CVE-2026-111223 | High | 7.2 | 2026-10-15 | Netgate pfSense CE 2.7.0 through 2.9.0 contains a configuration injection vulnerability that allows authenticated users with IPsec Mobile privileges to execute… |
CVE-2026-55453 | Low | 3.3 | 2026-10-15 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, the backend/ipp.c quote_string() function… |
CVE-2026-108116 | High | 7.5 | 2026-10-15 | In Progress Kendo UI for jQuery prior to v2026.3.1015, specially crafted filter values in the PivotGrid XMLA transport could alter MDX predicates or inject XML… |
CVE-2026-76182 | | | 2026-10-15 | In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `index?p=$path`, where `$path` is the r… |
CVE-2026-81534 | High | 8.8 | 2026-10-15 | The Email Customizer for WooCommerce (Pro) plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.9.5. This is due to… |
CVE-2026-110670 | High | 7.3 | 2026-10-14 | A vulnerability was found in cemtan sar2html 4.0.0. The affected element is the function updateDb of the file sar2html.py of the component Archive Processing… |
CVE-2026-110668 | High | 7.3 | 2026-10-14 | A weakness has been identified in cemtan sar2html 4.0.0. Affected by this issue is the function index of the file sar2html.py. This manipulation of the argumen… |
CVE-2026-97315 | Medium | 5.4 | 2026-10-14 | The Responsive Blocks WordPress plugin before 2.3.0 does not sanitise or escape some of the values submitted with its Form block before adding them to the HTML… |
CVE-2026-88094 | High | 8.1 | 2026-10-13 | Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to el… |
CVE-2026-109620 | High | 7.3 | 2026-10-13 | A vulnerability has been found in SourceCodester Online Reviewer System 1.0. Affected by this vulnerability is the function PDO::prepare of the file login/inde… |
CVE-2026-109607 | High | 7.3 | 2026-10-13 | A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/admin/query/loginExe.php of the componen… |
CVE-2026-109606 | High | 7.3 | 2026-10-13 | A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the function Action::save_user of the file admin/admin_class.php… |
CVE-2026-109523 | High | 7.3 | 2026-10-13 | A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this vulnerability is an… |
CVE-2026-109522 | High | 7.3 | 2026-10-13 | A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected is an unknown function… |
CVE-2026-109521 | High | 7.3 | 2026-10-13 | A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown function… |
CVE-2026-109961 | High | 8.5 | 2026-10-13 | Froxlor 0.10.0 before 2.3.14 contains a newline injection vulnerability that allows authenticated customers to inject arbitrary entries into the root-owned NSS… |
CVE-2026-109409 | Medium | 5.3 | 2026-10-13 | A flaw has been found in HBAI-Ltd Toonflow-app up to 1.1.8. The affected element is the function child_process.exec of the file src/routes/setting/fileManageme… |
CVE-2026-109115 | High | 7.3 | 2026-10-13 | A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This issue affects some unknown proces… |
CVE-2026-108970 | High | 7.3 | 2026-10-13 | A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This affects the function MySQLDB::add… |
CVE-2026-108968 | High | 7.3 | 2026-10-13 | A weakness has been identified in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/staff/sales_h… |
CVE-2026-108967 | High | 7.3 | 2026-10-13 | A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. Impacted is an unknown function of the file /opils/staff/edit_credit.ph… |
CVE-2026-108966 | High | 7.3 | 2026-10-13 | A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/product… |
CVE-2026-108965 | High | 7.3 | 2026-10-13 | A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/edit_quanti… |
CVE-2026-108964 | High | 7.3 | 2026-10-13 | A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing… |
CVE-2026-108962 | Medium | 6.3 | 2026-10-13 | A vulnerability has been found in storyicon comfyui_segment_anything up to ab6395596399d5048639cdab7e44ec9fae857a93. Affected by this issue is the function SLC… |
CVE-2026-108961 | Medium | 6.3 | 2026-10-13 | A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the function NormalizeImage.__init__ of the file paddlex/inference… |
CVE-2026-108959 | Medium | 6.3 | 2026-10-13 | A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /addtransacdetail.php… |
CVE-2026-108957 | Medium | 6.3 | 2026-10-13 | A security flaw has been discovered in TinyLLaVA TinyLLaVA_Factory up to 1abc6ac5e76a68d0fd087a071b56da968e69ca9b. The impacted element is the function _load_t… |
CVE-2026-96893 | High | 7.3 | 2026-10-13 | GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain cond… |
CVE-2026-108956 | High | 7.3 | 2026-10-13 | A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/adm… |
CVE-2026-108945 | Medium | 5.3 | 2026-10-13 | A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2. Affected by this issue is the function eval of the file ultral… |
CVE-2026-108944 | Medium | 4.8 | 2026-10-13 | A security vulnerability has been detected in repository RAE up to a4d18c4db766419cbe7cb8c02cd9f7ceb0ec9041. Affected by this vulnerability is the function get… |
CVE-2026-108943 | Medium | 5.3 | 2026-10-13 | A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokenizer.from_pretrained of the file lightx2v/models/runners/cosm… |
CVE-2026-108941 | Medium | 4.8 | 2026-10-13 | A vulnerability was identified in Linketic CityGaussian up to 2.0. This affects the function parse_cfg_args of the file internal/utils/common.py of the compone… |
CVE-2026-108929 | Critical | 9.9 | 2026-10-12 | A flaw has been found in Netcore NR268 1.7.121109. The affected element is the function execvp of the file /router/DDNSset.cgi of the component DDNS. Executing… |
CVE-2026-108928 | Medium | 6.3 | 2026-10-12 | A security vulnerability has been detected in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the file /admin/sum.php… |
CVE-2026-108927 | Medium | 6.3 | 2026-10-12 | A weakness has been identified in itsourcecode Baptism Information Management System 1.0. This vulnerability affects unknown code of the file pbaptism.php. Thi… |
CVE-2026-108926 | Medium | 6.3 | 2026-10-12 | A security flaw has been discovered in itsourcecode Baptism Information Management System 1.0. This affects an unknown part of the file ebaptism.php. The manip… |
CVE-2026-108918 | Critical | 10.0 | 2026-10-12 | A vulnerability was identified in Edimax BR-6208AC 1.32. Impacted is an unknown function of the file /goform/formWlanMP. The manipulation of the argument readE… |
CVE-2026-108917 | Critical | 10.0 | 2026-10-12 | A vulnerability was determined in Edimax BR-6208AC 1.32. This issue affects some unknown processing of the file /goform/formAutoFWupgrade. Executing a manipula… |
CVE-2026-108916 | High | 8.3 | 2026-10-12 | A vulnerability was found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the file /goform/formAccept. Performing a manipulation of the ar… |
CVE-2026-109275 | Medium | 4.8 | 2026-10-12 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a code injection vulnerability in the MVG decoder when a PostScript renderer is used. Attackers c… |
CVE-2026-108900 | High | 7.3 | 2026-10-12 | A vulnerability has been found in Exponent CMS up to 3.0.2patch2. Affected is the function userLogin of the file xmlrpc.php of the component XML-RPC. Such mani… |
CVE-2026-108829 | Medium | 4.7 | 2026-10-12 | A security flaw has been discovered in Zen Cart up to 2.2.2. Affected by this issue is some unknown functionality of the file admin/modules.php of the componen… |
CVE-2026-108828 | Medium | 4.1 | 2026-10-12 | A vulnerability was identified in Zen Cart 2.2.2. Affected by this vulnerability is the function eval of the file admin/configuration.php of the component Admi… |
CVE-2026-108827 | Medium | 4.1 | 2026-10-12 | A vulnerability was determined in Zen Cart up to 2.2.2. Affected is the function zen_call_function of the file admin/includes/functions/general.php of the comp… |
CVE-2026-108826 | High | 7.3 | 2026-10-12 | A vulnerability was found in Zen Cart up to 2.2.2. This impacts the function zen_db_perform in the library includes/modules/payment/paypaldp.php of the compone… |
CVE-2026-108824 | Medium | 6.3 | 2026-10-12 | A flaw has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file io/dataease/engine/utils/Utils.java. This… |
CVE-2026-108821 | Medium | 6.3 | 2026-10-12 | A security vulnerability has been detected in Tencent WeKnora up to 0.8.1. Impacted is the function validateSubquery of the file internal/utils/inject.go of th… |
CVE-2026-108816 | Medium | 6.3 | 2026-10-12 | A vulnerability was found in agno-agi agno up to 3.0.6. Affected by this vulnerability is the function run_python_code of the file python.py of the component P… |
CVE-2026-108814 | Medium | 6.3 | 2026-10-12 | A flaw has been found in SEMCMS up to 5.0. This impacts an unknown function of the file SEMCMS_Banner.php. Executing a manipulation can lead to sql injection… |
CVE-2026-108813 | Medium | 6.3 | 2026-10-12 | A vulnerability was detected in SEMCMS up to 5.0. This affects an unknown function of the file SEMCMS_Download.php. Performing a manipulation results in sql in… |
CVE-2026-108807 | High | 7.3 | 2026-10-12 | A vulnerability was found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects the function mysql_query of the… |
CVE-2026-108806 | High | 7.3 | 2026-10-12 | A vulnerability has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this issue is the function m… |
CVE-2026-108805 | High | 7.3 | 2026-10-12 | A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this vulnerability is the function my… |
CVE-2026-108799 | High | 7.3 | 2026-10-12 | A vulnerability was determined in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. Impacted is the function PublicController::sendFindPwdMail of the… |
CVE-2026-108794 | Medium | 6.3 | 2026-10-12 | A security vulnerability has been detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this vulnerability is an unknown functionality of the file… |
CVE-2026-108782 | Medium | 6.3 | 2026-10-12 | A weakness has been identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this issue is the function CommonServiceImpl.getAutoList of the file src/… |
CVE-2026-108781 | Medium | 6.3 | 2026-10-12 | A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this vulnerability is the function WmToMoveGoodsController.list of t… |
CVE-2026-108779 | Medium | 6.3 | 2026-10-12 | A vulnerability was identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected is the function WmSttInGoodsController.list of the file src/main/java/com/zz… |
CVE-2026-108778 | Medium | 6.3 | 2026-10-12 | A vulnerability was determined in erzhongxmu JEEWMS up to 2026.09.27-W39. This impacts the function WmInQmIController.list of the file src/main/java/com/zzjee/… |
CVE-2026-108777 | Medium | 6.3 | 2026-10-12 | A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39. This affects the function WvGiController.list of the file src/main/java/com/zzjee/wmapi/co… |
CVE-2026-108775 | Medium | 6.3 | 2026-10-12 | A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeController.list of the file com/zzjee/wm… |
CVE-2026-108774 | Medium | 6.3 | 2026-10-12 | A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzje… |
CVE-2026-108773 | Medium | 6.3 | 2026-10-11 | A vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39. Impacted is the function docheck of the file src/main/java/com/zzjee/wm/controller/WmOm… |
CVE-2026-108684 | Medium | 6.3 | 2026-10-11 | A vulnerability was detected in erzhongxmu Jeewms up to 3.7. This affects the function getTreeData of the file src/main/java/com/jeecg/demo/controller/JeecgFor… |
CVE-2026-108571 | High | 7.3 | 2026-10-11 | A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6. This impacts the function kqjcmdModel::returnchuli of the file webmain/task/openapi/openkq… |
CVE-2026-108569 | Medium | 6.3 | 2026-10-11 | A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templa… |
CVE-2026-108541 | Medium | 6.3 | 2026-10-11 | A vulnerability has been found in highwarden Super Store Finder up to 3.8. Affected is an unknown function of the file /products/superstorefinder/index.php. Th… |
CVE-2026-102291 | Medium | 5.4 | 2026-10-10 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and… |
CVE-2026-84220 | Medium | 4.8 | 2026-10-09 | The Kirki WordPress plugin before 6.3.2 does not prevent shortcodes held in comments from being executed when it renders them, and displays comments regardless… |
CVE-2026-76472 | High | 8.8 | 2026-10-07 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal s… |
CVE-2026-86833 | Medium | 5.4 | 2026-10-07 | The MetForm WordPress plugin before 4.3.1 does not sanitize or escape submitted form-field values before inserting them into the HTML body of its email notific… |
CVE-2026-102158 | Medium | 6.5 | 2026-10-06 | Improper validation of selected CloudVision CUE application programming interface (API) request parameters may allow an authenticated network user to perform S… |
CVE-2026-102156 | Medium | 6.8 | 2026-10-06 | Improper neutralization of Lightweight Directory Access Protocol (LDAP) authentication input may allow an unauthenticated network attacker, under high-complexi… |
CVE-2026-105957 | Medium | 6.3 | 2026-10-06 | A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/view_prod… |
CVE-2026-105921 | Medium | 6.3 | 2026-10-06 | A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of t… |
CVE-2026-105800 | Low | 3.7 | 2026-10-06 | i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to 4.0.2, attacker-controlled langua… |
CVE-2026-105920 | High | 7.3 | 2026-10-06 | A vulnerability was determined in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The impacted element is an unknown fu… |
CVE-2026-105919 | High | 7.3 | 2026-10-06 | A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The affected element is the function mysql… |
CVE-2026-105918 | High | 7.3 | 2026-10-06 | A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysql_error… |
CVE-2026-105807 | High | 7.3 | 2026-10-06 | A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manip… |
CVE-2026-105776 | High | 7.3 | 2026-10-06 | A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this… |
CVE-2026-105472 | Medium | 6.3 | 2026-10-06 | A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. The affected element is an unkn… |
CVE-2026-82989 | Critical | 9.8 | 2026-10-06 | There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticated attacker to inject arbitrary input i… |
CVE-2026-105471 | High | 7.3 | 2026-10-06 | A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Impacted is an unknown fun… |
CVE-2026-105470 | High | 7.3 | 2026-10-05 | A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This issue affects the function… |
CVE-2026-105469 | High | 7.3 | 2026-10-05 | A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This vulnerability affects unkn… |
CVE-2026-105468 | High | 7.3 | 2026-10-05 | A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqli_que… |
CVE-2026-105388 | Medium | 6.3 | 2026-10-05 | A weakness has been identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function index of the file App/Feelcrm/Index/Controller/MemberC… |
CVE-2026-105387 | High | 7.3 | 2026-10-05 | A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function… |
CVE-2026-105386 | High | 7.3 | 2026-10-05 | A vulnerability was identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this issue is the functi… |
CVE-2026-105385 | High | 7.3 | 2026-10-05 | A vulnerability was determined in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this vulnerability is an… |
CVE-2026-105384 | High | 7.3 | 2026-10-05 | A vulnerability was found in UNION HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected is an unknown function of the file patient… |
CVE-2026-105383 | High | 7.3 | 2026-10-05 | A vulnerability has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This impacts an unknown function of… |
CVE-2026-105329 | Medium | 6.3 | 2026-10-05 | A vulnerability was determined in TallCMS up to 4.8.0. This affects an unknown function of the file packages/tallcms/cms/src/Filament/Pages/ThemeManager.php of… |
CVE-2026-105287 | Medium | 6.3 | 2026-10-05 | A flaw has been found in feelec-yishu feelcrm-os 1.0.0. Affected is an unknown function of the file App/Feelcrm/Crm/Controller/AjaxRequestController.class.php… |
CVE-2026-105254 | Medium | 6.3 | 2026-10-05 | A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file /admin/schoolyear.php. Such manipulatio… |
CVE-2026-105253 | High | 7.3 | 2026-10-05 | A vulnerability was determined in itsourcecode Online Admission System Project 1.0. This issue affects some unknown processing of the file /admin/login1.php. T… |
CVE-2026-105247 | High | 7.3 | 2026-10-05 | A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer_0/adm… |