CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) (page 21)
Page 21 of 51 — CVEs classified under CWE-74, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-10415 | High | 7.3 | 2025-09-14 | A vulnerability was determined in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown function of the file /ajax.php?action=save_supplier… |
CVE-2025-10414 | High | 7.3 | 2025-09-14 | A vulnerability was found in Campcodes Grocery Sales and Inventory System 1.0. The impacted element is an unknown function of the file /ajax.php?action=save_cu… |
CVE-2025-10413 | High | 7.3 | 2025-09-14 | A vulnerability has been found in Campcodes Grocery Sales and Inventory System 1.0. The affected element is an unknown function of the file /ajax.php?action=de… |
CVE-2025-10409 | Medium | 6.3 | 2025-09-14 | A weakness has been identified in SourceCodester Student Grading System 1.0. This affects an unknown part of the file /rms.php?page=users. Executing manipulati… |
CVE-2025-10408 | Medium | 6.3 | 2025-09-14 | A security flaw has been discovered in SourceCodester Student Grading System 1.0. Affected by this issue is some unknown functionality of the file /edit_user.p… |
CVE-2025-10407 | Medium | 6.3 | 2025-09-14 | A vulnerability was identified in SourceCodester Student Grading System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_user… |
CVE-2025-10405 | High | 7.3 | 2025-09-14 | A vulnerability was determined in itsourcecode Baptism Information Management System 1.0. Affected is an unknown function of the file /listbaptism.php. This ma… |
CVE-2025-10404 | High | 7.3 | 2025-09-14 | A vulnerability was found in itsourcecode Baptism Information Management System 1.0. This impacts an unknown function of the file /rptbaptismal.php. The manipu… |
CVE-2025-10403 | High | 7.3 | 2025-09-14 | A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown function of the file /admin/view-enquiry.php. The ma… |
CVE-2025-10402 | High | 7.3 | 2025-09-14 | A flaw has been found in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown function of the file /admin/readenq.php. Executing… |
CVE-2025-10401 | Medium | 6.3 | 2025-09-14 | A vulnerability was detected in D-Link DIR-823x up to 250416. The affected element is an unknown function of the file /goform/diag_ping. Performing manipulatio… |
CVE-2025-10400 | Medium | 6.3 | 2025-09-14 | A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Impacted is an unknown function of the file /routers/ticket-m… |
CVE-2025-10399 | Medium | 6.3 | 2025-09-14 | A weakness has been identified in Korzh EasyQuery up to 7.4.0. This issue affects some unknown processing of the file /api/easyquery/models/nwind/fetch of the… |
CVE-2025-10396 | High | 7.3 | 2025-09-14 | A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/… |
CVE-2025-10394 | Medium | 4.7 | 2025-09-14 | A vulnerability has been found in fcba_zzm ics-park Smart Park Management System 2.0. Affected is an unknown function of the file ruoyi-quartz/src/main/java/co… |
CVE-2025-10387 | Medium | 6.3 | 2025-09-14 | A vulnerability was determined in codesiddhant Jasmin Ransomware up to 1.0.1. This vulnerability affects unknown code of the file /handshake.php. This manipula… |
CVE-2025-10325 | Medium | 6.3 | 2025-09-12 | A vulnerability was identified in Wavlink WL-WN578W2 221110. This impacts the function sub_401340/sub_401BA4 of the file /cgi-bin/login.cgi. Such manipulation… |
CVE-2025-10324 | High | 7.3 | 2025-09-12 | A vulnerability was determined in Wavlink WL-WN578W2 221110. This affects the function sub_401C5C of the file firewall.cgi. This manipulation of the argument p… |
CVE-2025-10323 | High | 7.3 | 2025-09-12 | A vulnerability was found in Wavlink WL-WN578W2 221110. The impacted element is the function sub_409184 of the file /wizard_rep.shtml. The manipulation of the… |
CVE-2025-10251 | Medium | 6.3 | 2025-09-11 | A vulnerability was detected in FoxCMS up to 1.24. Affected by this issue is the function batchCope of the file /app/admin/controller/Images.php. The manipulat… |
CVE-2025-10218 | Medium | 6.3 | 2025-09-10 | A flaw has been found in lostvip-com ruoyi-go 2.1. This affects the function SelectListPage of the file modules/system/dao/SysRoleDao.go of the component Backg… |
CVE-2025-10210 | Medium | 6.3 | 2025-09-10 | A weakness has been identified in yanyutao0402 ChanCMS up to 3.3.0. Impacted is the function Search of the file app/modules/api/service/Api.js. Executing manip… |
CVE-2025-10197 | Medium | 6.3 | 2025-09-10 | A vulnerability was found in HJSoft HCM Human Resources Management System up to 20250822. Affected by this vulnerability is an unknown functionality of the fil… |
CVE-2025-10107 | Medium | 4.7 | 2025-09-09 | A vulnerability has been found in TRENDnet TEW-831DR 1.0 (601.130.1.1410). Impacted is an unknown function of the file /boafrm/formSysCmd. The manipulation of… |
CVE-2025-7350 | | 2025-09-09 | A security issue affecting multiple Cisco devices also directly impacts Stratix® 5410, 5700, and 8000 devices. This can lead to remote code execution by upload… | |
CVE-2025-10123 | High | 7.3 | 2025-09-09 | A vulnerability was determined in D-Link DIR-823X up to 250416. Affected by this vulnerability is the function sub_415028 of the file /goform/set_static_leases… |
CVE-2025-10122 | Medium | 4.7 | 2025-09-09 | A vulnerability was found in Maccms10 2025.1000.4050. Affected is the function rep of the file application/admin/controller/Database.php. Performing manipulati… |
CVE-2025-10121 | Medium | 6.3 | 2025-09-09 | A flaw has been found in uverif up to 3.2. This affects the function addbatch of the file /admin/kami_list. This manipulation of the argument note causes sql i… |
CVE-2025-10118 | High | 7.3 | 2025-09-09 | A security vulnerability has been detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. The affected element is an unknown functio… |
CVE-2025-10115 | High | 7.3 | 2025-09-09 | A vulnerability was determined in SiempreCMS up to 1.3.6. This affects an unknown part of the file user_search_ajax.php. This manipulation of the argument name… |
CVE-2025-10114 | High | 7.3 | 2025-09-09 | A vulnerability was found in PHPGurukul Small CRM 4.0. Affected by this issue is some unknown functionality of the file /profile.php. The manipulation of the a… |
CVE-2025-10113 | High | 7.3 | 2025-09-09 | A security vulnerability has been detected in itsourcecode Student Information Management System 1.0. This affects an unknown function of the file /admin/modul… |
CVE-2025-10112 | High | 7.3 | 2025-09-09 | A weakness has been identified in itsourcecode Student Information Management System 1.0. The impacted element is an unknown function of the file /admin/module… |
CVE-2025-10111 | High | 7.3 | 2025-09-08 | A security flaw has been discovered in itsourcecode Student Information Management System 1.0. The affected element is an unknown function of the file /admin/m… |
CVE-2025-10110 | Medium | 6.3 | 2025-09-08 | A vulnerability was identified in ChanCMS up to 3.3.1. Impacted is an unknown function of the file /search/. The manipulation with the input '%20or%201=1%20%23… |
CVE-2025-10109 | High | 7.3 | 2025-09-08 | A vulnerability was determined in Campcodes Online Loan Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=delete_p… |
CVE-2025-10108 | High | 7.3 | 2025-09-08 | A vulnerability was found in Campcodes Online Loan Management System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=delete_loan. Per… |
CVE-2025-10106 | Medium | 6.3 | 2025-09-08 | A vulnerability has been found in yanyutao0402 ChanCMS up to 3.3.1. This affects an unknown part of the file /cms/collect/search. Such manipulation of the argu… |
CVE-2025-10105 | Medium | 6.3 | 2025-09-08 | A flaw has been found in yanyutao0402 ChanCMS up to 3.3.1. Affected by this issue is some unknown functionality of the file /cms/article/search. This manipulat… |
CVE-2025-10104 | High | 7.3 | 2025-09-08 | A security vulnerability has been detected in code-projects Online Event Judging System 1.0. Affected is an unknown function of the file /review_search.php. Th… |
CVE-2025-10103 | High | 7.3 | 2025-09-08 | A weakness has been identified in code-projects Online Event Judging System 1.0. This impacts an unknown function of the file /home.php. Executing manipulation… |
CVE-2025-10102 | High | 7.3 | 2025-09-08 | A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown function of the file /index.php. Performing manip… |
CVE-2025-56266 | Critical | 9.8 | 2025-09-08 | A Host Header Injection vulnerability in Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via supplying a crafted URL. |
CVE-2025-10100 | High | 7.3 | 2025-09-08 | A vulnerability was detected in SourceCodester Simple Forum Discussion System 1.0. This impacts an unknown function of the file /admin_class.php?action=login… |
CVE-2025-10098 | Medium | 6.3 | 2025-09-08 | A security flaw has been discovered in PHPGurukul User Management System 1.0. Affected is an unknown function of the file /admin/edit-user-profile.php. The man… |
CVE-2025-10097 | Medium | 6.3 | 2025-09-08 | A vulnerability was identified in SimStudioAI sim up to 1.0.0. This impacts an unknown function of the file apps/sim/app/api/function/execute/route.ts. The man… |
CVE-2025-10090 | High | 7.3 | 2025-09-08 | A flaw has been found in Jinher OA up to 1.2. The impacted element is an unknown function of the file /C6/Jhsoft.Web.departments/GetTreeDate.aspx. Executing ma… |
CVE-2025-10087 | Medium | 4.7 | 2025-09-08 | A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. Impacted is an unknown function of the file /admin/profit_re… |
CVE-2025-10082 | High | 7.3 | 2025-09-08 | A vulnerability has been found in SourceCodester Online Polling System 1.0. Affected is an unknown function of the file /admin/manage-admins.php. Such manipula… |
CVE-2025-10079 | High | 7.3 | 2025-09-08 | A flaw has been found in PHPGurukul Small CRM 4.0. Affected by this vulnerability is an unknown functionality of the file /get-quote.php. Executing manipulatio… |
CVE-2025-10078 | High | 7.3 | 2025-09-08 | A vulnerability was detected in SourceCodester Online Polling System 1.0. Affected is an unknown function of the file /admin/candidates.php. Performing manipul… |
CVE-2025-10077 | High | 7.3 | 2025-09-08 | A security vulnerability has been detected in SourceCodester Online Polling System 1.0. This impacts an unknown function of the file /registeracc.php. Such man… |
CVE-2025-10076 | High | 7.3 | 2025-09-08 | A weakness has been identified in SourceCodester Online Polling System 1.0. This affects an unknown function of the file /manage-profile.php. This manipulation… |
CVE-2025-10068 | High | 7.3 | 2025-09-07 | A flaw has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown function of the file /admin/admin_forum/add_views.php. Executing man… |
CVE-2025-10062 | High | 7.3 | 2025-09-06 | A vulnerability was determined in itsourcecode Student Information Management System 1.0. This affects an unknown part of the file /admin/login.php. Executing… |
CVE-2025-10033 | High | 7.3 | 2025-09-06 | A vulnerability has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown function of the file /admin. Such manipulation of the argum… |
CVE-2025-10031 | High | 7.3 | 2025-09-06 | A security vulnerability has been detected in Campcodes Grocery Sales and Inventory System 1.0. Impacted is an unknown function of the file /ajax.php?action=de… |
CVE-2025-10030 | High | 7.3 | 2025-09-06 | A weakness has been identified in Campcodes Grocery Sales and Inventory System 1.0. This issue affects some unknown processing of the file /ajax.php?action=sav… |
CVE-2025-10025 | High | 7.3 | 2025-09-05 | A vulnerability has been found in PHPGurukul Online Course Registration 3.1. Affected is an unknown function of the file /admin/semester.php. The manipulation… |
CVE-2025-10012 | Medium | 6.3 | 2025-09-05 | A security vulnerability has been detected in Portabilis i-Educar up to 2.10. The impacted element is an unknown function of the file educar_historico_escolar_… |
CVE-2025-10011 | Medium | 6.3 | 2025-09-05 | A weakness has been identified in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /module/TabelaArredondamento/edit. Th… |
CVE-2025-6785 | | 2025-09-04 | Securing externally available CAN wires can easily allow physical access to the CAN bus, allowing possible injection of specially formed CAN messages to contro… | |
CVE-2025-9935 | High | 7.3 | 2025-09-04 | A vulnerability was determined in TOTOLINK N600R 4.3.0cu.7866_B20220506. This vulnerability affects the function sub_4159F8 of the file /web_cste/cgi-bin/cstec… |
CVE-2025-9934 | Medium | 6.3 | 2025-09-04 | A vulnerability was found in TOTOLINK X5000R 9.1.0cu.2415_B20250515. This affects the function sub_410C34 of the file /cgi-bin/cstecgi.cgi. Performing manipula… |
CVE-2025-9933 | High | 7.3 | 2025-09-04 | A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this issue is some unknown functionality of the file /admin/view… |
CVE-2025-9932 | High | 7.3 | 2025-09-04 | A flaw has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /admin/update-… |
CVE-2025-9930 | High | 7.3 | 2025-09-04 | A security vulnerability has been detected in 1000projects Beauty Parlour Management System 1.0. This impacts an unknown function of the file /admin/contact-us… |
CVE-2025-9928 | High | 7.3 | 2025-09-03 | A security flaw has been discovered in projectworlds Travel Management System 1.0. The impacted element is an unknown function of the file /viewcategory.php. P… |
CVE-2025-9927 | High | 7.3 | 2025-09-03 | A vulnerability was identified in projectworlds Travel Management System 1.0. The affected element is an unknown function of the file /viewpackage.php. Such ma… |
CVE-2025-9926 | High | 7.3 | 2025-09-03 | A vulnerability was determined in projectworlds Travel Management System 1.0. Impacted is an unknown function of the file /viewsubcategory.php. This manipulati… |
CVE-2025-9925 | High | 7.3 | 2025-09-03 | A vulnerability was found in projectworlds Travel Management System 1.0. This issue affects some unknown processing of the file /detail.php. The manipulation o… |
CVE-2025-9924 | High | 7.3 | 2025-09-03 | A vulnerability has been found in projectworlds Travel Management System 1.0. This vulnerability affects unknown code of the file /enquiry.php. The manipulatio… |
CVE-2025-9919 | High | 7.3 | 2025-09-03 | A vulnerability was identified in 1000projects Beauty Parlour Management System 1.0. This affects an unknown function of the file /admin/bwdates-reports-detail… |
CVE-2025-9840 | Medium | 6.3 | 2025-09-02 | A weakness has been identified in itsourcecode Sports Management System 1.0. The impacted element is an unknown function of the file /Admin/gametype.php. Execu… |
CVE-2025-9839 | High | 7.3 | 2025-09-02 | A security flaw has been discovered in itsourcecode Student Information Management System 1.0. The affected element is an unknown function of the file /admin/m… |
CVE-2025-9838 | High | 7.3 | 2025-09-02 | A vulnerability was identified in itsourcecode Student Information Management System 1.0. Impacted is an unknown function of the file /admin/modules/subject/in… |
CVE-2025-9837 | High | 7.3 | 2025-09-02 | A vulnerability was determined in itsourcecode Student Information Management System 1.0. This issue affects some unknown processing of the file /admin/modules… |
CVE-2025-9833 | High | 7.3 | 2025-09-02 | A vulnerability was detected in SourceCodester Online Farm Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /Login… |
CVE-2025-9832 | High | 7.3 | 2025-09-02 | A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the file /routers/register… |
CVE-2025-9831 | High | 7.3 | 2025-09-02 | A weakness has been identified in PHPGurukul Beauty Parlour Management System 1.1. This impacts an unknown function of the file /admin/edit-services.php. This… |
CVE-2025-9830 | High | 7.3 | 2025-09-02 | A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown function of the file /admin/add-customer-servic… |
CVE-2025-9829 | High | 7.3 | 2025-09-02 | A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown function of the file /signup.php. The man… |
CVE-2025-9814 | High | 7.3 | 2025-09-02 | A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. Impacted is an unknown function of the file /admin/contact-us.php. The… |
CVE-2025-9811 | High | 7.3 | 2025-09-02 | A vulnerability was found in Campcodes Farm Management System 1.0. This affects an unknown part of the file /reviewInput.php. Performing manipulation of the ar… |
CVE-2025-9802 | Medium | 4.7 | 2025-09-02 | A vulnerability was detected in RemoteClinic 2.0. This vulnerability affects unknown code of the file /staff/profile.php. The manipulation of the argument ID r… |
CVE-2025-9797 | Low | 2.4 | 2025-09-01 | A vulnerability was determined in mrvautin expressCart up to b31302f4e99c3293bd742c6d076a721e168118b0. This impacts an unknown function of the file /admin/prod… |
CVE-2025-9794 | High | 7.3 | 2025-09-01 | A flaw has been found in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/pos_transac.php?acti… |
CVE-2025-9793 | High | 7.3 | 2025-09-01 | A vulnerability was detected in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /setting/admin.php of the component S… |
CVE-2025-9792 | High | 7.3 | 2025-09-01 | A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /e_dashboard… |
CVE-2025-9790 | High | 7.3 | 2025-09-01 | A security flaw has been discovered in SourceCodester Hotel Reservation System 1.0. This affects an unknown part of the file /admin/updateabout.php. The manipu… |
CVE-2025-9789 | High | 7.3 | 2025-09-01 | A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0. Affected by this issue is some unknown functionality of the file /admin/e… |
CVE-2025-9788 | High | 7.3 | 2025-09-01 | A vulnerability was determined in SourceCodester/Campcodes School Log Management System 1.0. Affected by this vulnerability is an unknown functionality of the… |
CVE-2025-9786 | High | 7.3 | 2025-09-01 | A vulnerability was found in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /teacher_signup.php. Performing manip… |
CVE-2025-9771 | High | 7.3 | 2025-09-01 | A security vulnerability has been detected in SourceCodester Eye Clinic Management System 1.0. Affected by this issue is some unknown functionality of the file… |
CVE-2025-9770 | High | 7.3 | 2025-09-01 | A weakness has been identified in Campcodes Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ of t… |
CVE-2025-9769 | Medium | 4.1 | 2025-09-01 | A security flaw has been discovered in D-Link DI-7400G+ 19.12.25A1. Affected is the function sub_478D28 of the file /mng_platform.asp. The manipulation of the… |
CVE-2025-9768 | Medium | 6.3 | 2025-09-01 | A vulnerability was identified in itsourcecode Sports Management System 1.0. This impacts an unknown function of the file /Admin/mode.php. The manipulation of… |
CVE-2025-9767 | High | 7.3 | 2025-09-01 | A vulnerability was determined in itsourcecode Sports Management System 1.0. This affects an unknown function of the file /Admin/sporttype.php. Executing manip… |
CVE-2025-9766 | High | 7.3 | 2025-09-01 | A vulnerability was found in itsourcecode Sports Management System 1.0. The impacted element is an unknown function of the file /Admin/facilitator.php. Perform… |
CVE-2025-9765 | High | 7.3 | 2025-09-01 | A vulnerability has been found in itsourcecode Sports Management System 1.0. The affected element is an unknown function of the file /Admin/tournament_details… |