СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
16| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2025-71332 Flowise - SQL Injection in importChatflows API via chatflow.id Parameter Flowise / Flowise · flowise | Критический | 8.5 | 0,52 % | PoC | 24.06.2026 | |
| CVE-2026-40871 mailcow: dockerized vulnerable to Second Order SQL Injection in quarantine category via API mailcow / mailcow-dockerized | Критический | 7.2 | 8,57 % | PoC | 21.04.2026 | |
| CVE-2026-111390 Erupt through 2.3.0 HQL Injection via linkTreeVal in Data Table API erupts / erupt | Высокий | 6.0 | 0,36 % | PoC | 16.10.2026 | |
| CVE-2026-73796 HPE NonStop TSQLEXE - Memory Corruption vulnerability Hewlett Packard Enterprise / HPE NonStop TSQLEXE | Средний | 4.4 | 0,13 % | 14.10.2026 | ||
| CVE-2026-76451 Cisco Identity Services Engine Certificate Management SQL Injection Vulnerability Cisco / Cisco Identity Services Engine Software · Cisco / Cisco ISE Passive Identity Connector | Средний | 4.9 | 0,43 % | 16.09.2026 | ||
| CVE-2026-76450 Cisco Identity Services Engine SQL Injection Vulnerability Cisco / Cisco Identity Services Engine Software · Cisco / Cisco ISE Passive Identity Connector | Средний | 4.9 | 0,43 % | 16.09.2026 | ||
| CVE-2026-13337 CWE-564: SQL Injection: Hibernate vulnerability exists that could allow the injection of a malicious Schneider Electric / NetBotz 5 - 750/755 | Средний | 5.1 | 0,28 % | 01.09.2026 | ||
| CVE-2024-58352 Landray OA Unauthenticated HQL Injection via wechatLoginHelper.do Shenzhen Landray Software Co., Ltd. / Landry Office Automation (OA) | Критический | 8.7 | 0,9 % | PoC | 02.07.2026 | |
| CVE-2025-0959 Eventer - WordPress Event & Booking Manager Plugin <= 3.9.9.2 - Authenticated (Subscriber+) SQL Injection via reg_id imithemes / Eventer - WordPress Event & Booking Manager Plugin | Высокий | 8.8 | 0,44 % | 07.03.2025 | ||
| CVE-2026-4593 erupts erupt MCP Tool EruptDataQuery.java EruptDataQuery sql injection erupts / erupt | Высокий | 5.3 | 0,2 % | PoC | 23.03.2026 | |
| CVE-2026-4594 erupts erupt EruptJpaUtils.java geneEruptHqlOrderBy sql injection erupts / erupt | Высокий | 6.9 | 0,26 % | PoC | 23.03.2026 | |
| CVE-2026-23959 CoreShop Vulnerable to SQL Injection via Admin customer-company-modifier coreshop / CoreShop | Средний | 6.9 | 0,42 % | 22.01.2026 | ||
| CVE-2025-67280 In TIM BPM Suite/ TIM FLOW through 9.1.2 multiple Hibernate Query Language injection vulnerabilities n/a / n/a | Средний | 5.4 | 0,22 % | 09.01.2026 | ||
| CVE-2026-22242 CoreShop Vulnerable to SQL Injection via Admin Reports coreshop / CoreShop | Высокий | 4.9 | 0,43 % | PoC | 08.01.2026 | |
| CVE-2024-48988 Apache StreamPark: SQL injection vulnerability Apache Software Foundation / Apache StreamPark | Высокий | 7.6 | 0,59 % | 22.08.2025 | ||
| CVE-2025-8052 HQL Injection vulnerability has been discovered in Opentext Flipper. opentext / Flipper | Низкий | 1.0 | 0,36 % | 20.10.2025 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.