Menu

Star on GitHub · 3.4k

2026

90,429 vulnerabilities published in 2026.

Results

34,765 of 90,429· Page 224/696
7.3
CVE-2026-86290

A weakness has been identified in SourceCodester Online Voting System 1.0. This affects an unknown function of the file

7.3
CVE-2026-86282

A weakness has been identified in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a13

7.4
CVE-2026-78254

The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative pat

7.5
CVE-2026-14296

When using the Direct XIP update strategy, the main application image starts other cores (i.e. radio core), based on the

7.3
CVE-2026-86277

A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. Impacted

7.3
CVE-2026-86276

A flaw has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This issue affect

7.3
CVE-2026-86273

A weakness has been identified in projeto-siga siga up to 11.1.1. Affected by this issue is the function DownloadExterno

7.3
CVE-2026-86272

A vulnerability was determined in Beijing Meite Software Technology U+Smart Enjoyment WebSite 18.6001.1096.1000. This im

7.3
CVE-2026-86268

A vulnerability was detected in itsourcecode School Management System 1.0. Impacted is an unknown function of the file U

7.8
CVE-2026-86313

Out-of-bounds write vulnerability in Samsung Opensource Walrus allows Overflow Buffers. This issue affects Walrus: af80

7.3
CVE-2026-86263

A vulnerability was detected in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This impacts the fun

7.3
CVE-2026-86262

A security vulnerability has been detected in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This a

7.3
CVE-2026-86261

A weakness has been identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. The impacted eleme

8.4
CVE-2026-20502

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p

8.4
CVE-2026-20501

In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of p

7.3
CVE-2026-86225

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability i

7.3
CVE-2026-86224

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected is the function mysqli_

7.3
CVE-2026-86223

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This impacts the function mysqli_quer

7.3
CVE-2026-86222

A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. This affects the function mysqli

7.3
CVE-2026-86221

A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is the function mysq

7.3
CVE-2026-86220

A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. The affected element is the functi

8.2
CVE-2026-82209

When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a `Set-Co

7.5
CVE-2026-82208

With the wolfSSL backend, when CA caching is enabled and an `CURLOPT_SSL_CTX_FUNCTION` callback replaces the trust store

7.5
CVE-2026-80255

A `Set-Cookie:` header using tab (horizontal tab, ASCII code 9) instead of space (ascii code 32) immediately before the

7.5
CVE-2026-80231

A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a diffe

7.5
CVE-2026-80230

When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that disable standard peer verification (`CURLOPT_SSL_VER

7.5
CVE-2026-80229

When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handl

7.4
CVE-2026-13608

A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpre

8.8
CVE-2026-19633

PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to execute arbitrary code by abusin

7.5
CVE-2026-86259

OpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allowing unauthenticated at

7.3
CVE-2026-86214

A vulnerability was determined in Mstfakts College-Management-System. Impacted is an unknown function of the file Front-

7.3
CVE-2026-86213

A vulnerability was found in Mstfakts College-Management-System. This issue affects the function mysqli_query of the fil

7.5
CVE-2026-86250

h3 versions before 2.0.1-rc.18 fail to validate the chunk count parsed from user-controlled cookie values in setChunkedC

8.1
CVE-2026-86242

Bifrost HTTP transport before 2.0.0 accepts an enabled custom plugin whose path is an HTTP URL through unauthenticated P

7.5
CVE-2022-51009

PocketMine-MP before 4.7.2 fails to properly handle exceptions from the adhocore/json-comment library when parsing skin

7.3
CVE-2026-86211

A flaw has been found in rabindralamsal inventory-management-system 1.0.0. This affects an unknown part of the file inde

7.3
CVE-2026-86210

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vul

7.3
CVE-2026-86209

A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function

7.3
CVE-2026-86208

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This impacts an unknown fun

7.3
CVE-2026-86180

A vulnerability has been found in code-projects Task Management System In PHP 1.0. Affected by this vulnerability is an

7.5
CVE-2026-84219

The Kirki WordPress plugin before 6.3.0 does not hold back every spelling of the HTML entities it decodes when renderin

8.8
CVE-2026-18480

The SureCart WordPress plugin before 4.6.3 does not ensure that the account affected by a customer update is the same a

7.3
CVE-2026-86168

A security flaw has been discovered in code-projects Content Management System 1.0. The affected element is an unknown f

8.8
CVE-2026-86166

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formWanRedirect of the file /boa

7.3
CVE-2026-86162

A vulnerability was determined in SourceCodester Online Voting System 1.0. This affects an unknown function of the file

7.3
CVE-2026-86161

A vulnerability was found in SourceCodester Online Voting System 1.0. The impacted element is an unknown function of the

7.3
CVE-2026-86160

A vulnerability has been found in SourceCodester Online Voting System 1.0. The affected element is an unknown function o

7.3
CVE-2026-86159

A flaw has been found in SourceCodester Online Voting System 1.0. Impacted is an unknown function of the file /ajax.php?

7.5
CVE-2026-18056

The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the access_token parameter

7.5
CVE-2026-67281

RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session

Test your stack for 2026issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.

Watch the demo →