Feed live

mysql CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

347,348

All time

Critical · Active

12,003

CVSS ≥ 9.0

New · 14 days

2,237

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1–30 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-56704	medium	5.3/10	Adminer before 5.4.3 Cross-Site Scripting via MySQL Version String	Aug 25, 2026 today
CVE-2026-18617	high	8.8/10	Data-science-pipelines-operator: dspo: mysql dsn parameter injection via customextraparams enables local infile file exfiltration from operator pod	Aug 10, 2026 14d ago
CVE-2026-72572	high	7.5/10	o1lab xmysql - Unauthenticated Path Traversal via name Query Parameter	Aug 10, 2026 15d ago
CVE-2026-62845	medium	4.7/10	Kamaji: SQL injection via unescaped datastore identifiers in PostgreSQL/MySQL drivers	Jul 30, 2026 25d ago
CVE-2026-50147	high	7.6/10	Metabase: Arbitrary File Read via MySQL Connection Property Injection	Jul 15, 2026 1mo ago
CVE-2026-55170	low	2.1/10	OpenFGA MySQL backend: case-insensitive collation on identifier columns causes incorrect authorization decisions	Jul 9, 2026 1mo ago
CVE-2026-44913	medium	5.2/10	Apache NiFi: Improper Escaping of Table Names in CaptureChangeMySQL	Jun 22, 2026 2mo ago
CVE-2026-54419	critical	9.8/10	PIAF-HMS multiple unauthenticated SQL injection vulnerabilities via mysql_query	Jun 18, 2026 2mo ago
CVE-2026-44172	medium	6.9/10	MariaDB: mysql_real_escape_string() incorrectly handled big5	Jun 12, 2026 2mo ago
CVE-2026-11529	medium	5.3/10	designcomputer mysql-mcp-server mysql URI server.py read_resource sql injection	Jun 8, 2026 2mo ago
CVE-2026-48188	critical	9.1/10	SQL Injection via MySQL Quote Method	Jun 1, 2026 2mo ago
CVE-2026-44521	high	8.8/10	elFinder: SQL Injection MySQL Volume Driver (elFinderVolumeMySQL)	May 27, 2026 3mo ago
CVE-2026-48242	critical	9.2/10	Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in import_mdb.php	May 21, 2026 3mo ago
CVE-2026-48241	critical	9.2/10	Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in loader.php	May 21, 2026 3mo ago
CVE-2026-44047	high	8.8/10	SQL injection in MySQL CNID backend	May 21, 2026 3mo ago
CVE-2024-47091	medium	5.2/10	Privilege escalation via mk_mysql agent plugin on Windows	May 13, 2026 3mo ago
CVE-2026-8276	medium	6.3/10	bettercap MySQL Server mysql_server.go integer coercion	May 11, 2026 3mo ago
CVE-2026-42237	medium	5.3/10	n8n: SQL Injection in Snowflake and MySQL Nodes	May 4, 2026 3mo ago
CVE-2026-41229	critical	9.1/10	Froxlor has a PHP Code Injection via Unescaped Single Quotes in userdata.inc.php Generation (MysqlServer API)	Apr 23, 2026 4mo ago
CVE-2026-30778	—	—	Apache SkyWalking: The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL.	Apr 15, 2026 4mo ago
CVE-2026-33468	high	8.1/10	Kysely has a MySQL SQL Injection via Insufficient Backslash Escaping in `sql.lit(string)` usage or similar methods that append string literal values into the compiled SQL strings	Mar 26, 2026 5mo ago
CVE-2026-33442	high	8.1/10	Kysely has a MySQL SQL Injection via Backslash Escape Bypass in non-type-safe usage of JSON path keys.	Mar 26, 2026 5mo ago
CVE-2026-30849	critical	9.3/10	MantisBT SOAP API has an authentication bypass vulnerability on MySQL	Mar 23, 2026 5mo ago
CVE-2026-32949	high	8.7/10	SQLBot: SSRF to Arbitrary File Read (AFR) via Rogue MySQL	Mar 20, 2026 5mo ago
CVE-2026-27005	high	8.8/10	Chartbrew: SQL injection in date-type variable handling (applyMysqlOrPostgresVariables)	Mar 6, 2026 5mo ago
CVE-2025-15002	medium	6.9/10	SeaCMS mysqli.class.php sql injection	Dec 21, 2025 8mo ago
CVE-2025-67509	high	8.2/10	MySQLSelectTool Read-Only Bypass via SELECT INTO OUTFILE Allows Arbitrary File Write	Dec 10, 2025 8mo ago
CVE-2025-67510	critical	9.4/10	MySQLWriteTool allows arbitrary/destructive SQL when exposed to untrusted prompts (agent “footgun”)	Dec 10, 2025 8mo ago
CVE-2025-14201	medium	4.8/10	alokjaiswal Hotel-Management-services-using-MYSQL-and-php dishsub.php cross site scripting	Dec 7, 2025 8mo ago
CVE-2025-14200	medium	5.1/10	alokjaiswal Hotel-Management-services-using-MYSQL-and-php Request Pending usersub.php cross site scripting	Dec 7, 2025 8mo ago