CWE-943 · SQL Injection
Improper Neutralization of Special Elements in Data Query Logic
139CVEs
0exploited
1with a public check
0likely (EPSS 10%+)
SortMost likely exploited
139 CVEs with CWE-943 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-120201CheckJpom 2.10.0-2.11.12 - Authentication Bypassdromara · Jpom · CVSS 9.8 · 2026-10-31 | 9.8 | 2.1% | 2026-10-31 |
| CVE-2017-12904Improper Neutralization of Special Elements used in an OS Command in bookmarking function of Newsbeuter versions 0.7 through 2.9 allows remote attackers to perform user-assisted c…Newsbeuter · Newsbeuter · 2017-08-23 | – | 6.4% | 2017-08-23 |
| CVE-2026-57193Asterisk: LDAP Filter Injection in res_config_ldap via SIP Username (Unauthenticated Information Disclosure)asterisk · asterisk · CVSS 6.9 · 2026-10-26 | 6.9 | 2.0% | 2026-10-26 |
| CVE-2018-7829An Improper Neutralization of Special Elements in Query vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera which allows an attacker t…Schneider-Electric · Pelco Sarix Enhanced and Spectra Enhanced, Pelco Sarix Enhanced 1st generation… · 2019-05-22 | – | 1.7% | 2019-05-22 |
| CVE-2022-36084cruddl vulnerable to AQL injection through flexSearchAEB-labs · cruddl · CVSS 9.9 · 2022-09-08 | 9.9 | 1.5% | 2022-09-08 |
| CVE-2021-1349Cisco SD-WAN vManage Cypher Query Language Injection VulnerabilityCisco · Cisco SD-WAN vManage · CVSS 6.5 · 2021-01-20 | 6.5 | 1.4% | 2021-01-20 |
| CVE-2026-62906Microsoft Discovery Studio Information Disclosure VulnerabilityMicrosoft · Microsoft Discovery Studio · CVSS 7.4 · 2026-09-03 | 7.4 | 0.9% | 2026-09-03 |
| CVE-2020-5257Sort order SQL injection in Administratethoughtbot · administrate · CVSS 7.7 · 2020-03-13 | 7.7 | 0.9% | 2020-03-13 |
| CVE-2021-1481Cisco SD-WAN vManage Cypher Query Language Injection VulnerabilityCisco · Cisco Catalyst SD-WAN Manager · CVSS 4.3 · 2024-11-15 | 4.3 | 0.8% | 2024-11-15 |
| CVE-2021-34712Cisco SD-WAN vManage Software Cypher Query Language Injection VulnerabilityCisco · Cisco SD-WAN vManage · CVSS 5.4 · 2021-09-23 | 5.4 | 0.7% | 2021-09-23 |
| CVE-2026-32248Parse Server: Account takeover via operator injection in authentication data identifierparse-community · parse-server · CVSS 9.3 · 2026-03-12 | 9.3 | 0.7% | 2026-03-12 |
| CVE-2026-10698Table scope bypass vulnerability in custom reportsProgress · MOVEit Transfer · CVSS 7.2 · 2026-07-08 | 7.2 | 0.6% | 2026-07-08 |
| CVE-2026-40351FastGPT: NoSQL Injection in loginByPassword leads to Authentication Bypasslabring · FastGPT · CVSS 9.8 · 2026-04-17 | 9.8 | 0.6% | 2026-04-17 |
| CVE-2024-28192NoSQL Injection Leading to Authentication Bypass in your_spotifyYooooomi · your_spotify · CVSS 5.3 · 2024-03-13 | 5.3 | 0.6% | 2024-03-13 |
| CVE-2026-22558An Authenticated NoSQL Injection vulnerability found in UniFi Network Application could allow a malicious actor with authenticated access to the network to escalate privileges.Ubiquiti Inc · UniFi Network Application · CVSS 7.7 · 2026-03-19 | 7.7 | 0.6% | 2026-03-19 |
| CVE-2026-25591New API has an SQL LIKE Wildcard Injection DoS via Token SearchQuantumNous · new-api · CVSS 7.1 · 2026-02-24 | 7.1 | 0.6% | 2026-02-24 |
| CVE-2026-125120Mongoose: sanitizeFilter not applied on countDocumentsAutomattic · mongoose · CVSS 9.8 · 2026-11-09 | 9.8 | 0.6% | 2026-11-09 |
| CVE-2024-35136IBM Db2 denial of serviceIBM · Db2 for Linux, UNIX and Windows · CVSS 5.3 · 2024-08-14 | 5.3 | 0.6% | 2024-08-14 |
| CVE-2024-31882IBM Db2 denial of serviceIBM · Db2 for Linux, UNIX and Windows · CVSS 5.3 · 2024-08-14 | 5.3 | 0.6% | 2024-08-14 |
| CVE-2025-24787Parameter injection in DB connection URIs leading to local file inclusion in WhoDBclidey · whodb · CVSS 8.6 · 2025-02-06 | 8.6 | 0.6% | 2025-02-06 |
| CVE-2026-46591Apache Camel: Camel-Neo4j: JSON property names from the CamelNeo4jMatchProperties header are interpolated into the Cypher WHERE clause without validation, allowing Cypher injectio…Apache Software Foundation · Apache Camel · CVSS 8.2 · 2026-07-06 | 8.2 | 0.5% | 2026-07-06 |
| CVE-2026-125119Mongoose: Connection-level sanitizeFilter not appliedAutomattic · mongoose · CVSS 7.5 · 2026-11-09 | 7.5 | 0.5% | 2026-11-09 |
| CVE-2026-20284Cisco Identity Search Engine SXP REST API SQL Injection VulnerabilityCisco · Cisco Identity Services Engine Software · CVSS 9.1 · 2026-09-16 | 9.1 | 0.5% | 2026-09-16 |
| CVE-2026-93760NoSQL injection of JavaScript-executing query operators via unsafe-by-default operator guardMongoDB Inc. · Mongoid · CVSS 8.2 · 2026-09-18 | 8.2 | 0.5% | 2026-09-18 |
| CVE-2026-55253LangChain MongoDB: NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposurelangchain-ai · langchain-mongodb · CVSS 7.7 · 2026-09-14 | 7.7 | 0.5% | 2026-09-14 |
| CVE-2026-40141High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote AccessBeyondTrust · Remote Support · CVSS 8.5 · 2026-07-06 | 8.5 | 0.5% | 2026-07-06 |
| CVE-2026-44840Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Querydgraph-io · dgraph · CVSS 7.5 · 2026-07-08 | 7.5 | 0.5% | 2026-07-08 |
| CVE-2026-45689Rocket.Chat: Pre-Auth NoSQL Injection in OAuth2 Token Endpoint leading to Arbitrary User ATORocketChat · Rocket.Chat · CVSS 9.1 · 2026-06-24 | 9.1 | 0.5% | 2026-06-24 |
| CVE-2026-30941Parse Server has a NoSQL injection via token type in password reset and email verification endpointsparse-community · parse-server · CVSS 8.7 · 2026-03-10 | 8.7 | 0.5% | 2026-03-10 |
| CVE-2026-77070n8n before 1.123.69 NoSQL Injection via MongoDB Noden8n-io · n8n · CVSS 7.1 · 2026-08-20 | 7.1 | 0.5% | 2026-08-20 |
| CVE-2026-29793NoSQL Injection via WebSocket id Parameter in MongoDB Adapter@feathersjs · mongodb · CVSS 9.3 · 2026-03-10 | 9.3 | 0.5% | 2026-03-10 |
| CVE-2026-76316Stored SPL Injection through Deployment Server Broker Registration in Splunk EnterpriseSplunk · Splunk Enterprise · CVSS 8.8 · 2026-08-19 | 8.8 | 0.5% | 2026-08-19 |
| CVE-2026-41274Flowise: Cypher Injection in GraphCypherQAChainFlowiseAI · Flowise · CVSS 9.3 · 2026-04-23 | 9.3 | 0.5% | 2026-04-23 |
| CVE-2026-114396Trudesk through 1.2.11 MongoDB $where Injection via tickets search APIpolonel · trudesk · CVSS 7.1 · 2026-10-21 | 7.1 | 0.5% | 2026-10-21 |
| CVE-2024-4872A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. If exploited this could allow an authenticated attacker to inject code towards persistent da…Hitachi Energy · MicroSCADA X SYS600 · CVSS 9.9 · 2024-08-27 | 9.9 | 0.5% | 2024-08-27 |
| CVE-2026-45688Rocket.Chat: Pre-Auth NoSQL Injection in CAS Login Handler leading to Arbitrary CAS/SAML User Session HijackRocketChat · Rocket.Chat · CVSS 9.1 · 2026-06-24 | 9.1 | 0.5% | 2026-06-24 |
| CVE-2026-41327Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in Upsert Condition Fielddgraph-io · dgraph · CVSS 9.1 · 2026-04-24 | 9.1 | 0.5% | 2026-04-24 |
| CVE-2026-81525Cross-tenant database retargeting via dot/NUL injection in namespace strings in the PHP DriverMongoDB · PHP Library · CVSS 8.1 · 2026-08-27 | 8.1 | 0.5% | 2026-08-27 |
| CVE-2026-88031GridFS data deletion via query-operator injection in file IDs in the MongoDB Go DriverMongoDB · Go Driver · CVSS 8.1 · 2026-09-10 | 8.1 | 0.5% | 2026-09-10 |
| CVE-2026-88025GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C# DriverMongoDB · C# Driver · CVSS 8.3 · 2026-09-10 | 8.3 | 0.5% | 2026-09-10 |
| CVE-2026-88024GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Rust DriverMongoDB · Rust Driver · CVSS 8.3 · 2026-09-10 | 8.3 | 0.5% | 2026-09-10 |
| CVE-2026-91937Flowise before 3.1.4 NoSQL Injection via sessionIdFlowiseAI · Flowise · CVSS 7.5 · 2026-09-15 | 7.5 | 0.5% | 2026-09-15 |
| CVE-2026-81914Apache Airflow Google provider: Google Drive query injection via unescaped file and folder namesApache Software Foundation · Apache Airflow Google provider · CVSS 4.3 · 2026-09-29 | 4.3 | 0.5% | 2026-09-29 |
| CVE-2026-63138Improper Neutralization of Special Elements in Data Query Logic in Kibana Leading to Information DisclosureElastic · Kibana · CVSS 6.5 · 2026-09-01 | 6.5 | 0.5% | 2026-09-01 |
| CVE-2026-8649Institution scope bypass vulnerability in custom reportsProgress · MOVEit Transfer · CVSS 6.4 · 2026-07-08 | 6.4 | 0.5% | 2026-07-08 |
| CVE-2026-106119LangChain: MongoDBChatMessageHistory query injection can allow cross-session accesslangchain-ai · langchainjs · CVSS 6 · 2026-10-06 | 6.0 | 0.5% | 2026-10-06 |
| CVE-2026-88034GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C++ DriverMongoDB · C++ Driver · CVSS 8.3 · 2026-09-10 | 8.3 | 0.5% | 2026-09-10 |
| CVE-2026-88033GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Java DriverMongoDB · Java Driver · CVSS 8.3 · 2026-09-10 | 8.3 | 0.5% | 2026-09-10 |
| CVE-2026-114401Trudesk through 1.2.11 Username Enumeration via Regex Injection in /api/v1/loginpolonel · trudesk · CVSS 5.3 · 2026-10-21 | 5.3 | 0.4% | 2026-10-21 |
| CVE-2026-88022Unauthorized document disclosure and deletion via query-operator injection in explicit equality filters in MongoDB integration for LaravelMongoDB · Laravel MongoDB (PHP) · CVSS 7.7 · 2026-09-10 | 7.7 | 0.4% | 2026-09-10 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.