CVE-2026-19213 | Medium | 4.3 | 2026-08-07 | A vulnerability was identified in WonderTrader up to 0.9.9. Affected is the function _undone_qty in the library src/WtCore/TraderAdapter.h of the component Pen… |
CVE-2026-19208 | Low | 3.7 | 2026-08-07 | A vulnerability was detected in WonderTrader up to 0.9.9. Impacted is the function TraderDD::queryTrades of the file src/TraderDD/TraderDD.cpp. The manipulatio… |
CVE-2026-19037 | Medium | 4.3 | 2026-08-06 | A weakness has been identified in WonderTrader up to 0.9.9. This vulnerability affects the function MatchEngine::update_lob of the file src/WtBtCore/MatchEngin… |
CVE-2026-58558 | High | 7.8 | 2026-07-15 | Permission control vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2026-13571 | Medium | 5.3 | 2026-06-29 | A flaw has been found in SourceCodester Simple Food Ordering System 1.0. The affected element is an unknown function of the file /cart.php. Executing a manipul… |
CVE-2026-41973 | Medium | 5.9 | 2026-06-09 | Permission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-11465 | Low | 3.1 | 2026-06-07 | A security flaw has been discovered in songquanpeng one-api up to 0.6.11-preview.7. Affected by this issue is the function Redeem of the file model/redemption… |
CVE-2026-8738 | Medium | 6.5 | 2026-05-17 | A security vulnerability has been detected in Sanluan PublicCMS 5.202506.d. Impacted is the function TradeOrderController.pay/TradePaymentController.pay/Accoun… |
CVE-2026-41971 | Medium | 5.5 | 2026-05-15 | Permission control vulnerability in the security control module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2026-41968 | Medium | 5.9 | 2026-05-15 | Permission control vulnerability in the manufacturability design module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-41967 | Medium | 5.9 | 2026-05-15 | Permission control vulnerability in the manufacturability design module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-41966 | Medium | 5.6 | 2026-05-15 | Permission control vulnerability in the smart sensing service. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2026-41965 | Medium | 5.6 | 2026-05-15 | Use-After-Free (UAF) vulnerability in the web. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-41961 | Medium | 5.9 | 2026-05-15 | Permission control vulnerability in contacts. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-1322 | Medium | 6.8 | 2026-05-14 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.0 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have a… |
CVE-2026-1274 | Medium | 4.9 | 2026-04-23 | IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a Bypass Business Logic vulnerability in the access management control panel. |
CVE-2026-5812 | Medium | 5.4 | 2026-04-08 | A security flaw has been discovered in SourceCodester Pharmacy Product Management System 1.0. This affects an unknown part of the file add-sales.php of the com… |
CVE-2026-5811 | Medium | 5.4 | 2026-04-08 | A vulnerability was identified in SourceCodester Online Food Ordering System 1.0. Affected by this issue is the function save_product of the file /Actions.php… |
CVE-2026-4547 | Medium | 4.3 | 2026-03-22 | A security vulnerability has been detected in mickasmt next-saas-stripe-starter 1.0.0. Affected is the function generateUserStripe of the file actions/generate… |
CVE-2026-28550 | Medium | 4.0 | 2026-03-05 | Race condition vulnerability in the security control module. Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2026-1600 | Medium | 4.3 | 2026-01-29 | A vulnerability was identified in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. The impacted element is an unknown function of the file… |
CVE-2026-1599 | Medium | 4.3 | 2026-01-29 | A vulnerability was determined in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. The affected element is an unknown function of the file… |
CVE-2025-14559 | Medium | 6.5 | 2026-01-21 | A flaw was found in the keycloak-services component of Keycloak. This vulnerability allows the issuance of access and refresh tokens for disabled users, leadin… |
CVE-2025-13239 | Medium | 4.3 | 2025-11-16 | A security vulnerability has been detected in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution 5. Affected by this issue is some unknown f… |
CVE-2025-6601 | Low | 2.7 | 2025-10-27 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.3, and 18.5 before 18.5.1 that under certain conditions could have all… |
CVE-2025-58289 | Medium | 5.9 | 2025-10-11 | Vulnerability of improper exception handling in the print module. Successful exploitation of this vulnerability may affect availability. |
CVE-2025-10868 | Low | 3.5 | 2025-09-26 | An issue has been discovered in GitLab CE/EE affecting all versions from 17.4 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 where certain string co… |
CVE-2025-8991 | Medium | 4.3 | 2025-08-15 | A vulnerability was identified in linlinjava litemall up to 1.8.0. Affected by this vulnerability is an unknown functionality of the file /admin/config/express… |
CVE-2025-54611 | High | 7.3 | 2025-08-06 | EXTRA_REFERRER resource read vulnerability in the Gallery module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2025-54606 | High | 7.3 | 2025-08-06 | Status verification vulnerability in the lock screen module.
Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. |
CVE-2025-2938 | Low | 3.1 | 2025-06-26 | An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowe… |
CVE-2025-4037 | Medium | 4.4 | 2025-04-28 | A vulnerability was found in code-projects ATM Banking 1.0. It has been classified as critical. Affected is the function moneyDeposit/moneyWithdraw. The manipu… |
CVE-2025-1908 | High | 7.7 | 2025-04-24 | An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, a… |
CVE-2024-6577 | Medium | 6.3 | 2025-03-20 | In the latest version of pytorch/serve, the script 'upload_results_to_s3.sh' references the S3 bucket 'benchmarkai-metrics-prod' without ensuring its ownership… |
CVE-2025-2323 | Medium | 4.3 | 2025-03-15 | A vulnerability was found in 274056675 springboot-openai-chatgpt e84f6f5. It has been declared as problematic. This vulnerability affects the function updateQu… |
CVE-2025-2321 | Medium | 6.3 | 2025-03-15 | A vulnerability was found in 274056675 springboot-openai-chatgpt e84f6f5 and classified as critical. Affected by this issue is some unknown functionality of th… |
CVE-2024-58046 | Medium | 6.2 | 2025-03-04 | Permission management vulnerability in the lock screen module
Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-58043 | High | 7.3 | 2025-03-04 | Permission bypass vulnerability in the window module
Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-45424 | Medium | 5.3 | 2025-02-25 | Business logic error in some Zoom Workplace Apps may allow an unauthenticated user to conduct a disclosure of information via network access. |
CVE-2025-24425 | Medium | 5.3 | 2025-02-11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a Business Logic Error vulnerability that could resul… |
CVE-2024-56449 | Medium | 6.6 | 2025-01-08 | Privilege escalation vulnerability in the Account module
Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-54098 | High | 8.5 | 2024-12-12 | Service logic error vulnerability in the system service module
Impact: Successful exploitation of this vulnerability may affect service integrity. |
CVE-2024-1682 | Medium | 4.3 | 2024-11-14 | An unclaimed Amazon S3 bucket, 'codeconf', is referenced in an audio file link within the .rst documentation file. This bucket has been claimed by an external… |
CVE-2024-51523 | High | 7.1 | 2024-11-05 | Information management vulnerability in the Gallery module
Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2018-25104 | Medium | 4.3 | 2024-10-17 | A vulnerability was found in CoinGate Plugin up to 1.2.7 on PrestaShop. It has been rated as problematic. Affected by this issue is the function postProcess of… |
CVE-2024-6446 | Low | 3.5 | 2024-09-12 | An issue has been discovered in GitLab affecting all versions starting from 17.1 to 17.1.7, 17.2 prior to 17.2.5 and 17.3 prior to 17.3.2. A crafted URL could… |
CVE-2024-42034 | Medium | 6.6 | 2024-08-08 | LaunchAnywhere vulnerability in the account module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-39671 | Critical | 9.3 | 2024-07-25 | Access control vulnerability in the security verification module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-7271 | Medium | 5.5 | 2024-07-25 | Privilege escalation vulnerability in the NMS module
Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-4046 | Medium | 6.4 | 2024-05-14 | Cracking vulnerability in the OS security module
Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-32999 | Medium | 6.8 | 2024-05-14 | Cracking vulnerability in the OS security module
Impact: Successful exploitation of this vulnerability will affect availability. |
CVE-2024-1456 | High | 7.1 | 2024-04-16 | An S3 bucket takeover vulnerability was identified in the h2oai/h2o-3 repository. The issue involves the S3 bucket 'http://s3.amazonaws.com/h2o-training', whic… |
CVE-2024-2267 | Medium | 4.3 | 2024-03-07 | A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0 and classified as problematic. This issue affects some unknown processing of the file /sh… |
CVE-2024-2151 | Medium | 4.3 | 2024-03-04 | A vulnerability classified as problematic was found in SourceCodester Online Mobile Management Store 1.0. Affected by this vulnerability is an unknown function… |
CVE-2023-6832 | Medium | 4.3 | 2023-12-15 | Business Logic Errors in GitHub repository microweber/microweber prior to 2.0. |
CVE-2023-6566 | Medium | 6.5 | 2023-12-07 | Business Logic Errors in GitHub repository microweber/microweber prior to 2.0. |
CVE-2023-6514 | High | 8.8 | 2023-12-06 |
The Bluetooth module of some Huawei Smart Screen products has an identity authentication bypass vulnerability. Successful exploitation of this vulnerability m… |
CVE-2023-6017 | High | 7.1 | 2023-11-16 | H2O included a reference to an S3 bucket that no longer existed allowing an attacker to take over the S3 bucket URL. |
CVE-2023-4304 | Low | 3.8 | 2023-08-11 | Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.22,2.1.0.
|
CVE-2023-29294 | Medium | 4.3 | 2023-06-15 | Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Business Logic Errors vulnerability that could… |
CVE-2023-3229 | Medium | 6.5 | 2023-06-14 | Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0. |
CVE-2023-3228 | Medium | 5.7 | 2023-06-14 | Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0. |
CVE-2023-1887 | Medium | 4.3 | 2023-04-05 | Business Logic Errors in GitHub repository thorsten/phpmyfaq prior to 3.1.12. |
CVE-2023-1542 | Medium | 5.4 | 2023-03-21 | Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6. |
CVE-2023-1541 | Low | 3.8 | 2023-03-21 | Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6. |
CVE-2023-0565 | Medium | 5.5 | 2023-01-29 | Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.10.
|
CVE-2022-4719 | Critical | 9.8 | 2022-12-27 | Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5. |
CVE-2022-3363 | Critical | 9.8 | 2022-10-26 | Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7. |
CVE-2022-32208 | Medium | 5.9 | 2022-07-07 | When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle at… |
CVE-2022-32207 | Critical | 9.8 | 2022-07-07 | When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporar… |
CVE-2022-27782 | High | 7.5 | 2022-06-02 | libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previ… |
CVE-2022-1848 | Medium | 5.3 | 2022-05-24 | Business Logic Errors in GitHub repository erudika/para prior to 1.45.11. |
CVE-2022-0935 | High | 8.8 | 2022-04-07 | Host Header injection in password Reset in GitHub repository livehelperchat/livehelperchat prior to 3.97. |
CVE-2022-1155 | High | 7.4 | 2022-03-30 | Old sessions are not blocked by the login enable function. in GitHub repository snipe/snipe-it prior to 5.3.10. |
CVE-2022-0514 | Medium | 6.5 | 2022-03-21 | Business Logic Errors in GitHub repository crater-invoice/crater prior to 6.0.5. |
CVE-2022-0746 | Medium | 4.3 | 2022-02-25 | Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0. |
CVE-2022-0688 | Medium | 4.9 | 2022-02-20 | Business Logic Errors in Packagist microweber/microweber prior to 1.2.11. |
CVE-2022-0689 | Medium | 5.3 | 2022-02-19 | Use multiple time the one-time coupon in Packagist microweber/microweber prior to 1.2.11. |
CVE-2022-0524 | High | 7.5 | 2022-02-08 | Business Logic Errors in GitHub repository publify/publify prior to 9.2.7. |
CVE-2021-4146 | Medium | 4.3 | 2022-01-18 | Business Logic Errors in GitHub repository pimcore/pimcore prior to 10.2.6. |
CVE-2021-4171 | Critical | 9.8 | 2022-01-17 | calibre-web is vulnerable to Business Logic Errors |
CVE-2021-4117 | Medium | 4.3 | 2021-12-15 | yetiforcecrm is vulnerable to Business Logic Errors |
CVE-2021-4111 | Medium | 4.3 | 2021-12-15 | yetiforcecrm is vulnerable to Business Logic Errors |
CVE-2021-36012 | Medium | 6.5 | 2021-09-01 | Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a business logic error in the placeOrder graphql… |
CVE-2021-22926 | High | 7.5 | 2021-08-05 | libcurl-using applications can ask for a specific client certificate to be used in a transfer. This is done with the `CURLOPT_SSLCERT` option (`--cert` with th… |
CVE-2021-22922 | Medium | 6.5 | 2021-08-05 | When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided in the metalink XML file.The metalink X… |
CVE-2021-22897 | Medium | 5.3 | 2021-06-11 | curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is buil… |
CVE-2020-8228 | Medium | 5.3 | 2020-10-05 | A missing rate limit in the Preferred Providers app 1.7.0 allowed an attacker to set the password an uncontrolled amount of times. |
CVE-2020-8181 | Medium | 4.3 | 2020-07-10 | A missing file type check in Nextcloud Contacts 3.2.0 allowed a malicious user to upload any file as avatars. |
CVE-2019-15608 | Medium | 5.9 | 2020-03-15 | The package integrity validation in yarn < 1.19.0 contains a TOCTOU vulnerability where the hash is computed before writing a package to cache. It's not comput… |
CVE-2019-3787 | High | 8.3 | 2019-06-19 | Cloud Foundry UAA, versions prior to 73.0.0, falls back to appending “unknown.org” to a user's email address when one is not provided and the user name does no… |
CVE-2019-3789 | Medium | 6.5 | 2019-04-24 | Cloud Foundry Routing Release, all versions prior to 0.188.0, contains a vulnerability that can hijack the traffic to route services hosted outside the platfor… |