CWE-564

CVEs per yearBy the year they were published

1. 20253
2. 202612

Newest CVEs

• CVE-2026-111390

  Erupt through 2.3.0 HQL Injection via linkTreeVal in Data Table API

  erupts · erupt

  Medium6.0
• CVE-2026-73796

  HPE NonStop TSQLEXE - Memory Corruption vulnerability

  Hewlett Packard Enterprise · HPE NonStop TSQLEXE

  Medium4.4
• CVE-2026-76451

  Cisco Identity Services Engine Certificate Management SQL Injection Vulnerability

  Cisco · Cisco Identity Services Engine Software

  Medium4.9
• CVE-2026-76450

  Cisco Identity Services Engine SQL Injection Vulnerability

  Cisco · Cisco Identity Services Engine Software

  Medium4.9
• CVE-2026-13337

  CWE-564: SQL Injection: Hibernate vulnerability exists that could allow the injection of a malicious HQL query in the NetBotz database when a malicious user is…

  Schneider Electric · NetBotz 5 - 750/755

  Medium5.1
• CVE-2024-58352

  Landray OA Unauthenticated HQL Injection via wechatLoginHelper.do

  Shenzhen Landray Software Co., Ltd. · Landry Office Automation (OA)

  High8.7
• CVE-2026-40871

  mailcow: dockerized vulnerable to Second Order SQL Injection in quarantine category via API

  mailcow · mailcow-dockerized

  High7.2
• CVE-2026-4594

  erupts erupt EruptJpaUtils.java geneEruptHqlOrderBy sql injection

  erupts · erupt

  Medium6.9
• CVE-2026-4593

  erupts erupt MCP Tool EruptDataQuery.java EruptDataQuery sql injection

  erupts · erupt

  Medium5.3
• CVE-2026-23959

  CoreShop Vulnerable to SQL Injection via Admin customer-company-modifier

  coreshop · CoreShop

  Medium6.9

Vendors it comes up for most

1. erupts3
2. Cisco2
3. coreshop2
4. Apache Software Foundation1
5. Hewlett Packard Enterprise1
6. Schneider Electric1
7. Shenzhen Landray Software Co., Ltd.1
8. imithemes1
9. mailcow1
10. opentext1