CVE Intelligence
Skip to main content

Weakness and search-intent cluster

Curated intelligence cluster

Injection vulnerabilities

52 of 149 pages in this cluster are on CISA's KEV catalog, and 52 are past its remediation deadline.

Pages

149

Ransomware-linked

15

confirmed

Public PoC

132

repositories found

149 pages · showing 1–100 · sorted by kev listed ↓

Published CVE pages, sorted by KEV listed descending
TitleVendorSignals
CVE-2026-76461Cisco Secure Email Gateway SQL Injection VulnerabilityCisco2026-09-142026-09-1428%9.89
CVE-2026-9586Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMBSangoma2026-09-022026-07-1719%9.815
CVE-2026-72898Metabase SQL injection via password reset endpointMetabase2026-08-112026-08-1019%1022
CVE-2026-63030WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code ExecutionWordPress2026-07-212026-07-1710%9.8189
CVE-2026-60137WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_QueryWordPress2026-07-212026-07-176%5.9150
CVE-2026-9082Drupal core - Highly critical - SQL injection - SA-CORE-2026-004Drupal2026-05-222026-05-2016%9.847
CVE-2026-42208LiteLLM: SQL injection in Proxy API key verificationBerriAI2026-05-082026-05-086%9.835
CVE-2026-21643Fortinet FortiClient EMS SQL Injection VulnerabilityFortinet2026-04-132026-02-0694%9.817
CVE-2024-43468Microsoft Configuration Manager Remote Code Execution VulnerabilityMicrosoft2026-02-122024-10-0881%9.8710SOCRadar
CVE-2025-58360GeoServer is vulnerable to an Unauthenticated XML External Entities (XXE) attack via WMS GetMap featuregeoserver2025-12-112025-11-2561%9.8522SOCRadar
CVE-2025-57819FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCEFreePBX2025-08-292025-08-2885%9.8667SOCRadar
CVE-2025-20337Cisco ISE API Unauthenticated Remote Code Execution VulnerabilityCisco2025-07-282025-07-1668%10812SOCRadar
CVE-2025-20281Cisco ISE API Unauthenticated Remote Code Execution VulnerabilityCisco2025-07-282025-06-2598%104117SOCRadar
CVE-2025-2776SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerabilitysysaid2025-07-222025-05-0764%9.81
CVE-2025-2775SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerabilitysysaid2025-07-222025-05-0743%7.51
CVE-2025-25257Fortinet FortiWeb SQL Injection VulnerabilityFortinet2025-07-182025-07-17100%9.8547SOCRadar
CVE-2025-25181 Advantive VeraCore SQL Injection Vulnerabilityadvantive2025-03-102025-02-0357%7.5none yet
CVE-2020-29574CyberoamOS (CROS) SQL Injection VulnerabilitySophos2025-02-062020-12-115%9.8
CVE-2023-45727North Grid Proself Improper Restriction of XML External Entity (XXE) Reference VulnerabilityNorth Grid2024-12-032023-10-184%7.5none yet
CVE-2024-9465Expedition: SQL Injection Leads to Firewall Admin Credential DisclosurePalo Alto2024-11-142024-10-09100%9.123
CVE-2024-9379Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerabilityivanti2024-10-092024-10-0844%7.2none yet
CVE-2024-29824Ivanti Endpoint Manager (EPM) SQL Injection VulnerabilityIvanti2024-10-022024-05-31100%8.8340SOCRadar
CVE-2024-6670Progress WhatsUp Gold SQL Injection VulnerabilityProgress2024-09-162024-08-2993%9.81
CVE-2024-34102XXE can expose crypt key and other secrets granting full admin accessAdobe2024-07-172024-06-13100%9.8177SOCRadar
CVE-2023-48788Fortinet FortiClient EMS SQL Injection VulnerabilityFortinet2024-03-252024-03-1298%9.812
CVE-2023-22527Atlassian Confluence Data Center and Server Template Injection VulnerabilityAtlassian2024-01-242024-01-16100%9.877129SOCRadar
CVE-2023-46748F5 BIG-IP Configuration Utility SQL Injection Vulnerabilityf52023-10-312023-10-264%8.8none yet
CVE-2021-44026Roundcube Webmail SQL Injection VulnerabilityRoundcube2023-06-222021-11-1970%9.81
CVE-2023-34362Progress MOVEit Transfer SQL Injection VulnerabilityProgress2023-06-022023-06-02100%9.82491104SOCRadar
CVE-2022-35914Teclib GLPI Remote Code Execution VulnerabilityTeclib2023-03-072022-09-19100%9.854
CVE-2022-27924Synacor Zimbra Collaboration Suite (ZCS) Command Injection VulnerabilitySynacor2022-08-042022-04-2185%7.5
CVE-2016-2386SAP NetWeaver SQL Injection VulnerabilitySAP2022-06-092016-02-1672%9.81
CVE-2017-18362Kaseya VSA SQL Injection VulnerabilityKaseya2022-05-242019-02-0587%9.8
CVE-2018-7841Schneider Electric U.motion Builder SQL Injection Vulnerabilityu motion2022-04-152019-05-2273%9.81
CVE-2021-20028SonicWall Secure Remote Access (SRA) SQL Injection Vulnerabilitysonicwall2022-03-282021-08-0430%9.8
CVE-2019-12989Citrix SD-WAN and NetScaler SQL Injection VulnerabilityCitrix2022-03-252019-07-1695%9.81
CVE-2013-2251Apache Struts Improper Input Validation VulnerabilityApache2022-03-252013-07-20100%9.8121
CVE-2020-5722Grandstream Networks UCM6200 Series SQL Injection VulnerabilityGrandstream2022-01-282020-03-2384%9.81
CVE-2019-9670Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity ReferenceSynacor2022-01-102019-05-29100%9.84261SOCRadar
CVE-2019-2725Oracle WebLogic Server, InjectionOracle2022-01-102019-04-26100%9.81264SOCRadar
CVE-2020-17463Fuel CMS SQL Injection VulnerabilityFuel CMS2021-12-102020-08-1390%9.8none yet
CVE-2021-42258BQE BillQuick Web Suite SQL Injection VulnerabilityBQE2021-11-032021-10-2274%9.81
CVE-2021-27101Accellion FTA SQL Injection VulnerabilityAccellion2021-11-032021-02-166%9.81
CVE-2021-20016SonicWall SSLVPN SMA100 SQL Injection Vulnerabilitysonicwall2021-11-032021-02-0440%9.8
CVE-2020-17496vBulletin PHP Module Remote Code Execution VulnerabilityvBulletin2021-11-032020-08-1287%9.81
CVE-2020-12271Sophos SFOS SQL Injection VulnerabilitySophos2021-11-032020-04-2742%9.8
CVE-2020-8468Trend Micro Multiple Products Content Validation Escape Vulnerabilitytrend micro2021-11-032020-03-186%8.8none yet
CVE-2020-0646Microsoft .NET Framework Remote Code Execution Vulnerabilitymicrosoft2021-11-032020-01-1499%9.81
CVE-2019-17558Apache Solr VelocityResponseWriter Plug-In Remote Code Execution VulnerabilityApache2021-11-032019-12-3099%7.51
CVE-2019-13608Citrix StoreFront Server XML External Entity (XXE) Processing VulnerabilityCitrix2021-11-032019-08-2930%7.5
CVE-2019-7481SonicWall SMA100 SQL Injection VulnerabilitySonicWall2021-11-032019-12-17100%7.5318SOCRadar
CVE-2016-9563SAP NetWeaver XML External Entity (XXE) VulnerabilitySAP2021-11-032016-11-2324%6.5none yet
CVE-2026-103355WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerabilityUnlimited Elementsn/a2026-10-040%9.32
CVE-2026-102909SourceCodester Online Reviewer Management System btn_functions.php sql injectionSourceCodestern/a2026-09-30n/a7.31
CVE-2026-102908SourceCodester Online Reviewer Management System questions-view.php sql injectionSourceCodestern/a2026-09-30n/a7.31
CVE-2026-102491mahonelau kykms SqlInjectionUtil QueryGenerator.java QueryGenerator.doMultiFieldsOrder sql injectionmahonelaun/a2026-09-29n/a7.31
CVE-2026-102127Kiteworks Email Protection Gateway Improper Restriction of XML External Entity ReferenceKiteworksn/a2026-09-30n/a7none yet
CVE-2026-101108Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8ordasoft.comn/a2026-09-28n/a9.31
CVE-2026-100717froxlor before 2.3.12 CRLF Injection via validateUrl userinfofroxlorn/a2026-09-26n/a9.92
CVE-2026-100644SiYuan before v3.8.4 SQL Injection via dailyNoteSavePathsiyuan-noten/a2026-09-26n/a7.522
CVE-2026-100312mathurvishal CloudClassroom-PHP-Project updateguest.php sql injectionmathurvishaln/a2026-09-26n/a6.33
CVE-2026-97162Joomla Extension - lomart.fr - Various SQL injection vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29lomart.frn/a2026-09-26n/a8.32
CVE-2026-96429Flowring Agentflow 4.0 - SQL InjectionFlowring Technology Corpn/a2026-09-29n/a9.31
CVE-2026-96428Flowring Agentflow 4.0 - SQL InjectionFlowring Technology Corpn/a2026-09-29n/a9.31
CVE-2026-95832Reflected unknown field names in the kitty colour control escape code allow command execution in the user's shellKovid Goyaln/a2026-09-25n/a9.31
CVE-2026-94131Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension < 11.1.0acymailing.comn/a2026-09-26n/a8.32
CVE-2026-94130Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3joomlaboat.comn/a2026-09-26n/a9.31
CVE-2026-94053Apache MINA SSHD: LDAP injection in sshd-ldapApachen/a2026-09-30n/a9.13
CVE-2026-91841Networkmanager-vpnc: networkmanager-vpnc: incomplete fix for cve-2018-10900 allows root privilege escalation via ca-file path newline injectionGNOMEn/a2026-09-25n/a7.81
CVE-2026-91840Networkmanager-vpnc: networkmanager-vpnc: local privilege escalation to root via newline injection in vpn usernameGNOMEn/a2026-09-25n/a7.81
CVE-2026-91839Networkmanager-fortisslvpn: networkmanager-fortisslvpn: local privilege escalation to root via crlf injection in vpn profile credentialsGNOMEn/a2026-09-25n/a7.81
CVE-2026-91024Booking Manager < 2.1.21 - Author+ SQLi via ICS Import Feed UID (sync_gid)Unknownn/a2026-09-23n/an/a3
CVE-2026-88024GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Rust DriverMongoDBn/a2026-09-100%8.3none yet
CVE-2026-88023GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB PHP LibraryMongoDBn/a2026-09-100%8.3none yet
CVE-2026-82386Apache Roller: XML external entity processing in OPML bookmark importApachen/a2026-09-28n/a7.72
CVE-2026-80177Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper…Delln/a2026-09-090%6.51
CVE-2026-80055Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper…Delln/a2026-09-090%4.41
CVE-2026-79640Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper…Delln/a2026-09-090%5.41
CVE-2026-76570Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables < 1.21.1joomcode.comn/a2026-09-30n/a102
CVE-2026-75959GoPay for WooCommerce <= 1.0.36 - Authenticated (Shop Manager+) SQL Injection via 'log_table_filter' Parametergopaypluginsn/a2026-09-190%4.91
CVE-2026-73640Time-based SQL Injection in Dayforce PayrollDayforcen/a2026-09-28n/a9.31
CVE-2026-73357WordPress GiveWP plugin < 4.16.6 - Cross Site Scripting (XSS) vulnerabilityNexcessn/a2026-08-130%6.52
CVE-2026-72510Toptech TMS7 and TopHAT SQL InjectionToptech Systemsn/a2026-09-29n/a91
CVE-2026-72507Toptech TMS7 and TopHAT SQL InjectionToptech Systemsn/a2026-09-29n/a91
CVE-2026-68954Toptech TMS7 and TopHAT SQL InjectionToptech Systemsn/a2026-09-29n/a92
CVE-2026-68068Toptech TMS7 and TopHAT SQL InjectionToptech Systemsn/a2026-09-29n/a91
CVE-2026-66478WordPress Church Admin plugin <= 5.1.1 - SQL Injection vulnerabilityandy moylen/a2026-08-130%9.369
CVE-2026-66471WordPress Accordion plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerabilityThemepointsn/a2026-08-130%6.58
CVE-2026-63713Toptech TMS7 and TopHAT SQL InjectionToptech Systemsn/a2026-09-29n/a91
CVE-2026-62097WordPress Business Directory plugin <= 6.4.27 - SQL Injection vulnerabilityWPTastyn/a2026-09-30n/a7.62
CVE-2026-57858Cal.com Cal.diy 6.2.0 Stored XSS via BookingPageTagManager Analytics Tracking IDCal.comn/a2026-08-120%8.93
CVE-2026-52691Apache Griffin Hive Metastore Module: SQL Injection Vulnerability in Hive Metastore ModuleApachen/a2026-09-040%n/a6
CVE-2026-48550Nagios Core / XI cmd.cgi Reflected XSS via NagFormId ParameterNagios Enterprises, LLC.n/a2026-08-120%6.112
CVE-2026-45115MyBB: Buddy/ignore list username XSSmybbn/a2026-08-180%8.72
CVE-2026-42167mod_sql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a username, in scenarios where there is logging of…ProFTPDn/a2026-04-287%8.118
CVE-2026-29053Ghost Vulnerable to Remote Code Execution via Malicious ThemesTryGhostn/a2026-03-055%9.88
CVE-2026-28175WordPress Visitors Traffic Real Time Statistics plugin <= 8.11 - Cross Site Scripting (XSS) vulnerabilitywp-buyn/a2026-08-130%7.11
CVE-2026-28168WordPress CubeWP plugin <= 1.1.30 - SQL Injection vulnerabilityImran Tauqeern/a2026-08-130%8.58
CVE-2026-28158WordPress Do Lasso plugin <= 358 - Cross Site Scripting (XSS) vulnerabilityLasso Analytics, Inc.n/a2026-08-130%7.12
CVE-2026-28156WordPress Do Lasso plugin <= 358 - SQL Injection vulnerabilityLasso Analytics, Inc.n/a2026-08-130%8.51

Field coverage across these 149 pages: KEV listing date 52 · CVSS base score 142 · publication date 149 · EPSS 114 · threat-intel signals 13. Rows with no value on the column being sorted are listed last in both directions rather than counted as zero.

Reading a row

ransomware
CISA records known use in ransomware campaigns. Varies across this index, which is why it is on the row.
PoC
Public proof-of-concept repositories this deployment found on GitHub, and how many.
EPSS
FIRST's estimate of the probability the CVE is exploited in the next 30 days. Present on every record here.
CVSS
Base score, from scored sources only. "n/a" means no source scored it — not that the score is low.