SQL Injection

Every one of the 78 is a mark on the map. Named now: 1 to 26, most at risk first.

1. SkyWalking SQLICVE-2020-9483Apache · 34% likely

   CWE-89

2. Apache Superset < 4.0.2 - SQL InjectionCVE-2024-39887Apache Software Foundation · CVSS 4.3 · 4.7% likely

   CWE-89

3. SQL injection in JDBC Appender in Apache Log4j V1CVE-2022-23305Apache Software Foundation · CVSS 9.8 · 67% likely

   CWE-89

4. Apache Traffic Control: SQL Injection in Traffic Ops endpoint PUT deliveryservice_request_commentsCVE-2024-45387Apache Software Foundation · CVSS 9.9 · 66% likely

   CWE-89

5. **Resolved** Only when using H2/MySQL/TiDB as Apache SkyWalking storage, there is a SQL injection vulnerability in the wildcard query cases.CVE-2020-13921Apache · 33% likely

   CWE-89

6. Apache Submarine: SQL injection from unauthorized loginCVE-2023-37924Apache Software Foundation · 7.2% likely

   CWE-89

7. This vulnerability in Apache Hive JDBC driver 0.7.1 to 2.3.2 allows carefully crafted arguments to be used to bypass the argument escaping/cleanup that JDBC driver does in Prepare…CVE-2018-1282Apache Software Foundation · 5.5% likely

   CWE-89

8. SQL injection vulnerability in Apache Fineract before 1.3.0 allows attackers to execute arbitrary SQL commands via a query on a m_center data related table.CVE-2018-11801Apache · 5.2% likely

   CWE-89

9. SQL injection vulnerability in Apache Fineract before 1.3.0 allows attackers to execute arbitrary SQL commands via a query on the GroupSummaryCounts related table.CVE-2018-11800Apache · 5.2% likely

   CWE-89

10. Apache Fineract: SQL injection in runreports endpointCVE-2026-35152Apache Software Foundation · CVSS 8.8 · 3.3% likelycovered by CyberSIXT

    CWE-89

11. In Apache Fineract versions 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, Using a single quotation escape with two continuous SQL parameters can cause a SQL injecti…CVE-2018-1290Apache Software Foundation · 3.2% likely

    CWE-89

12. Kylin has some restful apis which will concatenate SQLs with the user input string, a user is likely to be able to run malicious database queries.CVE-2020-1937Apache · 3.1% likely

    CWE-89

13. SQL injection vulnerability in chart data APICVE-2022-27479Apache Software Foundation · 2.9% likely

    CWE-89

14. In Apache Fineract versions 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, the system exposes different REST end points to query domain specific entities with a Quer…CVE-2018-1289Apache Software Foundation · 2.5% likely

    CWE-89

15. In Apache Fineract 0.4.0-incubating, 0.5.0-incubating, and 0.6.0-incubating, an authenticated user with client/loan/center/staff/group read permissions is able to inject malicious…CVE-2017-5663Apache Software Foundation · 2.1% likely

    CWE-89

16. Within the 'getReportType' method in Apache Fineract 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, a hacker could inject SQL to read/update data for which he doesn'…CVE-2018-1292Apache Software Foundation · 2.0% likely

    CWE-89

17. Apache Fineract 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating exposes different REST end points to query domain specific entities with a Query Parameter 'orderBy' wh…CVE-2018-1291Apache Software Foundation · 2.0% likely

    CWE-89

18. Kylin concatenates and executes a Hive SQL in Hive CLI or beeline when building a new segment; some part of the HQL is from system configurations, while the configuration can be o…CVE-2020-13926Apache · 1.9% likely

    CWE-89

19. Possible SQL Injection when template processing is enabledCVE-2021-41971Apache Software Foundation · 1.8% likely

    CWE-89

20. Apache InLong: SQL injection in audit endpointCVE-2023-35088Apache Software Foundation · CVSS 9.8 · 1.6% likely

    CWE-89

21. Apache Log4cxx: SQL injection when using ODBC appenderCVE-2023-31038Apache Software Foundation · CVSS 8.8 · 1.6% likely

    CWE-89

22. Apache Fineract: SQL injection vulnerabilities in offices API endpointCVE-2024-32838Apache Software Foundation · CVSS 9.4 · 1.5% likely

    CWE-89

23. Apache Fineract: Under certain system configurations, the sqlSearch parameter for specific endpoints was vulnerable to SQL injection attacks, potentially allowing attackers to man…CVE-2024-23539Apache Software Foundation · CVSS 8.3 · 1.5% likely

    CWE-89

24. Apache VCL versions 2.1 through 2.5 do not properly validate form input when adding and removing VMs to and from hosts. The form data is then used in SQL statements. This allows f…CVE-2018-11774Apache · 1.4% likely

    CWE-89

25. Apache VCL versions 2.1 through 2.5 do not properly validate cookie input when determining what node (if any) was previously selected in the privilege tree. The cookie data is the…CVE-2018-11772Apache · 1.4% likely

    CWE-89

26. Apache Fineract: SQL injection vulnerabilityCVE-2023-25196Apache Software Foundation · 1.3% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.