CVE-2026-27502

SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in log.php via the search query parameter. The application embeds the unsanitized parameter value directly into an HTML input value attribute, allowing an unauthenticated remote attacker to inject and execute...

CVE-2026-27502

SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in log.php via the search query parameter. The application embeds the unsanitized parameter value directly into an HTML input value attribute, allowing an unauthenticated remote attacker to inject and execute...

CVE-2026-2350

Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS...

CVE-2026-1292

Tanium addressed an insertion of sensitive information into log file vulnerability in Trends...

CVE-2026-2350

Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS...

CVE-2026-2350 Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS.

Tanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS...

CVE-2026-1292 Tanium addressed an insertion of sensitive information into log file vulnerability in Trends.

Tanium addressed an insertion of sensitive information into log file vulnerability in Trends...

CVE-2026-2605 Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS.

Tanium addressed an insertion of sensitive information into log file vulnerability in TanOS...

CVE-2026-2605

CVE-2026-2605 concerns Tanium TanOS, where an issue allows insertion of sensitive information into log files. Affected component: TanOS (Tanium). Root cause details are not fully disclosed in the provided documents; CVSS v3.1 base score 5.3 (Medium) with Confidentiality Impact: High, Attack Vecto...

CVE-2026-26282 NanaZip has DotNet Single file OOB Heap Read

NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, NanaZip has an out-of-bounds heap read in .NET Single File bundle header parser due to missing bounds check. Opening a crafted file with NanaZip causes a crash or leaks heap data to the user...

CVE-2025-65519

mayswind ezbookkeeping versions 1.2.0 and earlier contain a critical vulnerability in JSON and XML file import processing. The application fails to validate nesting depth during parsing operations, allowing authenticated attackers to trigger denial of service conditions by uploading deeply nested...

CVE-2026-2566

CVE-2026-2566 affects Wavlink WL-NU516U1 (firmware up to 130/260). The vulnerability resides in function sub_406194 within /cgi-bin/adm.cgi where manipulation of the firmware_url argument causes a stack-based buffer overflow. Impact is described as remote code execution-like overflow with high se...

PT-2026-7618

MiniGal Nano versions 0.3.5 and prior contain a path traversal vulnerability in index.php via the dir parameter. The application appends user-controlled input to the photos directory and attempts to prevent traversal by removing dot-dot sequences, but this protection can be bypassed using crafted...

CVE-2026-1495 Insertion of Sensitive Information into Log File vulnerability in AVEVA PI to CONNECT Agent

The vulnerability, if exploited, could allow an attacker with Event Log Reader S-1-5-32-573 privileges to obtain proxy details, including URL and proxy credentials, from the PI to CONNECT event log files. This could enable unauthorized access to the proxy server...

CVE-2026-1495 Insertion of Sensitive Information into Log File vulnerability in AVEVA PI to CONNECT Agent

The vulnerability, if exploited, could allow an attacker with Event Log Reader S-1-5-32-573 privileges to obtain proxy details, including URL and proxy credentials, from the PI to CONNECT event log files. This could enable unauthorized access to the proxy server...

CVE-2026-2190

A security flaw has been discovered in itsourcecode School Management System 1.0. This impacts an unknown function of the file /ramonsys/user/controller.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been released to the...

EUVD-2026-5777

A vulnerability was identified in code-projects Online Examination System 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely...

CVE-2026-2173

A vulnerability was identified in code-projects Online Examination System 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely...

Certificate Generation System 代码问题漏洞

Certificate Generation System is an open-source web-based certificate generation system developed by Great Developers. The Certificate Generation System has a code vulnerability that stems from incorrect operations with the /restructured/csv.php file, which may lead to unlimited uploads...

CVE-2020-37152

PHP-Fusion 9.03.50 panels.php is vulnerable to cross-site scripting XSS via the 'panelcontent' POST parameter. The application fails to properly sanitize user input before rendering it in the browser, allowing attackers to inject arbitrary JavaScript. This can be exploited by submitting crafted...