SQL Injection

Every one of the 13 is a mark on the map. Named now: 1 to 13, most at risk first.

1. SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management Engine (CFME) 5.1 and ManageIQ Enterprise Virtualization Manager 5.0 and earlier allo…CVE-2013-2050Redhat · 16% likely

   CWE-89

2. SQL injection vulnerability in the getStringParameterSQL method in main/java/org/dashbuilder/dataprovider/sql/dialect/DefaultDialect.java in Dashbuilder before 0.6.0.Beta1 allows…CVE-2016-4999Redhat · 3.7% likely

   CWE-89

3. A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-in…CVE-2019-10141RedHat · CVSS 8.3 · 2.5% likely

   CWE-89

4. SQL injection vulnerability in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allows remote attackers to execute arbitrary SQL commands via vectors related to the…CVE-2013-4461Redhat · 1.9% likely

   CWE-89

5. Postgresql: extension script @substitutions@ within quoting allow sql injectionCVE-2023-39417Red Hat · CVSS 7.5 · 1.7% likelycovered by CyberSIXT

   CWE-89

6. SQL injection vulnerability in the saved_report_delete action in the ReportController in Red Hat CloudForms Management Engine (CFME) before 5.2.3.2 allows remote authenticated use…CVE-2014-0137Redhat · 1.4% likely

   CWE-89

7. SQL injection vulnerability in Red Hat CloudForms 3.1 Management Engine (CFME) 5.3 allows remote authenticated users to execute arbitrary SQL commands via a crafted REST API reque…CVE-2014-7814Redhat · 1.4% likely

   CWE-89

8. Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injectionCVE-2026-0603Red Hat · CVSS 8.3 · 1.0% likely

   CWE-89

9. A vulnerability was found in the search-api container in Red Hat Advanced Cluster Management for Kubernetes when a query in the search filter gets parsed by the backend. This flaw…CVE-2022-2238Redhat · 0.9% likely

   CWE-89

10. Rhdh: graphql injection leading to platform-wide denial of service (dos) in rh developer hub orchestrator pluginCVE-2026-3118Red Hat · CVSS 6.5 · 0.6% likely

    CWE-89

11. Rubygem-katello: katello: denial of service and potential information disclosure via sql injectionCVE-2026-4324Red Hat · CVSS 5.4 · 0.3% likely

    CWE-89

12. Maestro: sql identifier injection via properties.* search filter and orderby fieldCVE-2026-71298Red Hat · CVSS 6.4 · 0.3% likely

    CWE-89

13. Rubygem-katello: sql injection in registry proxy via labelsCVE-2026-56097Red Hat · CVSS 6.5 · 0.3% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.