Lucene search
+L

91773 matches found

CVE
CVE
added 2026/08/24 5:45 a.m.15 views

CVE-2026-78200

itsourcecode Library Management System 1.0 is affected by a SQL injection vulnerability in the file editbooks.php . Manipulating the ID argument in an unknown function of this file allows a remote attacker to inject SQL queries. The CVSS 3.1 base score is 6.3 (MEDIUM) with low impact on confident...

6.5CVSS6.4AI score0.00251EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/24 5:16 a.m.7 views

CVE-2026-78187

A vulnerability has been found in Piwigo 16.3.0. This impacts an unknown function of the component Public Authentication Page. Such manipulation of the argument lang leads to cross site scripting. The attack may be performed from remote. A high complexity level is associated with this attack. The...

3.1CVSS0.00413EPSS
SaveExploits0References9
NVD
NVD
added 2026/08/24 5:16 a.m.11 views

CVE-2026-78197

A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /fos/admin/ajax.php?action=saveuser. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has...

7.5CVSS0.00266EPSS
SaveExploits0References7
CVE
CVE
added 2026/08/24 5:15 a.m.13 views

CVE-2026-78198

A SQL injection vulnerability exists in SourceCodester Simple Online Food Ordering System 1.0 , specifically in the handling of the pid argument within /fos/admin/ajax.php?action=add_to_cart . The flaw is remotely exploitable with no authentication required , allowing an attacker to manipulate th...

7.5CVSS7.3AI score0.00263EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/24 5:00 a.m.9 views

EUVD-2026-64731

A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /fos/admin/ajax.php?action=saveuser. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has...

7.5CVSS7.5AI score0.00266EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/08/24 4:30 a.m.32 views

CVE-2026-78187 Piwigo Public Authentication cross site scripting

A vulnerability has been found in Piwigo 16.3.0. This impacts an unknown function of the component Public Authentication Page. Such manipulation of the argument lang leads to cross site scripting. The attack may be performed from remote. A high complexity level is associated with this attack. The...

3.1CVSS0.00413EPSS
SaveExploits0References9
CVE
CVE
added 2026/08/24 4:30 a.m.17 views

CVE-2026-78187

CVE-2026-78187 is a reflected cross-site scripting (XSS) vulnerability in Piwigo 16.3.0 , affecting the Public Authentication Page component. Manipulation of the lang argument allows a remote, unauthenticated attacker to inject script that executes in a victim's browser upon user interaction. The...

3.1CVSS2.8AI score0.00413EPSS
SaveExploits0References9
EUVD
EUVD
added 2026/08/24 4:30 a.m.8 views

EUVD-2026-64723

A vulnerability has been found in Piwigo 16.3.0. This impacts an unknown function of the component Public Authentication Page. Such manipulation of the argument lang leads to cross site scripting. The attack may be performed from remote. A high complexity level is associated with this attack. The...

3.1CVSS3.5AI score0.00413EPSS
SaveExploits0References9
NVD
NVD
added 2026/08/24 4:16 a.m.10 views

CVE-2026-78185

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/custedit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

6.5CVSS0.0025EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/24 4:16 a.m.9 views

CVE-2026-78181

A weakness has been identified in ractivejs ractive up to 1.4.4. Impacted is the function Ractiveset of the component Keypath Handler. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack may be launched remotely. The exploit has been...

7.5CVSS0.00439EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/24 4:16 a.m.10 views

CVE-2026-78180

A security flaw has been discovered in alibaba-fusion next up to 1.27.34. This issue affects the function ConfigProvider.getContextProps of the file components/dialog/index.tsx of the component deepMerge. Performing a manipulation of the argument locale results in improperly controlled modificati...

7.5CVSS0.00439EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/24 4:16 a.m.11 views

CVE-2026-78179

A vulnerability was identified in rexrainbow phaser3-rex-notes up to 1.80.17. This vulnerability affects the function SetValue of the file plugins/utils/object/SetValue.js of the component BehaviorTree Blackboard Data Interface. Such manipulation of the argument key leads to improperly controlled...

6.5CVSS0.0033EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/24 4:15 a.m.10 views

EUVD-2026-64722

A flaw has been found in Open5GS up to 2.8.0. This affects an unknown function of the file src/hss/hss-cx-path.c of the component HSS. This manipulation of the argument User-Name causes reachable assertion. The attack is possible to be carried out remotely. The exploit has been published and may ...

5.3CVSS5.1AI score0.0039EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/08/24 4:00 a.m.27 views

CVE-2026-78185 itsourcecode Sales and Inventory System cust_edit.php sql injection

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/custedit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

6.5CVSS0.0025EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/24 3:30 a.m.30 views

CVE-2026-78181 ractivejs ractive Keypath Ractive#set prototype pollution

A weakness has been identified in ractivejs ractive up to 1.4.4. Impacted is the function Ractiveset of the component Keypath Handler. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack may be launched remotely. The exploit has been...

7.5CVSS0.00439EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/24 3:30 a.m.9 views

EUVD-2026-64704

A weakness has been identified in ractivejs ractive up to 1.4.4. Impacted is the function Ractiveset of the component Keypath Handler. Executing a manipulation can lead to improperly controlled modification of object prototype attributes. The attack may be launched remotely. The exploit has been...

7.5CVSS7.3AI score0.00439EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/24 3:30 a.m.17 views

CVE-2026-78181

CVE-2026-78181 is a prototype pollution vulnerability in ractivejs ractive versions up to 1.4.4 . The flaw resides in the Ractive#set function within the Keypath Handler component, where improper control of object prototype attribute modification allows a remote, unauthenticated attacker to injec...

7.5CVSS7.2AI score0.00439EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/24 3:16 a.m.14 views

CVE-2026-78178

A vulnerability was determined in jQWidgets up to 24.0.1. This affects the function JQXLite.extend/jqxBaseFramework.extend of the file jqwidgets/jqx-all.js. This manipulation causes improperly controlled modification of object prototype attributes. The attack can be initiated remotely. The report...

7.5CVSS0.00439EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/24 3:16 a.m.11 views

CVE-2026-78171

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/processlogin.php. The manipulation of the argument User leads to sql injection. It is possible to initiate the attack remotely. The exploit...

7.5CVSS0.00328EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/24 3:15 a.m.39 views

CVE-2026-78180 alibaba-fusion next deepMerge index.tsx ConfigProvider.getContextProps prototype pollution

A security flaw has been discovered in alibaba-fusion next up to 1.27.34. This issue affects the function ConfigProvider.getContextProps of the file components/dialog/index.tsx of the component deepMerge. Performing a manipulation of the argument locale results in improperly controlled modificati...

7.5CVSS0.00439EPSS
SaveExploits0References6
Rows per page
Query Builder