https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 11:14:12 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-31355 EUVD-2026-31355 https://cve.radiocsirt.org/vuln/euvd-2026-31355 https://cve.radiocsirt.org/vuln/fkie_cve-2021-40842 <p>Proofpoint Insider Threat Management Server contains a SQL injection vulnerability in the Web Console. The vulnerability exists due to improper input validation on the database name parameter required in certain unauthenticated APIs. A malicious URL visited by anyone with network access to the server could be used to blindly execute arbitrary SQL statements on the backend database. Version 7.12.0 and all versions prior to 7.11.2 are affected.</p> <p>Proofpoint Insider Threat Management Server contains a SQL injection vulnerability in the Web Console. The vulnerability exists due to improper input validation on the database name parameter required in certain unauthenticated APIs. A malicious URL visited by anyone with network access to the server could be used to blindly execute arbitrary SQL statements on the backend database. Version 7.12.0 and all versions prior to 7.11.2 are affected.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-40842 https://cve.radiocsirt.org/vuln/ghsa-rwcq-6jm9-8m42 <p>Proofpoint Insider Threat Management Server contains a SQL injection vulnerability in the Web Console. The vulnerability exists due to improper input validation on the database name parameter required in certain unauthenticated APIs. A malicious URL visited by anyone with network access to the server could be used to blindly execute arbitrary SQL statements on the backend database. Version 7.12.0 and all versions prior to 7.11.2 are affected.</p> <p>Proofpoint Insider Threat Management Server contains a SQL injection vulnerability in the Web Console. The vulnerability exists due to improper input validation on the database name parameter required in certain unauthenticated APIs. A malicious URL visited by anyone with network access to the server could be used to blindly execute arbitrary SQL statements on the backend database. Version 7.12.0 and all versions prior to 7.11.2 are affected.</p> https://cve.radiocsirt.org/vuln/ghsa-rwcq-6jm9-8m42 https://cve.radiocsirt.org/vuln/gsd-2021-40842 gsd-2021-40842 https://cve.radiocsirt.org/vuln/gsd-2021-40842