Advisories · Weakness
Other injection.
LDAP, XPath, NoSQL, CRLF, header and log injection. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 6.3 Medium
oRPC: Vary Header Injection in CORS Plugin leading to potential Cache/CORS Bypass
- Other injection
<1.14.8 · fixed in 1.14.8
GHSA-j9v4-rhgr-4m5f · CVE-2026-77360 - CVSS 8.2 High
Sanic: HTTP response header injection via missing CR/LF validation in Sanic HTTP/1.1 responses
- sanic
- Other injection
- CVSS 6.3 Medium
Log injection via an unescaped password reset identity in AshAuthentication
- Other injection
>=4.2.0, <4.15.0 || >=5.0.0-rc.0, <5.0.0-rc.14 · fixed in 4.15.0, 5.0.0-rc.14
GHSA-wg7g-r393-vr3g · CVE-2026-86522 - CVSS 9.1 CriticalCritical · CVSS 9+
Cisco Identity Search Engine SXP REST API SQL Injection Vulnerability
- Cisco Identity Services Engine Software
- Other injection
- CVSS 10.0 CriticalCritical · CVSS 9+
Cisco Identity Services Engine Hardening Release - Improper Neutralization Vulnerabilities
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Other injection
- CVSS 5.3 Medium
itsourcecode Leave Management System index.php sql injection
- itsourcecode Leave Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Inventory and Monitoring System btn_functions.php add sql injection
- SourceCodester Inventory and Monitoring System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Inventory and Monitoring System index.php sql injection
- SourceCodester Inventory and Monitoring System
- Other injection
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Sentry Seer vulnerability allows attacker-controlled input to be executed in a privileged environment
- Functional Software, Inc. Sentry Seer
- Other injection
- Code injection
- CVSS 6.9 Medium
code-projects Matrimonial System Regular Search search.php sql injection
- code-projects Matrimonial System
- Other injection
- SQL injection
- CVSS 5.4 Medium
Injection in Jenkins Project Jenkins Gradle Plugin
- Jenkins Project Jenkins Gradle Plugin
- Other injection
- CVSS 5.3 Medium
itsourcecode Leave Management System index.php sql injection
- itsourcecode Leave Management System
- Other injection
- SQL injection
- CVSS 5.3 Medium
Apache ZooKeeper: Operational log forgery via newline injection in EnsembleAuthenticationProvider
- Apache Software Foundation Apache ZooKeeper
- Other injection
- CVSS 5.3 Medium
Apache ZooKeeper: Audit log injection via unsanitized output from multiple sources
- Apache Software Foundation Apache ZooKeeper
- Other injection
- CVSS 4.8 Medium
Formidable Forms < 6.35 - Unauthenticated Arbitrary Shortcode Execution via [entry_key] Custom HTML Token
- Formidable Forms
- Other injection
- CVSS 5.1 Medium
gedelumbung HospitalManagement app_global_admin_model.php generate_index_pasien sql injection
- gedelumbung HospitalManagement
- Other injection
- SQL injection
- CVSS 5.1 Medium
a2ui-project a2ui Angular Renderer server-to-client.ts z.any injection
- a2ui
- Other injection
- CWE-707
- CVSS 4.8 Medium
Http4s: Set-Cookie rendering does not escape attribute delimiters
- http4s
- Other injection
- CWE-1286
- CVSS 6.5 Medium
Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
- IBM Cloud Pak for Business Automation
- Other injection
- CVSS 6.5 Medium
Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access
- IBM Verify Identity Access
- IBM Security Verify Access
- Other injection
- CVSS 9.8 CriticalCritical · CVSS 9+
IBM MQ is vulnerable to unauthenticated remote code execution via JNDI injection
- IBM MQ
- Other injection
- CVSS 8.1 High
IBM MQ Resource Adapter IVT servlet is vulnerable to unauthenticated remote code execution
- IBM MQ
- Other injection
- CVSS 5.3 Medium
gitoxide gix-transport before 0.59.2 CR/LF/NUL Injection
- gitoxide
- Other injection
- CVSS 8.7 High
Flowise before 3.1.4 NoSQL Injection via sessionId
- Flowise
- Other injection
- CVSS 6.9 Medium
WuzhiCMS index.php getDataOfJson sql injection
- WuzhiCMS
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Online Faculty Clearance System delete_faculty1.php sql injection
- SourceCodester Online Faculty Clearance System
- Other injection
- SQL injection
- CVSS 5.3 Medium
D-Link DSL-3782 Diagnostics Diagnostics.asp system command injection
- D-Link DSL-3782
- Other injection
- Command injection
- CVSS 6.9 Medium
zyx0814 FilePress Publish search.php sql injection
- zyx0814 FilePress
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Online Faculty Clearance System update_requirement_status.php sql injection
- SourceCodester Online Faculty Clearance System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester Online Faculty Clearance System delete_requirement.php sql injection
- SourceCodester Online Faculty Clearance System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester/katojkalemba Online Food Ordering System order.php sql injection
- SourceCodester Online Food Ordering System
- katojkalemba Online Food Ordering System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester/katojkalemba Online Food Ordering System category-foods.php sql injection
- SourceCodester Online Food Ordering System
- katojkalemba Online Food Ordering System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester College Notes Gallery Management System login.php sql injection
- SourceCodester College Notes Gallery Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
PHPGurukul Daily Expense Tracker System forgot-password.php sql injection
- PHPGurukul Daily Expense Tracker System
- Other injection
- SQL injection
- CVSS 6.9 Medium
PHPGurukul Daily Expense Tracker System Login index.php sql injection
- PHPGurukul Daily Expense Tracker System
- Other injection
- SQL injection
- CVSS 6.9 Medium
PHPGurukul Blood Donor Management System Report Endpoint Report.php sql injection
- PHPGurukul Blood Donor Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
a2aproject a2a-java Authorization Header Construction BasePushNotificationSender.java BasePushNotificationSender.dispatchNotification response splitting
- a2aproject a2a-java
- Other injection
- CVSS 5.3 Medium
IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
- IBM WebSphere Application Server
- Other injection
- CVSS 4.8 Medium
IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
- IBM WebSphere Application Server
- Other injection
- CVSS 6.9 Medium
HKUDS nanobot ExecTool shell.py ExecTool._spawn argument injection
- HKUDS nanobot
- Other injection
- Command injection
- CVSS 6.9 Medium
subhajitkhan online-clinic-management-system doctorlogin.php sql injection
- subhajitkhan online-clinic-management-system
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Leave Management System index.php sql injection
- itsourcecode Leave Management System
- Other injection
- SQL injection
- CVSS 6.9 Medium
itsourcecode Leave Management System login.php sql injection
- itsourcecode Leave Management System
- Other injection
- SQL injection
- CVSS 9.4 CriticalCritical · CVSS 9+
froxlor before 2.2.5 nginx/Apache Configuration Injection via subdomain redirect URL
- froxlor
- Other injection
- CVSS 5.1 Medium
Yot CMS Admin Console admin.php eval code injection
- Yot CMS
- Other injection
- Code injection
- CVSS 6.9 Medium
Yot CMS Cookie global.php login sql injection
- Yot CMS
- Other injection
- SQL injection
- CVSS 5.1 Medium
D-Link DWR-M921 formDiskPartition system command injection
- D-Link DWR-M921
- Other injection
- Command injection
- CVSS 6.9 Medium
subhajitkhan online-clinic-management-system listdoctor.php sql injection
- subhajitkhan online-clinic-management-system
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Sales and Inventory System pro_edit1.php sql injection
- itsourcecode Sales and Inventory System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Sales and Inventory System inv_edit1.php sql injection
- itsourcecode Sales and Inventory System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Sales and Inventory System sup_edit1.php sql injection
- itsourcecode Sales and Inventory System
- Other injection
- SQL injection
- CVSS 5.3 Medium
cym1102 nginxWebUI autoUpdate MainController.autoUpdate code injection
- cym1102 nginxWebUI
- Other injection
- Code injection
- CVSS 5.3 Medium
itsourcecode Sales and Inventory System emp_transac.php add sql injection
- itsourcecode Sales and Inventory System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester School Registration and Fee System save_class.php sql injection
- SourceCodester School Registration and Fee System
- Other injection
- SQL injection
- CVSS 5.3 Medium
itsourcecode Sales and Inventory System cust_pos_trans.php sql injection
- itsourcecode Sales and Inventory System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester School Registration and Fee System pay_report.php sql injection
- SourceCodester School Registration and Fee System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester School Registration and Fee System delete_stud.php sql injection
- SourceCodester School Registration and Fee System
- Other injection
- SQL injection
- CVSS 6.9 Medium
SourceCodester School Registration and Fee System save_stud.php sql injection
- SourceCodester School Registration and Fee System
- Other injection
- SQL injection
- CVSS 7.1 High
Froxlor before 2.3.12 SSH Key Injection via authorized_keys
- Froxlor
- Other injection
- CVSS 5.3 Medium
GongShengyue OnlineBooks listSplit BooksServlet.java sql injection
- GongShengyue OnlineBooks
- Other injection
- SQL injection