200006 matches found
CVE-2026-19919 code-projects Online Shopping System Login login.php sql injection
A vulnerability was found in code-projects Online Shopping System 1.0. This impacts an unknown function of the file /login.php of the component Login. The manipulation of the argument email results in sql injection. The attack may be performed from remote. The exploit has been made public and cou...
CVE-2026-19919
CVE-2026-19919 affects code-projects Online Shopping System 1.0, specifically the Login component’s login.php where manipulation of the email parameter causes SQL injection. At risk is remote exploitation with public exploits reported; CVSS scores (3.0/3.1/4.0/2.0) indicate high/medium severity v...
CVE-2026-19919
A vulnerability was found in code-projects Online Shopping System 1.0. This impacts an unknown function of the file /login.php of the component Login. The manipulation of the argument email results in sql injection. The attack may be performed from remote. The exploit has been made public and cou...
CVE-2026-19918 SpaceX Starlink Router Gen 3 gRPC Management get_status access control
A vulnerability has been found in SpaceX Starlink Router Gen 3 2025.11.14.mr64708.3. This affects the function getstatus of the component gRPC Management Interface. The manipulation leads to improper access controls. The attack can only be initiated within the local network. The exploit has been...
CVE-2026-19917
Affected software: code-projects Online Food Order System 1.0. Vulnerable component: file delete_food_items1.php (unknown function) where manipulating the checkbox argument leads to a SQL injection. Root cause / vector: remote exploitation via crafted checkbox argument, enabling SQL injection due...
CVE-2026-19917
A flaw has been found in code-projects Online Food Order System 1.0. The impacted element is an unknown function of the file deletefooditems1.php. Executing a manipulation of the argument checkbox can lead to sql injection. The attack can be executed remotely. The exploit has been published and m...
MINI-V52R-8V59-XRHM
Bulletin has no description...
MINI-CQJJ-MR3V-RJ7X
Bulletin has no description...
MINI-CG6X-MQ99-J3C5
Bulletin has no description...
MINI-7J6P-RH6W-57HX
Bulletin has no description...
MINI-GQR7-598P-Q62X
Bulletin has no description...
CVE-2026-19905
A weakness has been identified in Jinher OA 1.0. Impacted is an unknown function of the file /C6/JHSoft.Web.HrmAttendance/attendanceoutapprove.aspx. This manipulation of the argument httpOID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available ...
CVE-2026-19906
A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the function setData of the file classes/user/form/APIProfileForm.php of the component API Key Generation. Executing a manipulation of the argument apiKey can lead to insufficient entropy. The attack may b...
CVE-2026-19906 pkp pkp-lib API Key Generation APIProfileForm.php setData entropy
A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the function setData of the file classes/user/form/APIProfileForm.php of the component API Key Generation. Executing a manipulation of the argument apiKey can lead to insufficient entropy. The attack may b...
CVE-2026-19906 pkp pkp-lib API Key Generation APIProfileForm.php setData entropy
A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the function setData of the file classes/user/form/APIProfileForm.php of the component API Key Generation. Executing a manipulation of the argument apiKey can lead to insufficient entropy. The attack may b...
CVE-2026-19906
CVE-2026-19906 affects pkp-lib versions 3.3.0/3.4.0/3.5.0, specifically the API Key Generation flow in the file APIProfileForm.php by function setData. The issue arises from manipulating the apiKey argument, which can lead to insufficient entropy. Exploitation is described as remote with high com...
EUVD-2026-59789
A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the function setData of the file classes/user/form/APIProfileForm.php of the component API Key Generation. Executing a manipulation of the argument apiKey can lead to insufficient entropy. The attack may b...
CVE-2026-19906
A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the function setData of the file classes/user/form/APIProfileForm.php of the component API Key Generation. Executing a manipulation of the argument apiKey can lead to insufficient entropy. The attack may b...
EUVD-2026-59788
A weakness has been identified in Jinher OA 1.0. Impacted is an unknown function of the file /C6/JHSoft.Web.HrmAttendance/attendanceoutapprove.aspx. This manipulation of the argument httpOID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available ...
CVE-2026-19905
A weakness has been identified in Jinher OA 1.0. Impacted is an unknown function of the file /C6/JHSoft.Web.HrmAttendance/attendanceoutapprove.aspx. This manipulation of the argument httpOID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available ...