Lucene search
+L

296026 matches found

NVD
NVD
•added 2026/09/23 12:17 a.m.•25 views

CVE-2026-95868

A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Affected by this issue is the function mysqliquery of the file admin/displaymenu.php of the component Search Form. This manipulation of the argument s1 causes sql injectio...

6.5CVSS0.00333EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/23 12:00 a.m.•51 views

CVE-2026-95868 AdithyaYelloju Restaurant-Management-System Search Form display_menu.php mysqli_query sql injection

A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Affected by this issue is the function mysqliquery of the file admin/displaymenu.php of the component Search Form. This manipulation of the argument s1 causes sql injectio...

6.5CVSS0.00333EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2026/09/23 12:00 a.m.•16 views

CVE-2026-95868 AdithyaYelloju Restaurant-Management-System Search Form display_menu.php mysqli_query sql injection

A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Affected by this issue is the function mysqliquery of the file admin/displaymenu.php of the component Search Form. This manipulation of the argument s1 causes sql injectio...

5.3CVSS5.4AI score
SaveExploits0References8
CVE
CVE
•added 2026/09/23 12:00 a.m.•29 views

CVE-2026-95868

A SQL injection vulnerability exists in the Search Form component of the AdithyaYelloju Restaurant-Management-System (up to commit 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c). The flaw is caused by the improper handling of the s1 argument within the mysqli_query function in the admin/display_menu.p...

6.5CVSS6.2AI score0.00333EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/23 12:00 a.m.•19 views

EUVD-2026-84989

A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Affected by this issue is the function mysqliquery of the file admin/displaymenu.php of the component Search Form. This manipulation of the argument s1 causes sql injectio...

6.5CVSS6.2AI score0.00333EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/23 12:00 a.m.•15 views

CVE-2026-95868 AdithyaYelloju Restaurant-Management-System Search Form display_menu.php mysqli_query sql injection

A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Affected by this issue is the function mysqliquery of the file admin/displaymenu.php of the component Search Form. This manipulation of the argument s1 causes sql injectio...

6.5CVSS6.2AI score0.00333EPSS
SaveExploits0References6
Redos
Redos
•added 2026/09/23 12:00 a.m.•19 views

ROS-20260923-73-0079

The vulnerability of the ttctimerprobe function in the drivers/clocksource/timer-cadence-ttc.c module of the Linux kernel is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

6.1AI score0.0021EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/09/23 12:00 a.m.•10 views

NVIDIA Display Driver Guest Driver System Failure Information Disclosure

The vulnerability of NVIDIA Display Driver and Guest drivers for virtual graphics processors from NVIDIA is related to the disclosure of information. Exploiting this vulnerability can allow attackers to cause system failures and disclose protected information...

6.5CVSS6.4AI score0.00155EPSS
SaveExploits0References3Affected Software11
BDU FSTEC
BDU FSTEC
•added 2026/09/23 12:00 a.m.•14 views

OpenEXR unpack_32bit() Buffer Overflow DoS

The vulnerability of the unpack32bit function in software for storing OpenEXR images with a wide dynamic range of brightness levels is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

5.5CVSS6.7AI score0.00172EPSS
SaveExploits0References5Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/09/23 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-83597

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netdata is an open source observability tool. From version 2.0.0 until 2.10.4, Netdata Windows Agent MSI repair launches powershell.exe and wevtutil.exe as...

7CVSS6.6AI score0.00139EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•17 views

CVE-2026-84724: Improper Neutralization of Argument Delimiters in a Command

An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The system-job template launch endpoint stores a user-supplied "days" variable without running the integer validation defined elsewhere for that field, and the dispatcher flattens t...

6.6CVSS6.1AI score0.0029EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•18 views

CVE-2026-18185: Missing Authentication for Critical Function

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to access sensitive information and modify system configurations due to missing authentication for a critical function...

7.3CVSS6AI score0.0046EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•17 views

CVE-2026-91812: Improper Certificate Validation

A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows man-in-the-middle attackers to bypass certificate validation and package integrity checks, potentially enabling arbitrary code execution with system privileges...

8.1CVSS7.5AI score0.00139EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•23 views

CVE-2026-95957: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This issue affects the function prepend of the file studentsignup.php of the component Self-Registration. Performing a manipulation of the argument fullname results in cross site scripting. Remote...

5.3CVSS4AI score0.0047EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•16 views

CVE-2026-95927: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function of the file /reviewer0/admins/assessments/pretest/exam-delete.php. Such manipulation of the argument testid leads to sql injection. The attack may be performed from remote. The...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•20 views

CVE-2026-95926: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown function of the file /reviewer0/admins/assessments/pretest/btnfunctions.php?action=update. This manipulation of the argument testid causes sql injection. The attack is possib...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•19 views

CVE-2026-95925: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer0/admins/assessments/databank/btnfunctions.php?action=update. The manipulation of the argument difficultyid results in sql injection. The attack can ...

7.5CVSS6.9AI score0.00431EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•20 views

CVE-2026-95924: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer0/admins/assessments/databank/btnfunctions.php?action=add. The manipulation of the argument difficultyid leads to sql injection. Remote exploitation of the...

7.5CVSS6.9AI score0.00431EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•14 views

CVE-2026-95833: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in itsourcecode Leave Management System 1.0. Impacted is an unknown function of the file /module/leavetype/index.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public a...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/23 12:00 a.m.•11 views

PT-2026-97550

Name of the Vulnerable Software and Affected Versions Ansible Automation Platform automation-controller affected versions not specified Description An argument-injection flaw exists in the system-job subsystem. The system-job template launch endpoint fails to perform integer validation on the...

6.6CVSS6.2AI score0.0029EPSS
SaveExploits0References11
Rows per page
Query Builder