CWE-943 · weakness in SQL Injection
Improper Neutralization of Special Elements in Data Query Logic
139 CVEs
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- check available
- 1
Every one of the 139 is a mark on the map. Named now: 27 to 52, most at risk first.
- Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query
- Rocket.Chat: Pre-Auth NoSQL Injection in OAuth2 Token Endpoint leading to Arbitrary User ATO
- Parse Server has a NoSQL injection via token type in password reset and email verification endpoints
- n8n before 1.123.69 NoSQL Injection via MongoDB Node
- NoSQL Injection via WebSocket id Parameter in MongoDB Adapter
- Stored SPL Injection through Deployment Server Broker Registration in Splunk Enterprise
- Flowise: Cypher Injection in GraphCypherQAChain
- Trudesk through 1.2.11 MongoDB $where Injection via tickets search API
- A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. If exploited this could allow an authenticated attacker to inject code towards persistent da…
- Rocket.Chat: Pre-Auth NoSQL Injection in CAS Login Handler leading to Arbitrary CAS/SAML User Session Hijack
- Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in Upsert Condition Field
- Cross-tenant database retargeting via dot/NUL injection in namespace strings in the PHP Driver
- GridFS data deletion via query-operator injection in file IDs in the MongoDB Go Driver
- GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C# Driver
- GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Rust Driver
- Flowise before 3.1.4 NoSQL Injection via sessionId
- Apache Airflow Google provider: Google Drive query injection via unescaped file and folder names
- Improper Neutralization of Special Elements in Data Query Logic in Kibana Leading to Information Disclosure
- Institution scope bypass vulnerability in custom reports
- LangChain: MongoDBChatMessageHistory query injection can allow cross-session access
- GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C++ Driver
- GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Java Driver
- Trudesk through 1.2.11 Username Enumeration via Regex Injection in /api/v1/login
- Unauthorized document disclosure and deletion via query-operator injection in explicit equality filters in MongoDB integration for Laravel
- IBM Db2 Denial of Service
- Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.