Weaknesses of type CWE-564
10 resultsCVE-2026-40871HIGHmailcow: dockerized vulnerable to Second Order SQL Injection in quarantine category via APIEPSS 9.9%CVE-2024-48988HIGHApache StreamPark: SQL injection vulnerabilityEPSS 0.6%CVE-2024-58352HIGHLandray OA Unauthenticated HQL Injection via wechatLoginHelper.doEPSS 0.6%CVE-2025-0959HIGHEventer - WordPress Event & Booking Manager Plugin <= 3.9.9.2 - Authenticated (Subscriber+) SQL Injection via reg_idEPSS 0.4%CVE-2026-22242MEDIUMCoreShop Vulnerable to SQL Injection via Admin ReportsEPSS 0.4%CVE-2026-23959MEDIUMCoreShop Vulnerable to SQL Injection via Admin customer-company-modifierEPSS 0.4%CVE-2025-8052LOWHQL Injection vulnerability has been discovered in Opentext Flipper.EPSS 0.3%CVE-2026-4594MEDIUMerupts erupt EruptJpaUtils.java geneEruptHqlOrderBy sql injectionEPSS 0.3%CVE-2025-67280MEDIUMIn TIM BPM Suite/ TIM FLOW through 9.1.2 multiple Hibernate Query Language injection vulnerabilities exist which allow a low privileged userEPSS 0.2%CVE-2026-4593MEDIUMerupts erupt MCP Tool EruptDataQuery.java EruptDataQuery sql injectionEPSS 0.2%