CVE-2026-92413

A flaw has been found in Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9. Affected by this vulnerability is the function pdfopenfilter of the file pdf-stream.c of the component PDF Xref Loading. Executing a manipulation can lead to null pointer dereference. The attack can be launched...

EUVD-2026-80936

A vulnerability was found in Open5GS up to 2.8.0. This affects the function ogspfcpparsevolumemeasurement in the library lib/pfcp/types.c of the component PFCP Handler. The manipulation results in null pointer dereference. The attack may be launched remotely. The patch is identified as...

EUVD-2026-80934

A vulnerability has been found in Open5GS up to 2.8.0. Affected by this issue is the function smfn4handlesessionreportrequest of the file src/smf/n4-handler.c of the component PFCP Session Report Request Handler. The manipulation leads to reachable assertion. The attack may be initiated remotely...

CVE-2026-92399

A vulnerability was determined in GPAC 26.07.0. This affects the function rmtclienthandlewsframe of the file src/utils/rmtws.c of the component WebSocket Handler. Executing a manipulation of the argument payloadsize can lead to heap-based buffer overflow. It is possible to launch the attack...

CVE-2026-92402

A security flaw has been discovered in ChangeWeDer crm up to c07bd4c97141521af6475034bc58523beed51bbd. This issue affects the function index of the file UserController.java of the component top.upstudy.crm.controller.UserController. The manipulation results in missing authorization. The attack ca...

CVE-2026-92405

SourceCodester Inventory and Monitoring System 1.0 is vulnerable to SQL injection via the Username argument in the file /index.php . The vulnerability is remotely exploitable without authentication or user interaction, with a CVSS 3.1 base score of 7.3 (High) reflecting low impact on confidential...

EUVD-2026-80883

A security flaw has been discovered in ChangeWeDer crm up to c07bd4c97141521af6475034bc58523beed51bbd. This issue affects the function index of the file UserController.java of the component top.upstudy.crm.controller.UserController. The manipulation results in missing authorization. The attack ca...

CVE-2026-92385

A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/updatecategory.php of the component Category Update. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit h...

EUVD-2026-80866

A vulnerability was determined in GPAC 26.07.0. This affects the function rmtclienthandlewsframe of the file src/utils/rmtws.c of the component WebSocket Handler. Executing a manipulation of the argument payloadsize can lead to heap-based buffer overflow. It is possible to launch the attack...

CVE-2026-92383

A security vulnerability has been detected in PbootCMS up to 3.2.24. This vulnerability affects the function UserController::del/UserController::mod of the file apps/admin/controller/system/UserController.php of the component User Management. Such manipulation leads to cross-site request forgery...

CVE-2026-92362

A vulnerability was detected in ag-ui-protocol ag-ui 1.0. This impacts an unknown function of the file crates/ag-ui-client/src/sse.rs of the component SSE Frame Parser. Performing a manipulation results in resource consumption. The attack is possible to be carried out remotely. The pull request t...

CVE-2026-92365

A vulnerability was found in vllm-project vllm up to 0.29.0. Affected by this issue is some unknown functionality of the file vllm/v1/sample/thinkingbudgetstate.py. The manipulation results in inefficient algorithmic complexity. It is possible to launch the attack remotely. The pull request to fi...

CVE-2026-92366 code-projects Matrimonial System Regular Search search.php sql injection

A vulnerability was determined in code-projects Matrimonial System 1.0. This affects an unknown part of the file /search.php of the component Regular Search. This manipulation of the argument sex/mothertongue/maritialstatus/country/state/religion/agemin/agemax causes sql injection. The attack can...

EUVD-2026-80785

A vulnerability was determined in code-projects Matrimonial System 1.0. This affects an unknown part of the file /search.php of the component Regular Search. This manipulation of the argument sex/mothertongue/maritialstatus/country/state/religion/agemin/agemax causes sql injection. The attack can...

CVE-2025-25621

CVE-2025-25621 Unifiedtransform v2.0 es vulnerable a un Control de Acceso Incorrecto, lo que permite a los profesores tomar asistencia de otros profesores a través del endpoint /courses/teacher/index?teacherid=2&semesterid=1. Vendor: Unifiedtransform PoC Paso 1: Inicie sesión en la aplicación com...

CVE-2026-92365

A Denial of Service (DoS) vulnerability exists in vllm-project vllm (up to version 0.29.0). A remote attacker with low privileges can exploit an inefficient algorithmic complexity in the file vllm/v1/sample/thinking_budget_state.py, degrading service availability for legitimate users. The specifi...

EUVD-2026-80771

A vulnerability was found in vllm-project vllm up to 0.29.0. Affected by this issue is some unknown functionality of the file vllm/v1/sample/thinkingbudgetstate.py. The manipulation results in inefficient algorithmic complexity. It is possible to launch the attack remotely. The pull request to fi...

CVE-2022-3546

CVE-2022-3546 https://vulners.com/cve/CVE-2022-3546 Se encontró una vulnerabilidad en SourceCodester Simple Cold Storage Management System 1.0 y fue clasificada como problemática. Esta cuestión afecta a una funcionalidad desconocida del archivo /csms/admin/?page=user/list del componente Create Us...

EUVD-2026-80708

A flaw has been found in ag-ui-protocol ag-ui 1.0. Affected is an unknown function of the file src/stream/sseparser.cpp of the component JSON Parser. Executing a manipulation can lead to resource consumption. The attack may be performed from remote. This patch is called...

CVE-2026-92362

CVE-2026-92362 affects the SSE Frame Parser component in the file crates/ag-ui-client/src/sse.rs of ag-ui-protocol ag-ui 1.0 . The vulnerability allows a remote attacker to trigger resource consumption through manipulation of the parser, potentially leading to a denial-of-service condition. The C...