CWE-564
15 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 15Published CVEs15 of them scored
- 12Last 12 monthspublished in the last year
- 0Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-111390
Erupt through 2.3.0 HQL Injection via linkTreeVal in Data Table API
erupts · erupt
Medium6.0 - CVE-2026-73796
HPE NonStop TSQLEXE - Memory Corruption vulnerability
Hewlett Packard Enterprise · HPE NonStop TSQLEXE
Medium4.4 - CVE-2026-76451
Cisco Identity Services Engine Certificate Management SQL Injection Vulnerability
Cisco · Cisco Identity Services Engine Software
Medium4.9 - CVE-2026-76450
Cisco Identity Services Engine SQL Injection Vulnerability
Cisco · Cisco Identity Services Engine Software
Medium4.9 - CVE-2026-13337
CWE-564: SQL Injection: Hibernate vulnerability exists that could allow the injection of a malicious HQL query in the NetBotz database when a malicious user is…
Schneider Electric · NetBotz 5 - 750/755
Medium5.1 - CVE-2024-58352
Landray OA Unauthenticated HQL Injection via wechatLoginHelper.do
Shenzhen Landray Software Co., Ltd. · Landry Office Automation (OA)
High8.7 - CVE-2026-40871
mailcow: dockerized vulnerable to Second Order SQL Injection in quarantine category via API
mailcow · mailcow-dockerized
High7.2 - CVE-2026-4594
erupts erupt EruptJpaUtils.java geneEruptHqlOrderBy sql injection
erupts · erupt
Medium6.9 - CVE-2026-4593
erupts erupt MCP Tool EruptDataQuery.java EruptDataQuery sql injection
erupts · erupt
Medium5.3 - CVE-2026-23959
CoreShop Vulnerable to SQL Injection via Admin customer-company-modifier
coreshop · CoreShop
Medium6.9