238980 matches found
CVE-2026-55703
creationtimestamp| type| source ---|---|--- 2026-08-19 20:35:05+00:00| published-proof-of-concept| https://github.com/grokability/snipe-it/security/advisories/GHSA-r9r3-g9fp-3q4q...
CVE-2026-76574
A flaw has been found in code-projects Hospital Information System 1.0. The impacted element is the function User::login of the file includes/users/UsersController.php of the component User Login Handler. This manipulation of the argument email causes sql injection. The attack is possible to be...
CVE-2026-76574 code-projects Hospital Information System User Login UsersController.php login sql injection
A flaw has been found in code-projects Hospital Information System 1.0. The impacted element is the function User::login of the file includes/users/UsersController.php of the component User Login Handler. This manipulation of the argument email causes sql injection. The attack is possible to be...
EUVD-2026-62836
A flaw has been found in code-projects Hospital Information System 1.0. The impacted element is the function User::login of the file includes/users/UsersController.php of the component User Login Handler. This manipulation of the argument email causes sql injection. The attack is possible to be...
CVE-2026-76574
code-projects Hospital Information System 1.0 contains a SQL injection vulnerability in the User::login function within includes/users/UsersController.php (User Login Handler component). Manipulation of the email argument allows a remote, unauthenticated attacker to inject SQL commands. The CVSS ...
EUVD-2026-62704
Download of code without integrity check, inclusion of functionality from untrusted control sphere, and cleartext transmission of sensitive information vulnerability in Ozols Grupa OZOLS on Windows caused by an abandoned auto-update domain. Affected component: the automatic update channel...
CVE-2026-60779
creationtimestamp| type| source ---|---|--- 2026-08-19 18:17:25+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-61518
ISPConfig contains an authenticated SQL injection vulnerability in the Remote API. The primaryid parameter passed to delete and update API methods is concatenated directly into SQL WHERE clauses without integer casting or parameterized query binding. The built-in SQL injection scanner does not...
CVE-2026-60820
creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:47+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-71049
creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:38+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2025-14603
The application component processes user-supplied parameters insecurely, passing them into SQL queries. This can enable blind SQL injection, potentially exposing database contents or causing the application to become unresponsive. Apply patch from vendor https://vsdesk.ru/ . Versions 14.0101 and...
CVE-2026-71042
creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:20+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-62455
creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:15+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-60798
creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:02+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-61321
creationtimestamp| type| source ---|---|--- 2026-08-19 18:15:48+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-62586
creationtimestamp| type| source ---|---|--- 2026-08-19 18:15:02+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-61281
creationtimestamp| type| source ---|---|--- 2026-08-19 17:52:41+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-70902
creationtimestamp| type| source ---|---|--- 2026-08-19 17:52:36+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...