CVE-2019-25777

The YAML library for Perl (versions before 1.27_001 ) is vulnerable to arbitrary code execution due to an improper control of dynamically-identified variables during the loading of perl/glob documents. An attacker can provide a document that replaces package variables, such as $YAML::LoadCode or ...

CVE-2017-20285

YAML versions before 1.30 for Perl are vulnerable to an issue where a loaded document can trigger the DESTROY method of arbitrary classes. The vulnerability occurs because a perl/hash:Class tag blesses a hash into a class named within the document, and Perl automatically calls the DESTROY method ...

CVE-2026-105246

The SourceCodester Online Reviewer Management System 1.0 is vulnerable to an SQL injection vulnerability within the /reviewer_0/admins/assessments/Subject/btn_functions.php?action=update file. An attacker can initiate this attack remotely by manipulating the Subject argument. The vulnerability al...

CVE-2026-100727

An improper access control vulnerability exists in GROWI that allows an unauthenticated attacker to read files located on non-public pages. This vulnerability is specifically triggered when the file upload setting is configured as "Local" . The impact is the unauthorized disclosure of files, and ...

CVE-2026-105245

The sgl-project sglang library (up to version 0.5.21 ) contains a vulnerability in the HTTP Endpoint component, specifically within the server_info function of the python/sglang/srt/entrypoints/http_server.py file. Manipulation of the api_key argument can result in the cleartext transmission of s...

CVE-2026-105238

The ChatGPTNextWeb NextChat software, version up to 2.16.1 , is vulnerable to a Server-Side Request Forgery (SSRF) . The flaw exists within the proxyHandler function located in app/api/proxy.ts of the Proxy Fallback Handler component. Specifically, an attacker can manipulate the x-base-url argume...

CVE-2026-78371

The File Uploads Addon for WooCommerce WordPress plugin versions before 1.7.6 contains a vulnerability where it fails to verify the identity of users requesting customer-uploaded files. This lack of authorization allows unauthenticated attackers to download files belonging to other customers if t...

CVE-2026-84169

The UPI QR Code Payment Gateway WordPress plugin, affecting versions through 1.4.3 , contains a vulnerability where it fails to verify if a payment-confirmation request belongs to the specific order and customer it claims to confirm. This lack of authorization allows unauthenticated attackers to ...

CVE-2026-13607

The File Uploads Addon for WooCommerce WordPress plugin, in versions through 1.7.6 , is vulnerable to unauthenticated direct file access. The root cause is that customer-uploaded files are stored in a publicly web-accessible uploads directory where the plugin's intended access restrictions are in...

CVE-2026-105237

The linlinjava litemall application (up to version 1.8.0 ) is vulnerable to an improper restriction of excessive authentication attempts within the Login Endpoint component. Specifically, the issue resides in the file litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/web/AdminAuthCon...

CVE-2026-105306

A flaw exists in the Dynamic Client Registration flow of the Keycloak identity and access management server. The registration process fails to filter security-sensitive client attributes during new client creation. An attacker possessing a valid Initial Access Token can register a client that byp...

CVE-2026-105302

A flaw in the User Session Note mapper of the Keycloak identity and access management solution allows for the exposure of sensitive internal credentials. The mapper fails to validate if a requested session note contains federated access tokens from external identity providers. Consequently, a del...

CVE-2026-105233

A session fixation vulnerability exists in the Login Flow component of the kishor-23 food-waste-management-system (specifically within the login.php file). The root cause involves the manipulation of the PHPSESSID argument, which allows for remote exploitation. While the exploit has been disclose...

CVE-2026-105301

A flaw exists in the X.509 client-certificate authenticator of Keycloak , an identity and access management solution. When configured to check certificate revocation via CRL Distribution Points or OCSP , the server may process a specially crafted certificate provided by an attacker. This causes K...

CVE-2026-105232

A SQL injection vulnerability exists in the Registration Page component of the kishor-23 food-waste-management-system (specifically within the delivery/deliverysignup.php file). The flaw is caused by the improper manipulation of the username , email , or location arguments, allowing for remote ex...

CVE-2026-105231

A SQL injection vulnerability exists in the Admin Registration component of the kishor-23 food-waste-management-system . Specifically, an unknown function within the admin/signup.php file fails to properly sanitize inputs, allowing an attacker to manipulate the email , username , or location argu...

CVE-2026-105230

The kishor-23 food-waste-management-system is vulnerable to a SQL injection vulnerability within an unknown function of the delivery/deliverymyord.php file. Attackers can remotely initiate this attack by manipulating the delivery_person_id/order_id arguments. While the exploit has been disclosed ...

CVE-2026-105229

A SQL injection vulnerability exists in the User Registration Endpoint of the kishor-23 food-waste-management-system . The flaw is located in the signup.php file, where improper processing of the email , name , and gender arguments allows for remote exploitation. Due to a rolling release system, ...

CVE-2026-105226

A code injection vulnerability exists in osCommerce osCommerce2 up to version 2.3.4.1 within the Newsletter Management component. The flaw originates from the include function in the admin/newsletters.php file, where manipulating the module argument allows for remote code execution. While the pro...

CVE-2026-105225

A code injection vulnerability exists in osCommerce osCommerce2 versions up to 2.3.4.1 . The flaw resides in the Payment Page component, specifically within the include function of the includes/classes/payment.php file. Attackers can achieve remote code execution by manipulating the MODULE_PAYMEN...

CVE-2026-105188

The code-projects Human Resource Management System 1.0 is vulnerable to a cross-site scripting (XSS) vulnerability within the Live Event History component. Specifically, manipulating the eventSubject argument in the file /views/admin/liveEventHistory.php allows for the execution of malicious scri...

CVE-2026-105187

A SQL injection vulnerability exists in itsourcecode Online Admission System 1.0 within an unknown function of the /admin/key.php file. By manipulating the ID argument, an attacker can initiate a remote attack to execute arbitrary SQL commands. The documents state that the exploit has been disclo...

CVE-2026-105186

A SQL injection vulnerability exists in the itsourcecode Online Admission System 1.0 within an unknown function of the /new.php file. An attacker can exploit this flaw by manipulating the schedid argument, which allows for remote execution. The documents confirm that an exploit has been published...

CVE-2026-105185

A SQL injection vulnerability exists in the itsourcecode Online Admission System 1.0 . The flaw is located within an unknown function of the /admin/examinee.php file, where manipulating the ID argument allows for remote execution of arbitrary SQL commands. The documents state that an exploit is n...

CVE-2026-105184

A security vulnerability exists in itsourcecode Online Admission System 1.0 within an unknown function of the /admin/creteria.php file. Improper handling of the ID argument allows for a SQL injection attack, which can be launched remotely. Public exploits for this vulnerability have been disclose...

CVE-2026-105183

A SQL injection vulnerability exists in the itsourcecode Online Admission System 1.0 within an unknown function of the /admin/confirm.php file. The flaw is caused by improper handling of the schedid argument, which allows for remote exploitation. Public exploit code is available, though no specif...

CVE-2026-105182

A security flaw exists in SourceCodester Online Reviewer Management System 1.0 within the file /reviewer_0/admins/assessments/activities/btn_functions.php?action=update. An SQL injection vulnerability is triggered by manipulating the Title argument. This flaw can be exploited remotely, and the ex...

CVE-2026-105181

A SQL injection vulnerability exists in the itsourcecode Online Admission System 1.0 . The flaw is located in the processing of the register1.php file, where manipulating the fname argument allows for remote exploitation. While the specific processing logic is not detailed in the documents, the v...

CVE-2026-105180

A vulnerability exists in Jeebase version 0.0.1 within the UserService component, specifically affecting the updateUser function located at /user/update/info . An attacker can remotely execute a manipulation of the user/tempUser argument to cause dynamically-determined object attributes (CWE-915,...

CVE-2026-105179

The SourceCodester Drug Recommendation System 1.0 is affected by a vulnerability in the Password Handler component, specifically within the Admin/add_user.php file. A manipulation of the Password argument leads to the missing encryption of sensitive data . This vulnerability is exploitable via re...

CVE-2026-20543

A logic error in the Modem component results in a potential information disclosure vulnerability. This flaw allows for local information disclosure without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: MOLY01645293 (Issue ID: MSV-6761). Expl...

CVE-2026-20542

The apusys component is susceptible to a memory corruption vulnerability caused by a use after free condition. If a malicious actor already possesses System privilege , they can exploit this flaw to achieve a local escalation of privilege . No user interaction is required for exploitation. Remedi...

CVE-2026-20541

A vulnerability in the Modem component allows for a possible out of bounds read due to a missing permission check. An attacker controlling a rogue base station could exploit this to cause a remote denial of service when a User Equipment (UE) connects to it. This attack requires no additional exec...

CVE-2026-20540

A vulnerability in the Modem component allows for an out of bounds read due to a missing bounds check. An attacker controlling a rogue base station could exploit this to cause a remote denial of service (DoS) when a UE connects to it. No additional execution privileges or user interaction are req...

CVE-2026-20539

A vulnerability exists in the Modem component due to a missing bounds check , which can lead to an out of bounds read . An attacker controlling a rogue base station could exploit this to cause a remote denial of service when a User Equipment (UE) connects to it. No additional execution privileges...

CVE-2026-20538

The Modem component is vulnerable to an out of bounds read caused by a missing permission check . This security flaw can result in a remote denial of service if a User Equipment (UE) connects to a rogue base station controlled by an attacker. Exploitation requires no additional execution privileg...

CVE-2026-20537

A memory corruption vulnerability exists in aidl due to a use after free condition. This flaw could allow a malicious actor to achieve local escalation of privilege if they have already obtained System privileges. Exploitation does not require user interaction. Remediation is available via Patch ...

CVE-2026-20536

A memory corruption vulnerability exists in aidl due to a use after free condition. This flaw could allow a malicious actor with System privileges to achieve a local escalation of privilege . Exploitation does not require user interaction. Remediation is addressed in Patch ID: ALPS11242428 (Issue...

CVE-2026-20535

A missing permission check in aidl allows for a local escalation of privilege . A malicious actor who has already obtained System privilege can exploit this vulnerability to gain further elevated access. Exploitation does not require user interaction . Remediation is available via Patch ID: ALPS1...

CVE-2026-20534

A vulnerability exists in the Modem component due to an incorrect bounds check , resulting in a possible out-of-bounds read . An attacker controlling a rogue base station could exploit this to cause a remote denial of service if a user equipment (UE) connects to it. No additional execution privil...

CVE-2026-20533

A vulnerability in the display component allows for a local escalation of privilege due to an integer overflow (CWE-190). If a malicious actor already possesses System privileges, they could exploit this flaw to gain further elevated permissions. This vulnerability does not require user interacti...

CVE-2026-20532

A double free vulnerability exists in apu , which can lead to an application crash . This flaw allows for a local denial of service (DoS) without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: ALPS11249024 (Issue ID: MSV-9168). No specific ex...

CVE-2026-20531

The apu component is vulnerable to a memory corruption issue caused by a use after free condition. This vulnerability can lead to a local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: ALPS11249016 (Issue ID: M...

CVE-2026-20530

A vulnerability exists in the display component due to a missing bounds check , which can lead to an out-of-bounds write . If a malicious actor has already obtained System privilege , this could facilitate a local escalation of privilege . Exploitation does not require user interaction. Remediati...

CVE-2026-20529

A missing bounds check in the battery component can lead to an out-of-bounds write . This vulnerability allows for local escalation of privilege if a malicious actor has already obtained System privilege , and does not require user interaction. Remediation is available via Patch ID: ALPS11276677 ...

CVE-2026-20528

A missing bounds check in ccci can lead to out-of-bounds write and read operations. This vulnerability may result in local information disclosure , memory corruption , crashes , or privilege escalation if an attacker has already obtained System privileges. User interaction is required for exploit...

CVE-2026-20544

A missing bounds check in meta results in a possible out-of-bounds write . This vulnerability could allow an attacker with physical access to the device to achieve local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Pat...

CVE-2026-20588

A missing bounds check in mtee allows for a possible local escalation of privilege . A malicious actor who has already obtained System privilege can exploit this vulnerability to elevate privileges further. No user interaction is required for exploitation. Remediation is available via Patch ID: A...

CVE-2026-20587

A type confusion vulnerability in mtee could allow for a local escalation of privilege . If a malicious actor has already obtained System privilege , they can exploit this flaw to increase their permissions further. Exploitation does not require user interaction. Remediation is available via Patc...

CVE-2026-20579

A vulnerability in vdec allows for an out of bounds write caused by type confusion . This flaw could lead to a local escalation of privilege if an attacker has already secured System privileges. Exploitation does not require user interaction. Remediation information is available via Patch ID: ALP...