form addOfficer.php mysqli_error sql injection](https://agentprime.io/advisories/CVE-2026-112153.md) `CVE-2026-112153` · CVE record: vraj404 Criminal-Management-System · CVSS 6.9 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Other injection, SQL injection - [vraj404 Criminal-Management-System Search searchOff.php mysqli_query sql injection](https://agentprime.io/advisories/CVE-2026-112152.md) `CVE-2026-112152` · CVE record: vraj404 Criminal-Management-System · CVSS 6.9 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Other injection, SQL injection - [vraj404 Criminal Management System Submission Form home.php sql injection](https://agentprime.io/advisories/CVE-2026-112151.md) `CVE-2026-112151` · CVE record: vraj404 Criminal Management System · CVSS 6.9 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Other injection, SQL injection - [vraj404 Criminal-Management-System search.php sql injection](https://agentprime.io/advisories/CVE-2026-112150.md) `CVE-2026-112150` · CVE record: vraj404 Criminal-Management-System · CVSS 6.9 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Other injection, SQL injection - [satya-vinay Events-Management-System Registration-Delete dodelete.php sql injection](https://agentprime.io/advisories/CVE-2026-112142.md) `CVE-2026-112142` · CVE record: satya-vinay Events-Management-System · CVSS 6.9 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Other injection, SQL injection - [satya-vinay Events-Management-System Registration-Edit doedit.php mysqli_query sql injection](https://agentprime.io/advisories/CVE-2026-112141.md) `CVE-2026-112141` · CVE record: satya-vinay Events-Management-System · CVSS 6.9 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Other injection, SQL injection - [llSourcell Doctor-Dignity chat_module.py \_get_lib_module code injection](https://agentprime.io/advisories/CVE-2026-112140.md) `CVE-2026-112140` · CVE record: llSourcell Doctor-Dignity · CVSS 5.3 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Other injection, Code injection - [subhajitkhan online-clinic-management-system Administrative Mutation admindocview.php sql injection](https://agentprime.io/advisories/CVE-2026-112139.md) `CVE-2026-112139` · CVE record: subhajitkhan online-clinic-management-system · CVSS 6.9 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Other injection, SQL injection - [AXA Group NLP.js Condition Expression Pipeline evaluator.js Evaluator.walkFunction code injection](https://agentprime.io/advisories/CVE-2026-112102.md) `CVE-2026-112102` · CVE record: AXA Group NLP.js · CVSS 5.3 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Other injection, Code injection - [MISP CSS Injection via Remote Tag Colour in Event Preview](https://agentprime.io/advisories/CVE-2026-112183.md) `CVE-2026-112183` · CVE record: MISP MISP · CVSS 4.8 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Other injection - [DeepPavlov multitask_preprocessor.py MultiTaskPipelinePreprocessor.\_\_init\_\_ code injection](https://agentprime.io/advisories/CVE-2026-112100.md) `CVE-2026-112100` · CVE record: DeepPavlov · CVSS 5.1 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Other injection, Code injection - [DeepPavlov Config Reference Resolver params.py resolve code injection](https://agentprime.io/advisories/CVE-2026-112098.md) `CVE-2026-112098` · CVE record: DeepPavlov · CVSS 5.3 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Other injection, Code injection - [Dav-ee dairy-management-system pay.php mysqli_real_escape_string sql injection](https://agentprime.io/advisories/CVE-2026-112090.md) `CVE-2026-112090` · CVE record: Dav-ee dairy-management-system · CVSS 5.3 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Other injection, SQL injection Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .