agentprime: Other injection

CVE-2026-85076: Cronicle: Privilege Escalation via Arbitrary Environment Variable Injection through Event Params (Incomplete Fix for CVE-2026-39401)

Thu, 05 Nov 2026 20:28:01 GMT

CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-100365: SuiteCRM: Time-Based Blind SQL Injection via AOR_Reports ORDER BY Clause Allows Data Exfiltration by Any Authenticated User

Thu, 05 Nov 2026 18:38:37 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-63214: SuiteCRM: Authenticated SQL Injection in v4_1 get_entry_list rest api

Thu, 05 Nov 2026 18:12:25 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-123095: mpv 0.29.0 before 0.42.0 Playlist Entry Injection via ytdl_hook Newlines

Thu, 05 Nov 2026 15:11:49 GMT

CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-123028: itsourcecode Online Book Store admin_edit.php sql injection

Thu, 05 Nov 2026 14:00:20 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-103864: Apache Sling Engine: Request-derived values reach log sinks without CR/LF neutralization

Thu, 05 Nov 2026 12:32:26 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-73117: Apache Juneau: Response header CRLF injection and open redirect when applications set headers or redirect targets from request data

Thu, 05 Nov 2026 11:54:11 GMT

CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-123018: eosphoros-ai DB-GPT CodeAction code_utils.py execute_code code injection

Thu, 05 Nov 2026 11:45:20 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-122191: itsourcecode Airline Reservation System manage_booked.php sql injection

Thu, 05 Nov 2026 03:30:17 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-122051: Edimax BR-6208AC mp command injection

Wed, 04 Nov 2026 23:45:18 GMT

CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-122050: Campcodes Complete Sales and Inventory System with Credit Management login.php sql injection

Wed, 04 Nov 2026 23:30:10 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-122048: Campcodes Division Regional Athletic Meet Game Result Matrix System check-user.php sql injection

Wed, 04 Nov 2026 23:00:15 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-122038: krupalshah EmployeeRecruitmentSystem Requirement Board Update reqformprocessing.php mysql_query sql injection

Wed, 04 Nov 2026 22:30:22 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-122014: NPC-Worldwide npcpy sft.py load_sft_model code injection

Wed, 04 Nov 2026 21:00:26 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-108767: Multiple vulnerabilities that affects IBM Db2 Genius Hub

Wed, 04 Nov 2026 20:58:44 GMT

CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-12356: IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerability

Wed, 04 Nov 2026 20:25:49 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121946: zbateson mail-mime-parser before 3.0.9 and 4.x before 4.0.6 CRLF Header Injection via Message Builders

Wed, 04 Nov 2026 12:31:23 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-111038: Multiple vulnerabilities in Coupa’s Total Spend Management Platform

Wed, 04 Nov 2026 09:44:04 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-114420: LDAP wildcard injection exposes GINA recipient accounts

Wed, 04 Nov 2026 08:41:15 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121610: funadmin Frontend List Endpoint index selectList sql injection

Wed, 04 Nov 2026 02:00:20 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-120639: CGI versions before 5.00 for Perl allow HTTP header injection via entity decoding after the newline check in header and unchecked values in multipart_start and do_push

Tue, 03 Nov 2026 23:40:30 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-116648: Tanium addressed an improper output sanitization vulnerability in Discover.

Tue, 03 Nov 2026 22:17:23 GMT

CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121524: sumiie24 School-Management-System Public Search Feature parent_Login.php sql injection

Tue, 03 Nov 2026 21:30:19 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-115779: Effect: Cookie attribute injection via domain, path, and name fields in @effect/platform makeCookie()

Tue, 03 Nov 2026 20:40:19 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121502: mathurvishal CloudClassroom-PHP-Project facultydetails.php sql injection

Tue, 03 Nov 2026 20:15:12 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-120567: EF Core provider: pipeline-form ExecuteUpdate evaluates a user string setter as a $-field reference

Tue, 03 Nov 2026 19:36:46 GMT

CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-63489: Yeti: Authenticated AQL injection via unvalidated search sorting and filter_aliases parameters

Tue, 03 Nov 2026 19:33:57 GMT

CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-57154: OPNsense: Configuration line injection via multiple GUI text fields

Tue, 03 Nov 2026 18:10:28 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-111211: Potential log injection via unescaped geometry form values

Tue, 03 Nov 2026 15:41:58 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121260: Ziroom ZHOME A0101 Lua zrUsb.lua loadstring code injection

Tue, 03 Nov 2026 15:30:19 GMT

CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121433: AzuraCast before 0.24.0 Stored CSV Formula Injection via Bulk Media Export

Tue, 03 Nov 2026 14:28:26 GMT

CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-121432: AzuraCast before 0.24.0 CRLF Injection via Mount display_name in PLS Playlist

Tue, 03 Nov 2026 14:28:25 GMT

CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-114442: Apache HertzBeat: incomplete XPath expression validation in aliasFields

Tue, 03 Nov 2026 10:21:06 GMT

Published by the CVE Program. Not analysed by agentprime yet.

TYPO3-EXT-SA-2026-037: Broken Access Control in extension "Mail" (mail)

Tue, 03 Nov 2026 09:00:00 GMT

mediaessenz/mail <3.12.5 || >=4.0.0, <4.2.0, fixed in 3.12.5, 4.2.0. CVSS 5.3 (Medium). Published by Packagist. Not analysed by agentprime yet.

CVE-2026-120349: dayrui XunRuiCMS Mobile Site Directory index.php str_replace code injection

Mon, 02 Nov 2026 06:00:13 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-120348: dayrui XunRuiCMS Email Template Rendering Notice.php _get_tpl_content code injection

Mon, 02 Nov 2026 05:45:11 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-120347: dayrui XunRuiCMS Member View.php View sql injection

Mon, 02 Nov 2026 05:30:30 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-120342: mathurvishal CloudClassroom-PHP-Project viewquery.php sql injection

Mon, 02 Nov 2026 04:30:15 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-120274: beecue FastBee Groovy Script Executor script code injection

Sun, 01 Nov 2026 21:00:27 GMT

CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-13575: HTTP::Session versions before 0.54 for Perl allow memcached command injection via unfiltered session ids in HTTP::Session::Store::CHI

Sun, 01 Nov 2026 10:46:36 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-120198: WAVLINK WL-WN530BE1-A protocol.csp con_check_read_finish command injection

Sun, 01 Nov 2026 04:15:16 GMT

CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-120201: Jpom 2.10.0 through 2.11.12 Authentication Bypass via JPOM-USER-TOKEN Header

Sat, 31 Oct 2026 17:25:50 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

AdminNeo SQLite: multi_query Incorrect Check of Function Return Value RCE

Fri, 30 Oct 2026 22:53:08 GMT

adminneo-org/adminneo <5.5.1, fixed in 5.5.1. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

AdminNeo has Cookie Attribute Injection via Unsanitized X-Forwarded-Prefix in Set-Cookie Headers

Fri, 30 Oct 2026 22:52:47 GMT

adminneo-org/adminneo >=4.6.0, <5.5.1, fixed in 5.5.1. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-119619: 37954679 cak-filemanagement-system save_student.php mysqli_query sql injection

Fri, 30 Oct 2026 17:15:15 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-91915: Injection in Dell OpenManage Enterprise

Fri, 30 Oct 2026 13:30:02 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-118994: CallBackery versions before 0.62.0 for Perl allow log injection via newlines in the login name

Fri, 30 Oct 2026 13:10:57 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-119560: OPNsense core through 26.7.8 NTP Configuration Injection via GPS and PPS Fudge Fields

Fri, 30 Oct 2026 11:31:08 GMT

CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-119424: OPNsense before 26.7.8 Wireless WPA Configuration Line Injection via Identity

Fri, 30 Oct 2026 11:30:54 GMT

CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-119423: OPNsense core before 26.7.8 Lockout IP Planting via WebGUI Login Username

Fri, 30 Oct 2026 11:30:53 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.