159653 matches found
CVE-2026-82624
code-projects Simple Inventory System 1.0 is affected by an information disclosure vulnerability in the file inventorymanagement.sql , within the Database Backup File Handler component. The specific root cause is described as "some unknown functionality" of that file. The flaw is exploitable remo...
CVE-2026-82624 code-projects Simple Inventory System Database Backup File inventorymanagement.sql information disclosure
A flaw has been found in code-projects Simple Inventory System 1.0. Affected by this issue is some unknown functionality of the file inventorymanagement.sql of the component Database Backup File Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The...
CVE-2026-82619
A vulnerability was identified in Systerel S2OPC up to 1.7.3. The impacted element is the function monitoreditemeventfiltertreatmentbsiniteventfilterctxandresult of the file src/ClientServer/services/bgenc/subscriptionmgr.c. Such manipulation of the argument EventFilter leads to use after free. T...
CVE-2026-82623
CVE-2026-82623 affects open62541 versions up to 1.5.5 , specifically the function UA_DataValue_backend_copyRange in the file plugins/historydata/ua_history_data_backend_memory.c of the History Backend component. The root cause is a use-after-free that can be triggered remotely without privileges ...
CVE-2026-82623
A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UADataValuebackendcopyRange of the file plugins/historydata/uahistorydatabackendmemory.c of the component History Backend. The manipulation results in use after free. The attack can be launched...
CVE-2026-82623 open62541 History Backend ua_history_data_backend_memory.c UA_DataValue_backend_copyRange use after free
A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UADataValuebackendcopyRange of the file plugins/historydata/uahistorydatabackendmemory.c of the component History Backend. The manipulation results in use after free. The attack can be launched...
CVE-2026-82623 open62541 History Backend ua_history_data_backend_memory.c UA_DataValue_backend_copyRange use after free
A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UADataValuebackendcopyRange of the file plugins/historydata/uahistorydatabackendmemory.c of the component History Backend. The manipulation results in use after free. The attack can be launched...
CVE-2026-82623 open62541 History Backend ua_history_data_backend_memory.c UA_DataValue_backend_copyRange use after free
A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UADataValuebackendcopyRange of the file plugins/historydata/uahistorydatabackendmemory.c of the component History Backend. The manipulation results in use after free. The attack can be launched...
CVE-2026-82622
code-projects Employee Leave Managing System 1.0 is affected by a stored cross-site scripting (XSS) vulnerability in the Employee Profile Update component, specifically in /EmpManageSys/editaction.php. Manipulating the Name parameter allows an attacker to inject script that executes in the contex...
CVE-2026-82622 code-projects Employee Leave Managing System Employee Profile Update editaction.php cross site scripting
A security vulnerability has been detected in code-projects Employee Leave Managing System 1.0. Affected is an unknown function of the file /EmpManageSys/editaction.php of the component Employee Profile Update. The manipulation of the argument Name leads to cross site scripting. The attack can be...
EUVD-2026-68365
A security vulnerability has been detected in code-projects Employee Leave Managing System 1.0. Affected is an unknown function of the file /EmpManageSys/editaction.php of the component Employee Profile Update. The manipulation of the argument Name leads to cross site scripting. The attack can be...
CVE-2026-82622 code-projects Employee Leave Managing System Employee Profile Update editaction.php cross site scripting
A security vulnerability has been detected in code-projects Employee Leave Managing System 1.0. Affected is an unknown function of the file /EmpManageSys/editaction.php of the component Employee Profile Update. The manipulation of the argument Name leads to cross site scripting. The attack can be...
CVE-2026-82621
An authorization bypass vulnerability exists in Soarkey StudentManagement (学生信息管理系统), affecting versions up to commit e08f7f1d5015af407aa4cca0ada3dea189b4937e. The flaw resides in the AdminDao.doGet function of the Administrative Servlet (file code/src/service/AdminDao.java). An attacker can mani...
EUVD-2026-68361
A weakness has been identified in Soarkey StudentManagement and 学生信息管理系统 up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. This impacts the function AdminDao.doGet of the file code/src/service/AdminDao.java of the component Administrative Servlet. Executing a manipulation of the argument action can...
CVE-2026-82621 Soarkey StudentManagement/学生信息管理系统 Administrative Servlet AdminDao.java AdminDao.doGet authorization
A weakness has been identified in Soarkey StudentManagement and 学生信息管理系统 up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. This impacts the function AdminDao.doGet of the file code/src/service/AdminDao.java of the component Administrative Servlet. Executing a manipulation of the argument action can...
CVE-2026-82620 Soarkey StudentManagement/学生信息管理系统 CourseDao.java CourseDao.course_ranking sql injection
A security flaw has been discovered in Soarkey StudentManagement and 学生信息管理系统 up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. This affects the function CourseDao.courseranking of the file code/src/dao/CourseDao.java. Performing a manipulation of the argument cno results in sql injection. It is...
CVE-2026-82620
Soarkey StudentManagement (学生信息管理系统), affected up to commit e08f7f1d5015af407aa4cca0ada3dea189b4937e, contains a SQL injection vulnerability in the function CourseDao.course_ranking within the file code/src/dao/CourseDao.java. Manipulation of the cno argument allows a remote attacker to inject SQ...
CVE-2026-82614
A flaw has been found in itsourcecode Online Medicine Delivery System 1.0. This vulnerability affects the function loadResultList of the file /index.php?q=product of the component Product Category Filter Interface. Executing a manipulation of the argument Category can lead to sql injection. The...
CVE-2026-82619
Systerel S2OPC versions up to 1.7.3 are affected by a use-after-free vulnerability in the function monitored_item_event_filter_treatment_bs__init_event_filter_ctx_and_result located in src/ClientServer/services/bgenc/subscription_mgr.c. A remote attacker with low privileges can manipulate the Eve...
CVE-2026-82619 Systerel S2OPC subscription_mgr.c use after free
A vulnerability was identified in Systerel S2OPC up to 1.7.3. The impacted element is the function monitoreditemeventfiltertreatmentbsiniteventfilterctxandresult of the file src/ClientServer/services/bgenc/subscriptionmgr.c. Such manipulation of the argument EventFilter leads to use after free. T...