2026

Chamilo is a learning management system. Prior to version 1.11.30, a stored cross-site scripting (XSS) vulnerability exi

Chamilo is a learning management system. Prior to version 1.11.30, a logic vulnerability in the friend request workflow

Chamilo is a learning management system. Prior to version 1.11.30, an input validation vulnerability exists when importi

Chamilo is a learning management system. Prior to version 1.11.30, there is a blind SSRF vulnerability in /index.php via

Chamilo is a learning management system. Prior to version 1.11.30, Chamilo is vulnerable to deserialization of untrusted

Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /ma

Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /pl

Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /pl

Chamilo is a learning management system. Prior to version 1.11.30, there is an OS Command Injection vulnerability in /ma

Chamilo is a learning management system. Prior to version 1.11.30, there is an OS command Injection vulnerability in /pl

sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/advance_search.php

sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/myitem_reuse.php.

code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordteacher_edit.php.

code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordstudent_edit.php.

code-projects Simple Student Alumni System v1.0 is vulnerale to SQL Injection in /TracerStudy/modal_view.php.

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Failure to validate the sizes of `gstup` and `gstdwn` before co

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Failure to validate `pPortMapIndex` may lead to buffer overflow

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by controlling the valu

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by specifying the value

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by controlling the valu

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by controlling the valu

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Failure to validate the value of `usbPartitionName`, which is d

A remote authentication bypass vulnerability  exists in HPE AutoPass License Server (APLS).

An issue has been identified in Arm C1-Pro before r1p2-50eac0, where, under certain conditions, a TLBI+DSB might fail to

A reflected Cross-Site Scripting (XSS) vulnerability in the RaiseError function of Skrol29 TbsZip version 2.17 and earli

In Microsoft Exchange through 2019, Exchange ActiveSync (EAS) configurations on on-premises servers may transmit sensiti

Chamilo is a learning management system. Prior to version 1.11.30, a Stored XSS vulnerability exists in the glossary fun

Chamilo is a learning management system. Prior to version 1.11.30, there is a time-based SQL Injection in found in /main

Chamilo is a learning management system. Prior to version 1.11.30, there is an error-based SQL Injection via POST userFi

Chamilo is a learning management system. Prior to version 1.11.30, there is an error-based SQL Injection via the GET ope

Chamilo is a learning management system. Prior to version 1.11.30, the application performs insufficient validation of d

Chamilo is a learning management system. Prior to version 1.11.30, the application performs insufficient validation of d

Chamilo is a learning management system. Prior to version 1.11.28, parameter from SOAP request is evaluated without filt

Chamilo is a learning management system. Prior to version 1.11.30, a stored cross-site scripting (XSS) vulnerability exi

Chamilo is a learning management system. Prior to version 1.11.28, the OpenId function allows anyone to send requests to

Chamilo is a learning management system. Chamillo is affected by a post-authentication phar unserialize which leads to a

code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/modal_edit.php.

code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordteacher_view.php?te

Mattermost Desktop App versions <=5.13.3 fail to attach listeners restricting navigation to external sites within the Ma

On SimStudio version below to 0.5.74, the `/api/auth/oauth/token` endpoint contains a code path that bypasses all author

On SimStudio version below to 0.5.74, the MongoDB tool endpoints accept arbitrary connection parameters from the caller

DobryCMS's upload file functionality allows an unauthenticated remote attacker to upload files of any type and extension

A Blind SQL injection vulnerability has been identified in DobryCMS.  A remote unauthenticated attacker is able to injec

The CGM CLININET application respond without essential security HTTP headers, exposing users to client‑side attacks such

The CGM CLININET application does not implement any mechanisms that prevent clickjacking attacks, neither HTTP security

The CGM CLININET application uses direct, sequential object identifiers "MessageID" without proper authorization checks.

In the "CheckUnitCodeAndKey.pl" service, the "validateOrgUnit" function is vulnerable to SQL injection.

In the endpoints "/cgi-bin/CliniNET.prd/utils/usrlogstat_simple.pl", "/cgi-bin/CliniNET.prd/utils/usrlogstat.pl", "/cgi-

The CGM CLININET system provides smart card authentication; however, authentication is conducted locally on the client d

The vulnerability enables an attacker to fully bypass authentication in CGM CLININET and gain access to any active user