292417 matches found
CVE-2026-108975: Unrestricted Upload of File with Dangerous Type
A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the function moveuploadedfile of the file admin/addadmin.php. Performing a manipulation of the argument image results in unrestricted upload. The attack may be initiated remotely. The...
CVE-2026-108974: Unrestricted Upload of File with Dangerous Type
A vulnerability was identified in SourceCodester E-Learning System 1.0. This affects the function saveusers of the file /classes/Users.php?f=save. Such manipulation of the argument img leads to unrestricted upload. The attack can be launched remotely. The exploit is publicly available and might b...
CVE-2026-83835: Buffer Over-read
Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally...
CVE-2026-83830: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83785: Use After Free
Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83763: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in Windows Input System allows an authorized attacker to elevate privileges locally...
CVE-2026-85931: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to execute code over a network...
CVE-2026-70116: Stack-based Buffer Overflow
Stack-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to bypass a security feature with a physical attack...
CVE-2026-109523: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this vulnerability is an unknown functionality of the file Admin/getclinic.php of the component AJAX Endpoint. The manipulation of the argument city/cid results i...
CVE-2026-109522: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected is an unknown function of the file Admin/deleteclinic.php of the component Admin CRUD Endpoint. The manipulation of the argument cid/did leads to sql injection...
CVE-2026-109605: Improper Authorization
A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0. This affects the function Action::saveuser of the file adminclass.php of the component User Management. The manipulation of the argument Type leads to improper authorization. The attack is possible to be...
CVE-2026-109525: Missing Authorization
A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown part of the file changebookingstatus.php of the component submit2 Handler. Such manipulation of the argument username/timestamp/status leads to...
CVE-2026-109524: Missing Authorization
A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this issue is some unknown functionality of the file Admin/showdoctor.php of the component Admin Display Pages. This manipulation causes missing authorizatio...
CVE-2026-109620: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in SourceCodester Online Reviewer System 1.0. Affected by this vulnerability is the function PDO::prepare of the file login/index.php. Such manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The explo...
CVE-2026-109607: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/admin/query/loginExe.php of the component Login Endpoint. This manipulation of the argument username/pass causes sql injection. It is possible to initiate the attack remotely. Th...
CVE-2026-109521: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown function of the file changebookingstatus.php. Performing a manipulation of the argument dateselected results in sql injection. The attack may be...
CVE-2026-109606: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the function Action::saveuser of the file admin/adminclass.php of the component Account Creation. The manipulation of the argument Name results in sql injection. The attack may be performed from remote...
PT-2026-111462
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Firefox ESR versions prior to 153.5 Thunderbird versions prior to 158 Thunderbird versions prior to 153.5 Description A use-after-free issue exists in the Storage: Bucket File System component. Use-after-free is a...