116887 matches found
CVE-2026-67854
SQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary code...
CVE-2026-51346
A SQL Injection vulnerability exists in StudIP versions 6.0.x before 6.0.3 and 5.4.x before 5.4.12 . The root cause is the improper neutralization of special elements used in an SQL command within the store() functions . This flaw allows a remote attacker to execute arbitrary code and obtain sens...
PT-2026-76774
An issue in ACME mini httpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handle request function...
EUVD-2026-60353
An issue in CGM Germany - CompuGroup Medical CGM ISIS MED 2510.1.0.20 allows a remote attacker to execute arbtirary code via a crafted .dll file...
CVE-2026-67854
SQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary code...
CVE-2026-50770
An issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to escalate privileges via a crafted request...
EUVD-2026-60449
An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...
CVE-2026-68005
An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...
CVE-2026-67918
Directory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain sensitive information via the validatePath function in api/hermes/download endpoint...
CVE-2026-50776
Directory Traversal vulnerability in Pronis Loisirs Billetterie CSE - 04/2026 allows a remote attacker to obtain sensitive information and execute arbitrary code...
CVE-2026-67854
SQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary code...
PT-2026-76743
Cross Site Scripting vulnerability in Squirro Cognitive Search 3.14.2 allows a remote attacker to execute arbtirary code via the Email Notification, Create Evaluation Sets and HTML Editor functions...
ROS-20260817-73-0020
The vulnerability of the Microsoft .NET Framework software platform is related to the execution of operations outside the buffer in memory. Exploitation of this vulnerability can allow a remote attacker to cause service interruptions...
CVE-2026-67854: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary code...
Ghost CMS 6.19.0 Content API SQL Injection
Ghost CMS versions 3.24.0 through 6.19.0 contain an unauthenticated SQL injection vulnerability in the Content API that can allow a remote attacker to read arbitrary information from the application's database. This proof of concept automatically discovers the Content API key and endpoint, uses...
CVE-2026-68005
An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...
CVE-2026-68005
An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...
CVE-2026-51346: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in StudIP 6.0.x before 6.0.3 and 5.4.x before 5.4.12 allows a remote attacker to execute arbitrary code and obtain sensitive information via the store functions...
CVE-2026-50774: Improper Privilege Management
An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role...
CVE-2026-50776: Improper Limitation of a Pathname to a Restricted Directory
Directory Traversal vulnerability in Pronis Loisirs Billetterie CSE - 04/2026 allows a remote attacker to obtain sensitive information and execute arbitrary code...