CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) (page 3)
Page 3 of 51 — CVEs classified under CWE-74, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-14750 | High | 7.3 | 2026-07-05 | A security flaw has been discovered in mjperpinosa stumasy up to 327d1b0f2915ba79d7ef8ebb74553e987609d9be. The affected element is the function Notes_controlle… |
CVE-2026-14749 | High | 7.3 | 2026-07-05 | A vulnerability was identified in mjperpinosa stumasy up to 327d1b0f2915ba79d7ef8ebb74553e987609d9be. Impacted is the function eval of the file application/pag… |
CVE-2026-14747 | High | 7.3 | 2026-07-05 | A vulnerability was detected in code-projects Real State Services 1.0. Affected by this vulnerability is an unknown functionality of the file /addprojectsale.p… |
CVE-2026-14746 | High | 7.3 | 2026-07-05 | A security vulnerability has been detected in code-projects Real State Services 1.0. Affected is an unknown function of the file /addprojectrent.php. The manip… |
CVE-2026-14745 | High | 7.3 | 2026-07-05 | A weakness has been identified in code-projects Real State Services 1.0. This impacts an unknown function of the file /single-list_rent.php. Executing a manipu… |
CVE-2026-14744 | High | 7.3 | 2026-07-05 | A security flaw has been discovered in code-projects Real State Services 1.0. This affects an unknown function of the file /normalHomeRent.php. Performing a ma… |
CVE-2026-14743 | High | 7.3 | 2026-07-05 | A vulnerability was identified in code-projects Real State Services 1.0. The impacted element is an unknown function of the file /normalHomeSale.php. Such mani… |
CVE-2026-14737 | High | 7.3 | 2026-07-05 | A vulnerability was identified in Hanwang e-Face General Management Platform 6.3.5.4. This impacts an unknown function of the file /sysAuthStr/querySysAuthStr… |
CVE-2026-14735 | High | 7.3 | 2026-07-05 | A vulnerability has been found in code-projects Smart Parking System 1.0. The affected element is an unknown function of the file /parkings/parkings.php. Such… |
CVE-2026-14734 | High | 7.3 | 2026-07-05 | A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /edit_product.php. This manipulation… |
CVE-2026-14733 | High | 7.3 | 2026-07-05 | A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. This issue affects some unknown processing of the file /edit_coursea.php… |
CVE-2026-14732 | High | 7.3 | 2026-07-05 | A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /edit_e… |
CVE-2026-14731 | Medium | 6.3 | 2026-07-05 | A weakness has been identified in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file /patientreport.php. Executing a manipul… |
CVE-2026-14730 | Medium | 6.3 | 2026-07-05 | A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /patientpr… |
CVE-2026-14722 | High | 7.3 | 2026-07-05 | A vulnerability was found in tiddly-gittly TidGi-Desktop up to 0.13.0. This impacts an unknown function of the file src/services/wiki/wikiWorker/loadWikiTiddle… |
CVE-2026-14717 | Medium | 6.3 | 2026-07-05 | A vulnerability was detected in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /patientlogin.php. Perform… |
CVE-2026-14713 | High | 7.3 | 2026-07-05 | A security flaw has been discovered in SourceCodester Pizzafy E-Commerce System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action… |
CVE-2026-14706 | Medium | 6.3 | 2026-07-05 | A vulnerability was identified in code-projects Online Examination 1.0. This affects an unknown part of the file /update.php?q=addquiz of the component Quiz Cr… |
CVE-2026-14705 | High | 7.3 | 2026-07-05 | A vulnerability was determined in code-projects Online Examination 1.0. Affected by this issue is some unknown functionality of the file head.php. Executing a… |
CVE-2026-14703 | Medium | 6.3 | 2026-07-05 | A vulnerability has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /patientorder.php. Such manipulation… |
CVE-2026-14701 | Medium | 6.3 | 2026-07-05 | A vulnerability was detected in code-projects Internship Management System 1.0. This affects an unknown function of the file employer/details/change_password.p… |
CVE-2026-14700 | High | 7.3 | 2026-07-05 | A security vulnerability has been detected in code-projects Internship Management System 1.0. The impacted element is an unknown function of the file employer/… |
CVE-2026-14695 | High | 7.3 | 2026-07-05 | A vulnerability was found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function save_client of the file classes/Users… |
CVE-2026-14694 | Medium | 6.3 | 2026-07-05 | A vulnerability has been found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. Affected by this issue is the function cancel_order of the… |
CVE-2026-14692 | Medium | 6.3 | 2026-07-05 | A vulnerability was detected in SourceCodester Multi-Vendor Online Grocery Management System 1.0/5.7.26. Affected is the function save_shop_type of the file cl… |
CVE-2026-14691 | Medium | 6.3 | 2026-07-05 | A security vulnerability has been detected in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This impacts the function update_settings_info… |
CVE-2026-14689 | Medium | 6.3 | 2026-07-05 | A security flaw has been discovered in CodeAstro Apartment Visitor Management System 1.0. The impacted element is an unknown function of the file /apartment-vi… |
CVE-2026-14688 | High | 7.3 | 2026-07-05 | A vulnerability was identified in itsourcecode Online Hotel Management System 1.0. The affected element is an unknown function of the file /admin/login.php. Th… |
CVE-2026-14660 | High | 7.3 | 2026-07-04 | A vulnerability was found in code-projects Online Job Portal 1.0. The affected element is an unknown function of the file login.php. Performing a manipulation… |
CVE-2026-14659 | Medium | 6.3 | 2026-07-04 | A vulnerability has been found in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /patientappointment.php. Such manipu… |
CVE-2026-14658 | Medium | 6.3 | 2026-07-04 | A vulnerability was detected in code-projects Assessment Management 1.0. This vulnerability affects unknown code of the file /lecturer/marking-scheme.php. The… |
CVE-2026-14657 | Medium | 6.3 | 2026-07-04 | A flaw has been found in code-projects Assessment Management 1.0. This issue affects some unknown processing of the file /lecturer/marking-scheme.php of the co… |
CVE-2026-14654 | High | 7.3 | 2026-07-04 | A vulnerability was identified in SourceCodester Simple and Nice Shopping Cart Script 1.0. Affected is an unknown function of the file /admin/girlsproductdelet… |
CVE-2026-14653 | High | 7.3 | 2026-07-04 | A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /admin/mensproductdelet… |
CVE-2026-14652 | High | 7.3 | 2026-07-04 | A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. This affects an unknown function of the file /admin/login.php of the comp… |
CVE-2026-14649 | High | 7.3 | 2026-07-04 | A vulnerability was detected in code-projects Online Voting System 1.0. Impacted is the function test_input of the file /saveVote.php. Performing a manipulatio… |
CVE-2026-14648 | High | 7.3 | 2026-07-04 | A security vulnerability has been detected in code-projects Online Voting System up to 0.x/1.0. This issue affects the function test_input of the file /authent… |
CVE-2026-14642 | High | 7.3 | 2026-07-04 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /edit_… |
CVE-2026-14641 | High | 7.3 | 2026-07-04 | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file… |
CVE-2026-14640 | High | 7.3 | 2026-07-04 | A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. Affected is an unknown function of the file /index.php of the component Login… |
CVE-2026-14639 | Medium | 6.3 | 2026-07-04 | A vulnerability has been found in CodeAstro Ecommerce Website 1.0. This impacts an unknown function of the file /ecommerce-website-php/customer/my_account.php?… |
CVE-2026-14638 | Medium | 6.3 | 2026-07-04 | A flaw has been found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /patient.php. This manipulation of the argum… |
CVE-2026-14619 | Medium | 6.3 | 2026-07-04 | A flaw has been found in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /medicine.php. This mani… |
CVE-2026-14249 | High | 7.5 | 2026-07-02 | The Request a Quote plugin for WordPress is vulnerable to Code Injection in versions up to, and including, 2.5.5 via the emd_delete_file AJAX action. This is d… |
CVE-2026-13579 | Medium | 6.3 | 2026-06-29 | A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /patientchangep… |
CVE-2026-13578 | Medium | 6.3 | 2026-06-29 | A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /pat… |
CVE-2026-13572 | Medium | 6.3 | 2026-06-29 | A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /insertbillingrecord.php… |
CVE-2026-13569 | Medium | 4.7 | 2026-06-29 | A security vulnerability has been detected in weng-xianhu EyouCMS up to 1.7.1. This issue affects some unknown processing of the file /index.php of the compone… |
CVE-2026-13566 | High | 7.3 | 2026-06-29 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /previ… |
CVE-2026-13565 | High | 7.3 | 2026-06-29 | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/1.php. Affected by this vulnerability is an unknown functionality of the… |
CVE-2026-13559 | High | 7.3 | 2026-06-29 | A weakness has been identified in code-projects Real State Services 1.0. Impacted is an unknown function of the file /single-list_sale.php?action=add. Executin… |
CVE-2026-13555 | High | 7.3 | 2026-06-29 | A vulnerability was found in itsourcecode Online Hotel Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/mod_users… |
CVE-2026-13552 | High | 7.3 | 2026-06-29 | A vulnerability was detected in itsourcecode Online Hotel Management System 1.0. This impacts an unknown function of the file /admin/mod_amenities/controller.p… |
CVE-2026-13551 | High | 7.3 | 2026-06-29 | A security vulnerability has been detected in itsourcecode Baptism Information Management System 1.0. This affects an unknown function of the file /editBaptism… |
CVE-2026-13550 | High | 7.3 | 2026-06-29 | A weakness has been identified in itsourcecode Baptism Information Management System 1.0. The impacted element is an unknown function of the file /delbaptism.p… |
CVE-2026-13548 | Medium | 6.3 | 2026-06-29 | A vulnerability was identified in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /doctortimings.php. The manipulation… |
CVE-2026-13542 | Medium | 6.3 | 2026-06-29 | A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /doctorprofile.php. The… |
CVE-2026-13541 | Medium | 6.3 | 2026-06-29 | A weakness has been identified in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /doctorchangepassword.php. Executin… |
CVE-2026-13538 | Medium | 6.3 | 2026-06-29 | A vulnerability was determined in Wavlink WL-NU516U1-A M16U1_V240425. The affected element is the function sub_401D68 of the file /cgi-bin/wireless.cgi of the… |
CVE-2026-13535 | Medium | 6.3 | 2026-06-29 | A flaw has been found in CodeAstro Human Resource Management System 1.0. This vulnerability affects the function GetFileInfo of the file hrsystem/application/m… |
CVE-2026-13532 | Medium | 6.3 | 2026-06-29 | A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /departme… |
CVE-2026-13531 | Medium | 6.3 | 2026-06-29 | A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /department.php. The manipulati… |
CVE-2026-13530 | Medium | 6.3 | 2026-06-29 | A vulnerability was identified in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /appointmentdetail.php of the compo… |
CVE-2026-13529 | Medium | 5.6 | 2026-06-29 | A vulnerability was determined in YzmCMS up to 7.5. This affects an unknown function of the file /application/install/index.php. Executing a manipulation of th… |
CVE-2026-13527 | High | 7.3 | 2026-06-29 | A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. The affected element is an unknown function of the file /preview4.php… |
CVE-2026-13526 | High | 7.3 | 2026-06-29 | A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /edit_class.php. This manipulation o… |
CVE-2026-13525 | Medium | 6.3 | 2026-06-29 | A vulnerability was detected in CodeAstro Human Resource Management System 1.0. This issue affects the function emselectByCode of the file application/models/E… |
CVE-2026-13521 | High | 7.3 | 2026-06-29 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0/5.php. Affected by this vulnerability is an unknown functionality of the… |
CVE-2026-13520 | Medium | 6.3 | 2026-06-29 | A vulnerability was determined in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /appointmentapproval.php of the comp… |
CVE-2026-13501 | Medium | 5.3 | 2026-06-28 | A security vulnerability has been detected in antlr ANTLR4 up to 4.13.2. Affected by this vulnerability is the function GoTarget of the file tool/src/org/antlr… |
CVE-2026-13500 | High | 7.3 | 2026-06-28 | A weakness has been identified in antlr ANTLR4 up to 4.13.2. Affected is an unknown function of the file tool/src/org/antlr/v4/codegen/model/OutputFile.java of… |
CVE-2026-13498 | High | 7.3 | 2026-06-28 | A vulnerability was identified in yashpokharna2555 restaurent-management-system. This affects an unknown function of the file /forgotpassword.php of the compon… |
CVE-2026-13497 | Medium | 6.3 | 2026-06-28 | A vulnerability was determined in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /appointment.php. This m… |
CVE-2026-13496 | Medium | 6.3 | 2026-06-28 | A vulnerability was found in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /ajaxmedicine.php. The manipu… |
CVE-2026-13495 | Medium | 4.7 | 2026-06-28 | A vulnerability has been found in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /adminprofile.php. The manipulation… |
CVE-2026-13488 | High | 7.3 | 2026-06-28 | A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0/7.php. Affected by this vulnerability is an unknown functionality o… |
CVE-2026-13487 | High | 7.3 | 2026-06-28 | A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /archive.php. The manipulat… |
CVE-2026-13486 | High | 7.3 | 2026-06-28 | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/6.php. This impacts an unknown function of the file /preview6.php. Execu… |
CVE-2026-13485 | High | 7.3 | 2026-06-28 | A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown function of the file /preview.php. Performing a mani… |
CVE-2026-57522 | Low | 3.5 | 2026-06-25 | Bitwarden Server before 2026.5.0 contains a JSON injection vulnerability in IntegrationTemplateProcessor.ReplaceTokens(), which substitutes user-controlled val… |
CVE-2026-0864 | | 2026-06-23 | When using the "configparser" module to write configuration files containing multi-line text values with carriage return characters (\r) the resulting file cou… | |
CVE-2026-50574 | High | 8.3 | 2026-06-23 | yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, if aria2c is used as an external downloader for a fragmented manifest format (such as an… |
CVE-2026-12888 | | 2026-06-22 | An HTML injection vulnerability exists in the Google Chat webhook notification sent by Thinkst Applied Research Canarytokens, enabling Interface Manipulation… | |
CVE-2026-12822 | Medium | 5.3 | 2026-06-22 | A vulnerability was identified in langflow-ai langflow up to 1.9.3. This affects an unknown function of the component Bundle URL Loader. The manipulation leads… |
CVE-2026-12812 | Low | 3.5 | 2026-06-21 | A security vulnerability has been detected in Radware Cyber Controller up to 10.11.0. This affects an unknown part of the component HTML Report Generation. The… |
CVE-2026-12810 | Medium | 6.3 | 2026-06-21 | A security flaw has been discovered in Edimax BR-6478AC V2 1.23. Affected by this vulnerability is the function mp of the file /goform/mp of the component POST… |
CVE-2026-12809 | Medium | 6.3 | 2026-06-21 | A vulnerability was identified in Edimax BR-6478AC V2 1.23. Affected is the function wiz_5in1_redirect of the file /goform/wiz_5in1_redirect of the component P… |
CVE-2026-12808 | Medium | 6.3 | 2026-06-21 | A vulnerability was determined in Edimax BR-6478AC V2 1.23. This impacts the function stainfo of the file /goform/stainfo of the component POST Request Handler… |
CVE-2026-12807 | Medium | 6.3 | 2026-06-21 | A vulnerability was found in Edimax BR-6478AC V2 1.23. This affects the function setWAN of the file /goform/setWAN of the component POST Request Handler. The m… |
CVE-2026-12789 | Medium | 4.7 | 2026-06-21 | A vulnerability was identified in ILIAS Learning Management System 11.0. This issue affects the function ilTrQuery::executeQueries of the file components/ILIAS… |
CVE-2026-12776 | Medium | 6.3 | 2026-06-21 | A flaw has been found in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. This affects an unknown part of the file /index.php?p… |
CVE-2026-12775 | High | 7.3 | 2026-06-21 | A vulnerability was detected in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. Affected by this issue is some unknown functio… |
CVE-2025-27511 | High | 7.2 | 2026-06-18 | GeoServer is an open source server that allows users to share and edit geospatial data. Prior to version 2.27.0 of the GeoServer DB2 DataStore Extension, an ad… |
CVE-2026-50107 | High | 8.1 | 2026-06-17 | When NGINX Plus or NGINX Open Source is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configuration gen… |
CVE-2026-20220 | Medium | 6.3 | 2026-06-17 | A vulnerability in the web-based management interface of Cisco Crosswork Network Controller could allow an authenticated, remote attacker to execute arbit… |
CVE-2026-11311 | High | 8.1 | 2026-06-17 | When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configuration generator component of N… |
CVE-2026-12223 | Medium | 5.5 | 2026-06-15 | A vulnerability was identified in Yealink SIP-T46U 108.86.0.118. Affected by this vulnerability is the function mod_webd.TFTPUploadIperf of the file /api/inner… |
CVE-2026-12219 | Medium | 6.3 | 2026-06-15 | A flaw has been found in Yealink SIP-T46U 108.86.0.118. The impacted element is the function mod_diagnose.CommandShellByType of the file /api/diagnosis/start o… |
CVE-2026-12206 | Medium | 6.3 | 2026-06-15 | A vulnerability was identified in Grit42 Grit up to 0.11.0. This issue affects the function Grit::Assays::DataTableEntity of the file modules/assays/backend/ap… |
CVE-2026-12197 | High | 7.2 | 2026-06-15 | A security flaw has been discovered in Ruijie EG105G-P 2.340. The impacted element is the function nslookup of the file /cgi-bin/luci/api/diagnose of the compo… |