Other injection.

Session Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splitting

• Juniper Networks Session Smart Router
• Juniper Networks Session Smart Conductor
• Other injection

Session Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanup

• Juniper Networks Session Smart Router
• Juniper Networks Session Smart Conductor
• Other injection

Ninja Forms WordPress Plugin < 3.15.4 Server-Side Validation Bypass via List Fields

• Saturday Drive Ninja Forms
• Other injection

Joomla Extension - icagenda.com - CSV formula injection in the registrations export in iCagenda 3.5.0 to 4.0.16

• icagenda.com iCagenda extension for Joomla
• Other injection

Royal Elementor Addons < 1.7.1070 - Unauthenticated Arbitrary Email Recipient Injection via Form Field ID Shortcodes

• Royal Elementor Addons
• Other injection

LibreSSL ocspcheck through 4.4.0 CRLF Injection via AIA OCSP URL Path

• OpenBSD LibreSSL
• Other injection

LibreSSL through 4.4.0 CRLF Injection via OCSP_sendreq_new() Request Line

• OpenBSD LibreSSL
• Other injection

reduxjs redux-devtools Remotedev Server evalAction code injection

• reduxjs redux-devtools
• Other injection
• Code injection

Tanium addressed an improper output sanitization vulnerability in Enforce.

• Tanium Enforce
• Other injection

Tanium addressed an improper output sanitization vulnerability in Comply.

• Tanium Comply
• Other injection

oretnom23 php-travel-agency-system Contact Form contact_insert.php sql injection

• oretnom23 php-travel-agency-system
• Other injection
• SQL injection

oretnom23 php-travel-agency-system traceapplication.php sql injection

• oretnom23 php-travel-agency-system
• Other injection
• SQL injection

oretnom23 php-travel-agency-system Admin Record Pages customer_detail.php sql injection

• oretnom23 php-travel-agency-system
• Other injection
• SQL injection

oretnom23 php-travel-agency-system Admin Search Pages customer_search.php sql injection

• oretnom23 php-travel-agency-system
• Other injection
• SQL injection

Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets

• WatchGuard Fireware OS
• Other injection
• CWE-20

Flexible GraphRAG: Cypher/Graph Injection via broken string-escaping in FalkorDB adapter (_escape()) - full graph wipe from ingested-document content

• Other injection
• CWE-116

>=0.6.0, <0.8.2 · fixed in 0.8.2

Ghost: Authorization Bypass in Comment Like Feature

• Broken access control
• Other injection

>=5.9.0, <6.44.1 · fixed in 6.44.1

Other issue in the Console component

• Mozilla Firefox
• Mozilla Thunderbird
• Other injection

Parse Server 9.0.0 before 9.10.5-alpha.6 ACL Bypass via $relatedTo Query

• parse-community parse-server
• Other injection

itsourcecode Online Book Store book.php sql injection

• itsourcecode Online Book Store
• Other injection
• SQL injection

TOTOLINK A950RG firewall.so apmib_set command injection

• TOTOLINK A950RG
• Other injection
• Command injection

TOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injection

• TOTOLINK A950RG
• Other injection
• Command injection

TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injection

• TOTOLINK A950RG
• Other injection
• Command injection

Asterisk: LDAP Filter Injection in res_config_ldap via SIP Username (Unauthenticated Information Disclosure)

• asterisk
• certified-asterisk
• Other injection

CRLF injection in Proxy-Authorization header built from proxy_auth_fun in hackney

• Other injection

>=2.0.0, <4.9.0 · fixed in 4.9.0

AllenAI AllenNLP Registrable Configuration Machinery registrable.py Registrable.resolve_class_name code injection

• AllenAI AllenNLP
• Other injection
• Code injection

DedeCMS Advertisement Rendering ad_js.php _RunMagicQuotes code injection

• DedeCMS
• Other injection
• Code injection

Oray Pugongying X5 Pro Dnsmasq crlf injection

• Oray Pugongying X5 Pro
• Other injection

Oray Pugongying X5 Pro L2TP Authentication crlf injection

• Oray Pugongying X5 Pro
• Other injection

Oray Pugongying X5 Pro IPsec Policy ipsec.conf crlf injection

• Oray Pugongying X5 Pro
• Other injection

Oray Pugongying X5 Pro Dnsmasq crlf injection

• Oray Pugongying X5 Pro
• Other injection

Oray Pugongying X5 Pro SNMP snmp_set crlf injection

• Oray Pugongying X5 Pro
• Other injection

Oray Pugongying X5 Pro Ser2net crlf injection

• Oray Pugongying X5 Pro
• Other injection

HashenUdara edoc-doctor-appointment-system add-new.php sql injection

• HashenUdara edoc-doctor-appointment-system
• Other injection
• SQL injection

Sony Neural Network Libraries NNP Converter utils.py func_set_nnabla_version_decorate code injection

• Sony Neural Network Libraries
• Other injection
• Code injection

Sony Neural Network Libraries Encode Param encode_decode_param.py load_param_in_txt code injection

• Sony Neural Network Libraries
• Other injection
• Code injection

itsourcecode Online Cake Ordering System deletetransac.php sql injection

• itsourcecode Online Cake Ordering System
• Other injection
• SQL injection

DedeCMS update_guide.php require_once code injection

• DedeCMS
• Other injection
• Code injection

SourceCodester Performance Indicator System save_profile.php sql injection

• SourceCodester Performance Indicator System
• Other injection
• SQL injection

SourceCodester Performance Indicator System edit_dealer.php sql injection

• SourceCodester Performance Indicator System
• Other injection
• SQL injection

SourceCodester Performance Indicator System adddealer.php sql injection

• SourceCodester Performance Indicator System
• Other injection
• SQL injection

Alfresco Activiti JuelScriptEngine.java JuelScriptEngine.eval code injection

• Alfresco Activiti
• Other injection
• Code injection

SourceCodester Performance Indicator System deleteproduct.php sql injection

• SourceCodester Performance Indicator System
• Other injection
• SQL injection

krupalshah Employee Recruitment System Registration registerform3.php sql injection

• krupalshah Employee Recruitment System
• Other injection
• SQL injection

krupalshah EmployeeRecruitmentSystem Registration Wizard registerform2.php mysql_query sql injection

• krupalshah EmployeeRecruitmentSystem
• Other injection
• SQL injection

krupalshah EmployeeRecruitmentSystem Registration registerform1.php mysql_query sql injection

• krupalshah EmployeeRecruitmentSystem
• Other injection
• SQL injection

mansi-k Restaurant_IMS lsmodal.php mysqli_connect sql injection

• mansi-k Restaurant_IMS
• Other injection
• SQL injection

pig-mesh pig SqlFilterArgumentResolver.java orderItem.getColumn sql injection

• pig
• Other injection
• SQL injection

Travisun Opptrix Import Endpoint import code injection

• Travisun Opptrix
• Other injection
• Code injection

Travisun Opptrix Schedule API setup command injection

• Travisun Opptrix
• Other injection
• Command injection

Path traversal in post media lets any registered user read server files

• GitroomHQ postiz-app
• Path traversal
• Other injection

virtualenv: Venv configuration readback can reinterpret path boundaries

• Other injection

<21.14.9 · fixed in 21.14.9

Duplicate Advisory: Namespace value starting with / forms a protocol-relative URL when loadPath/addPath places {{ns}} right after a / (bypass of the // check added for GHSA-xvq9-wjp8-hwqf)

• Other injection

<=4.0.2 · no fixed version yet

Goobi viewer: IIIF Auth 2.0 origin parameter unsanitized — CSP malformation and reflected XSS

• intranda goobi-viewer-core
• Cross-site scripting (XSS)
• Other injection

Goobi viewer: Solr injection via unvalidated region parameter in spatial search

• intranda goobi-viewer-core
• SQL injection
• Other injection

Goobi viewer: Solr query injection via the legacy RSS servlet q and filterQuery parameters

• intranda goobi-viewer-core
• SQL injection
• Other injection

Zimbra Collaboration Suite Data Source Test SMTP Command Injection via Unsanitized Email Address

• Zimbra Collaboration Suite
• Other injection

Zimbra Collaboration Suite LDAP Filter Injection via Calendar Resource Attribute Name

• Zimbra Collaboration Suite
• Other injection

Advanced Custom Fields: Extended 0.9.2.4 - 0.9.2.7 - Unauthenticated Arbitrary Shortcode Execution via Form Success Message

• Advanced Custom Fields: Extended
• Advanced Custom Fields: Extended PRO
• Other injection

Part-DB: Spreadsheet Formula Injection in XLSX Part Exports

• Part-DB-server
• Other injection
• CWE-20