CVE ID :CVE-2026-38581 Published : June 11, 2026, 2:16 p.m. | 2 hours, 48 minutes ago Description :SQL Injection vulnerability in damasac thaipalliative_lte through version 3.0 allows remote attackers to execute arbitrary SQL commands via the idFormMain parameter to /substudy/ezform.php (line...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-38581 - Damasac thaipalliative_lte SQL Injection

VERWANDTEARTIKEL

CVE-2026-45176 - Idira Endpoint Privilege Manager Agent: Local Privilege Escalation via Internal Communication or File Operation Manipulation

CVE-2026-45177 - Idira Secrets Manager SaaS Edge: Authentication Bypass of an internal validation mechanism

CVE-2026-48547 - KanaDojo < 0.1.18 Command Injection via patchNotesData.json in release.yml

CVE-2026-45178 - Idira Secrets Manager Self-Hosted: Improper Access Control in Internal Cluster Endpoints

CVE-2026-48546 - KanaDojo < 0.1.18 Sandbox Escape RCE via messages.cjs

CVE-2026-49261 - MariaDB server has unsafe parameter handling in `wsrep_notify_cmd`