CVE-2026-94451 · Brief

CVEs like CVE-2026-94451

The records whose text reads closest to CVE-2026-94451, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2020-149610.606
   Concrete5 before 8.5.3 does not constrain the sort direction to a valid asc or desc value.

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

2. CVE-2022-483290.609
   MISP before 2.4.166 unsafely allows users to use the order parameter, related to app/Model/Attribute.php…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

3. CVE-2019-155670.592
   OpenForis Arena before 2019-05-07 allows SQL injection in the sorting feature.

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

4. CVE-2026-648770.589
   An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive data…

   Same weakness class, CWE-20 (improper input validation).

5. CVE-2023-413640.620
   In tine through 2023.01.14.325, the sort parameter of the /index.php endpoint allows SQL Injection.

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

6. CVE-2026-877440.700
   Io.quarkus:quarkus-hibernate-orm-rest-data-panache: missing authorization in quarkus rest data panache via dropped…

   Same vendor or product family, Red.

7. CVE-2007-47420.593
   Claroline before 1.8.6 allows remote authenticated administrators to obtain sensitive information via an invalid value…

   Same weakness class, CWE-20 (improper input validation).

8. CVE-2016-15620.582
   The REST API in the DTE Energy Insight application before 1.7.8 for Android allows remote authenticated users to obtain…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

9. CVE-2026-795690.583
   Movie_Recommend v1.0.0 was discovered to contain a SQL injection vulnerability in the sort parameter at /loadingmore.

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

10. CVE-2018-107320.586
    The REST API in Dataiku DSS before 4.2.3 allows remote attackers to obtain sensitive information (i.e., determine if a…

    Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,235 records. Fetched 2026-10-30.