SQL Injection

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. SQL Injection in nocodbCVE-2023-43794nocodb · CVSS 6.5 · 0.9% likely

   CWE-89

2. NocoDB SQL Injection vulnerabilityCVE-2023-50718nocodb · CVSS 6.5 · 0.7% likely

   CWE-89

3. NocoDB: SQL Injection via Column Title in Bulk GroupByCVE-2026-47384nocodb · CVSS 5.3 · 0.4% likely

   CWE-89

4. NocoDB: Postgres SQL Injection in Formula `ARRAYSORT`CVE-2026-47375nocodb · CVSS 6 · 0.4% likely

   CWE-89

5. NocoDB: SQL Injection via DATEADD FormulaCVE-2026-28399nocodb · CVSS 6.2 · 0.4% likely

   CWE-89

6. NocoDB before 2026.06.2 SQL Injection via User Email in Base User QueryCVE-2026-126291nocodb · CVSS 8.8 · 0.3% likely

   CWE-89

7. NocoDB before 2026.08.0 SQL Injection via Legacy where Query FilterCVE-2026-126285nocodb · CVSS 7.7 · 0.3% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.