1043 matches found
CVE-2026-41987
CVE-2026-41987 is a permission control vulnerability in the app management module of a Huawei consumer device, as reported by Huawei's PSIRT (CNA source: [email protected]). Successful exploitation may affect availability , with a CVSS 3.1 base score of 6.2 (MEDIUM) . The attack vector is local , ...
EUVD-2026-74614
Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-41987
Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-41987: Undefined Security Weakness
Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability...
PT-2026-88806
Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-4813: Improper Control of Generation of Code
A vulnerability in the Lutece Core XSL export management module up to version 7.1.7, which allows authenticated administrators to execute code remotely. The XML/XSLT processing configuration does not enable secure processing mode FEATURESECUREPROCESSING, allowing Java extension functions to be...
CVE-2026-78144: Authorization Bypass Through User-Controlled Key
A vulnerability was identified in code-projects Barangay Resident Profiling Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /boarders.php of the component Boarder Management Module. Such manipulation of the argument ID leads to authorization bypass. T...
Cherry Framework <= 3.1.4 - Unauthenticated Backup Download
Description The theme does not restrict access to a backup script in its data management module, allowing unauthenticated attackers to download an archive of the site's themes directory, disclosing its source and any sensitive data stored within it...
CVE-2026-15532
A vulnerability was identified in SourceCodester Online Book Store System 1.0. This issue affects some unknown processing of the component User Management Module. Such manipulation of the argument Name/Username leads to cross site scripting. The attack can be executed remotely. The exploit is...
CVE-2026-15532
SourceCodester Online Book Store System 1.0 is affected by a cross site scripting (XSS) vulnerability in the User Management Module. The issue arises from manipulation of the Name/Username argument, enabling an attacker to inject script. The vulnerability is remote-exploitable and has a publicly ...
CVE-2026-15532
A vulnerability was identified in SourceCodester Online Book Store System 1.0. This issue affects some unknown processing of the component User Management Module. Such manipulation of the argument Name/Username leads to cross site scripting. The attack can be executed remotely. The exploit is...
CVE-2026-15532: Improper Neutralization of Input During Web Page Generation
A vulnerability was identified in SourceCodester Online Book Store System 1.0. This issue affects some unknown processing of the component User Management Module. Such manipulation of the argument Name/Username leads to cross site scripting. The attack can be executed remotely. The exploit is...
PT-2026-57626
A vulnerability was identified in SourceCodester Online Book Store System 1.0. This issue affects some unknown processing of the component User Management Module. Such manipulation of the argument Name/Username leads to cross site scripting. The attack can be executed remotely. The exploit is...
RLSA-2026:30845 Moderate: mod_md security update
This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate provisioning. Certificates will be configured for managed domains and their virtual hosts automatically, including at renewal. Security Fixes: httpd:...
RHEL 9 : mod_md (RHSA-2026:30844)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:30844 advisory. This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate...
CVE-2026-36521: Improper Neutralization of Input During Web Page Generation
PublicCMS V5.202506.d has a Cross Site Scripting XSS vulnerability in the site configuration management module...
CVE-2026-41985
UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity...
CVE-2026-41984
UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity...