CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

87079 matches found

EUVD•added 2026/02/27 9:50 p.m.•19 views

EUVD-2026-9080

WeGIA is a web manager for charitable institutions. Prior to version 3.6.5, a critical Remote Code Execution RCE vulnerability exists in the WeGIA application's database restoration functionality. An attacker with administrative access which can be obtained via the previously reported...

10CVSS6.3AI score0.03315EPSS

SaveExploits1References1

CVE•added 2026/02/27 9:50 p.m.•46 views

CVE-2026-28409

WeGIA is a web manager for charitable institutions. Versions prior to 3.6.5 contain a critical Remote Code Execution (RCE) vulnerability (CWE-78, OS command injection) in the database restoration functionality . An attacker with administrative access—obtainable via a previously reported Authentic...

10CVSS6.3AI score0.03315EPSS

SaveIn wildExploits1References1Affected Software1

CVE•added 2026/02/27 7:49 p.m.•37 views

CVE-2026-27832

Group-Office (enterprise CRM/groupware) is affected by an authenticated SQL Injection in the advancedQueryData parameter (comparator) on index.php?r=email/template/emailSelection. Pre-fix versions 26.0.8, 25.0.87, and 6.8.153 process advancedQueryData with a weak allowlist, enabling blind boolean...

8.8CVSS6AI score0.00244EPSS

SaveExploits0References1Affected Software1

EUVD•added 2026/02/27 6:31 p.m.•11 views

EUVD-2019-19722

osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the productsid parameter. Attackers can modify the productsid value in productinfo.php requests and append boolean-based SQL injection...

8.8CVSS6AI score0.00327EPSS

SaveExploits1References4

EUVD•added 2026/02/27 6:31 p.m.•18 views

EUVD-2019-19719

Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'val' parameter. Attackers can send GET requests to the admin/getrecord.php endpoint with malicious 'val' values to extract sensitive databas...

8.8CVSS6AI score0.00315EPSS

SaveExploits1References4

NVD•added 2026/02/27 6:16 p.m.•14 views

CVE-2019-25495

osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the reviewsid parameter. Attackers can send GET requests to productreviewswrite.php with malicious reviewsid values using boolean-based SQL...

8.8CVSS0.00327EPSS

SaveExploits1References3

NVD•added 2026/02/27 6:16 p.m.•21 views

CVE-2019-25496

8.8CVSS0.00327EPSS

SaveExploits1References3

OSV•added 2026/02/27 6:16 p.m.•9 views

CVE-2019-25497

osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the currency parameter. Attackers can send GET requests to shoppingcart.php with malicious currency values using boolean-based SQL injection...

7.5CVSS5.9AI score

SaveExploits0References3

NVD•added 2026/02/27 6:16 p.m.•11 views

CVE-2019-25491

Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the catid parameter. Attackers can send GET requests to the admin/cmsgetpagetitle.php endpoint with malicious catid values to extract sensitive...

8.8CVSS0.00321EPSS

SaveExploits1References3

NVD•added 2026/02/27 6:16 p.m.•15 views

CVE-2019-25490

Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'id' parameter. Attackers can send GET requests to the admin/edit.php endpoint with time-based SQL injection payloads to extract sensitive...

8.8CVSS0.00321EPSS

SaveExploits1References3

NVD•added 2026/02/27 6:16 p.m.•27 views

CVE-2019-25493

8.8CVSS0.00315EPSS

SaveExploits1References3

Vulnrichment•added 2026/02/27 5:23 p.m.•10 views

CVE-2019-25497 osCommerce 2.3.4.1 SQL Injection via currency Parameter

8.8CVSS6AI score0.00327EPSS

SaveExploits1References3

Cvelist•added 2026/02/27 5:23 p.m.•39 views

CVE-2019-25497 osCommerce 2.3.4.1 SQL Injection via currency Parameter

8.8CVSS0.00327EPSS

SaveExploits1References3

attackerkb•added 2026/02/27 5:23 p.m.•9 views

CVE-2019-25497

8.8CVSS6AI score0.00327EPSS

SaveExploits1References3Affected Software1

Cvelist•added 2026/02/27 5:23 p.m.•43 views

CVE-2019-25496 osCommerce 2.3.4.1 SQL Injection via products_id Parameter

8.8CVSS0.00327EPSS

SaveExploits1References3

attackerkb•added 2026/02/27 5:23 p.m.•38 views

CVE-2019-25496

8.8CVSS6AI score0.00327EPSS

SaveExploits1References3Affected Software1

Cvelist•added 2026/02/27 5:23 p.m.•41 views

CVE-2019-25494 Homey BNB V4 SQL Injection Authentication Bypass via Admin Panel

Homey BNB V4 contains an SQL injection vulnerability in the administration panel login that allows unauthenticated attackers to bypass authentication by injecting SQL syntax into username and password fields. Attackers can submit SQL operators like '=' 'or' in both credentials to manipulate the...

8.8CVSS0.00408EPSS

SaveExploits1References3

Vulnrichment•added 2026/02/27 5:23 p.m.•9 views

CVE-2019-25495 osCommerce 2.3.4.1 SQL Injection via reviews_id Parameter

8.8CVSS6AI score0.00327EPSS

SaveExploits1References3

Cvelist•added 2026/02/27 5:23 p.m.•38 views

CVE-2019-25493 Homey BNB V4 SQL Injection via getrecord.php

8.8CVSS0.00315EPSS

SaveExploits1References3

Vulnrichment•added 2026/02/27 5:23 p.m.•9 views

CVE-2019-25493 Homey BNB V4 SQL Injection via getrecord.php

8.8CVSS6AI score0.00315EPSS

SaveExploits1References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by