64886 matches found
CVE-2022-0155 vulnerabilities
Vulnerabilities for packages: arangodb...
EUVD-2026-63194
A flaw has been found in DeDeCMS 3. Affected by this vulnerability is an unknown functionality of the file /include/dialog/selectmediapost.php. Executing a manipulation of the argument uploadfile can lead to unrestricted upload. The attack can be executed remotely. The exploit has been published...
CVE-2026-76799 code-projects Login Registration System SQL Database Backup login_registration_system.sql file access
A weakness has been identified in code-projects Login Registration System 1.0. This affects an unknown function of the file /loginsystem/database/loginregistrationsystem.sql of the component SQL Database Backup Handler. This manipulation causes files or directories accessible. The attack may be...
EUVD-2026-63136
A security flaw has been discovered in TRENDnet TEW-755AP up to 20260702. This affects the function logemailserver of the file /cgi-bin/email.cgi of the component ssi. Performing a manipulation results in command injection. The attack is possible to be carried out remotely. The exploit has been...
EUVD-2026-63165
A vulnerability was identified in chenhg5 cc-connect up to 1.4.1. This affects the function shellExecCommand of the file core/engine.go of the component Management API. Such manipulation of the argument exec leads to os command injection. It is possible to launch the attack remotely. The exploit ...
EUVD-2026-63129
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "user" Splunk role could craft a Dashboard Studio dashboard that runs attacker-controlled Search Processing Language SPL for another authenticated user. The attacker-controlled SPL could access all releva...
CVE-2026-76764 code-projects Employee Management System Admin Login Endpoint aprocess.php sql injection
A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an unknown function of the file /process/aprocess.php of the component Admin Login Endpoint. This manipulation of the argument mailuid causes sql injection. Remote exploitation of the attack is possible...
EUVD-2026-63186
A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an unknown function of the file /process/aprocess.php of the component Admin Login Endpoint. This manipulation of the argument mailuid causes sql injection. Remote exploitation of the attack is possible...
The vulnerability of the PostgreSQL database management system, related to errors in data type mixing, allows a hacker to execute arbitrary code.
The vulnerability of the PostgreSQL database management system is related to errors in data type mixing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
PT-2026-78873
Name of the Vulnerable Software and Affected Versions code-projects Employee Management System version 1.0 Description A SQL injection flaw exists in the Admin Login Endpoint within the /process/aprocess.php file. The issue occurs when the mailuid argument is manipulated, allowing for remote...
The vulnerability of the functions for working with the tsvector and tsquery data types in the PostgreSQL database management system allows a hacker to execute arbitrary code.
The vulnerability of the functions for working with the tsvector and tsquery data types in the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
The vulnerability of the PostgreSQL database management system, related to errors in data type mixing, allows a hacker to execute arbitrary code.
The vulnerability of the PostgreSQL database management system is related to errors in data type mixing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability in the social_login.cgi script of the Zyxel networking device allows attackers to bypass existing security mechanisms.
The vulnerability of the sociallogin.cgi script of the Zyxel networking devices is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms remotely...
The vulnerability of the refint module in the PostgreSQL database management system allows a hacker to execute arbitrary code.
The vulnerability of the refint module in the PostgreSQL database management system is related to errors in data type mixing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of DDL commands in the PostgreSQL database management system allows a hacker to trigger a service failure.
The vulnerability of DDL commands in the PostgreSQL database management system is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...
CVE-2026-76252 Cross-Site Scripting (XSS) through Splunk Web Message Validation in Splunk Enterprise
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.13, an unauthenticated user who tricks another user into visiting a malicious web page could run unauthorized JavaScript in that user's browser. This could allow for unauthorized access to all relevant data available to that user...
CVE-2026-71113
creationtimestamp| type| source ---|---|--- 2026-08-19 18:15:46+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-71095
creationtimestamp| type| source ---|---|--- 2026-08-19 18:15:22+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-72530
creationtimestamp| type| source ---|---|--- 2026-08-19 18:02:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthcttatjf27 2026-08-19 18:11:24+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthdegbfxg2m 2026-08-19 23:00:05+00:00| seen|...