5552638 matches found
IServ Schoolserver User Enumeration
IServ Schoolserver suffers from a user enumeration vulnerability. The vendor does not feel this is an issue...
UBUNTU-CVE-2026-75803
AEAD Forgeries with Empty Ciphertext When Using EVPCipher...
EUVD-2026-64840
HCL Hive is affected by a broken access control vulnerability which could allow an attacker or unauthorized user to introduce unverified, malicious, or broken code directly into production environments...
CVE-2026-21756 HCL Hive is affected by a broken access control vulnerability
HCL Hive is affected by a broken access control vulnerability which could allow an attacker or unauthorized user to introduce unverified, malicious, or broken code directly into production environments...
EUVD-2026-64839
Authorization Bypass Through User-Controlled Key in the supplier API in Roskus Prospero Flow CRM 4.0.0 through 5.3.1 allows any authenticated user to read and modify another company's supplier record, and to reassign it to their own company, via a PUT request to /api/supplier/id setting companyid...
EUVD-2026-64838
A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=confirmorder. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has be...
CVE-2026-78247 SourceCodester Simple Online Food Ordering System ajax.php confirm_order sql injection
A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=confirmorder. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has be...
Exploit for Eval Injection in Tenable Security_Center
C...
EUVD-2026-64829
Unauthenticated Broken Access Control in RepairBuddy = 4.1223 versions...
EUVD-2026-64835
Author SQL Injection in FluentCRM Pro = 3.1.12 versions...
EUVD-2026-64785
Subscriber Insecure Direct Object References IDOR in Fluent Boards Pro = 2.0.11 versions...
EUVD-2026-64784
Subscriber Server Side Request Forgery SSRF in FluentCRM Pro = 3.1.12 versions...
EUVD-2026-64786
Unauthenticated Cross Site Request Forgery CSRF in Fluent Support Pro = 2.3.1 versions...
EUVD-2026-64787
Unauthenticated Cross Site Request Forgery CSRF in Hash Form = 1.4.0 versions...
EUVD-2026-64788
Contributor Cross Site Scripting XSS in Magazine Blocks = 1.8.6 versions...
EUVD-2026-64836
Subscriber Broken Access Control in Fluent Support Pro = 2.3.1 versions...
EUVD-2026-64826
A flaw was found in JSS Java Security Services. The JSSTrustManager class does not verify NSS trust flags when validating CA certificates, allowing certificates present in the NSS database without TRUSTEDCA flags to be accepted as trust anchors for TLS connections. In non-default configurations...
EUVD-2026-64831
Unauthenticated Cross Site Scripting XSS in WPComplete = 2.9.5.6 versions...