Structured Query Language is a standardized programming language for defining, querying, and controlling data in relational databases, which enterprises use as a common interface for transactional systems, analytics platforms, data governance, and access control across diverse data and application environments.
December 1, 2025
nopCommerce's session cookie flaw allows reuse after logout, enabling unauthorized access until patched in version 4.90.3.
November 26, 2025
Kiwire Captive Portal vulnerabilities include SQL injection, open redirection, and XSS; vendor released fixes are available.
November 20, 2025
CISA will no longer update advisories for Siemens vulnerabilities. Two critical vulnerabilities in COMOS were identified, allowing for potential code execution and data infiltration. Siemens recommends updating to version 10.4.5 or later and provides mitigations to reduce risks of exploitation.
November 18, 2025
SynchroWeb's Kiwire Captive Portal has three web vulnerabilities identified, prompting users to update their systems for security.
November 13, 2025
CISA will cease updates for Siemens ICS security advisories after January 10, 2023. Siemens reports vulnerabilities in COMOS software versions prior to 10.4.5, with risk of code execution and data infiltration. Users are advised to upgrade software and follow additional security measures to mitigate risks.
November 11, 2025
An attacker could exploit Workhorse Software flaws to access sensitive municipal data, including PII and financial records.