Vulnerability index

Browse CVEs

4,966 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness InjectionCWE-74 × clear
810 Firmware HIGH 7.2
CVE-2026-2080EPSS 9%

A vulnerability has been found in UTT HiPER 810 1.7.4-141218. This issue affects the function setSysAdm of the file /goform/formUser. The manipulatio…

No fix yet
Fix from $1,950 2026-02-07
School Management System CRITICAL 9.8
CVE-2026-2073

A vulnerability was determined in itsourcecode School Management System 1.0. This affects an unknown function of the file /ramonsys/user/index.php. E…

Mitigation only
Fix from $2,300 2026-02-07
Sandboxjs CRITICAL 10.0
CVE-2026-25520

SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, The return values of functions aren't wrapped. Object.values/Object.entries can be use…

Fix: 0.8.29+
Fix from $2,300 2026-02-06
Sandboxjs CRITICAL 10.0
CVE-2026-25586

SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, a sandbox escape is possible by shadowing hasOwnProperty on a sandbox object, which di…

Fix: 0.8.29+
Fix from $2,300 2026-02-06
Simple Blood Donor Management System CRITICAL 9.8
CVE-2026-2060

A vulnerability was found in code-projects Simple Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of th…

Mitigation only
Fix from $2,300 2026-02-06
Medical Center Portal Management System CRITICAL 9.8
CVE-2026-2059

A vulnerability has been found in SourceCodester Medical Center Portal Management System 1.0. Affected is an unknown function of the file /emp_edit1.…

Mitigation only
Fix from $2,300 2026-02-06
Cloudclassroom Php Project CRITICAL 9.8
CVE-2026-2058

A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of …

Mitigation only
Fix from $2,300 2026-02-06
Medical Center Portal Management System CRITICAL 9.8
CVE-2026-2057

A vulnerability was detected in SourceCodester Medical Center Portal Management System 1.0. This affects an unknown function of the file /login.php. …

Mitigation only
Fix from $2,300 2026-02-06
School Management System CRITICAL 9.8
CVE-2026-2018

A flaw has been found in itsourcecode School Management System 1.0. This affects an unknown part of the file /ramonsys/settings/controller.php. This …

Mitigation only
Fix from $2,300 2026-02-06
School Management System CRITICAL 9.8
CVE-2026-2014

A security flaw has been discovered in itsourcecode Student Management System 1.0. This impacts an unknown function of the file /ramonsys/billing/ind…

Mitigation only
Fix from $2,300 2026-02-06
School Management System CRITICAL 9.8
CVE-2026-2013

A vulnerability was identified in itsourcecode Student Management System 1.0. This affects an unknown function of the file /ramonsys/soa/index.php. S…

Mitigation only
Fix from $2,300 2026-02-06
School Management System CRITICAL 9.8
CVE-2026-2011

A vulnerability was found in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /ramonsys/enrollment…

Mitigation only
Fix from $2,300 2026-02-06
School Management System CRITICAL 9.8
CVE-2026-2012

A vulnerability was determined in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /ramonsys/facul…

Mitigation only
Fix from $2,300 2026-02-06
Dcme 320 Firmware HIGH 7.2
CVE-2026-2000EPSS 17%

A vulnerability was found in DCN DCME-320 up to 20260121. Impacted is the function apply_config of the file /function/system/basic/bridge_cfg.php of …

Fix: after 20260121
Fix from $1,950 2026-02-06
Fermat HIGH 8.8
CVE-2026-2008

A vulnerability was detected in abhiphile fermat-mcp up to 47f11def1cd37e45dd060f30cdce346cbdbd6f0a. This vulnerability affects the function eqn_char…

Fix: after 2025-10-08
Fix from $1,950 2026-02-06
Unclassified MEDIUM 6.3
CVE-2026-1977

A security vulnerability has been detected in isaacwasserman mcp-vegalite-server up to 16aefed598b8cd897b78e99b907f6e2984572c61. Affected by this vul…

Mitigation only
Fix from $1,600 2026-02-06
Unclassified HIGH 7.3
CVE-2026-1802

A security flaw has been discovered in Ziroom ZHOME A0101 1.0.1.0. This issue affects the function macAddrClone of the file luci\controller\api\zrMac…

Mitigation only
Fix from $1,950 2026-02-03
Jspdf MEDIUM 5.4
CVE-2026-24043

jsPDF is a library to generate PDFs in JavaScript. Prior to 4.1.0, user control of the first argument of the addMetadata function allows users to inj…

Fix: 4.1.0+
Fix from $1,600 2026-02-02
Jeecg Boot HIGH 8.8
CVE-2026-1746

A vulnerability was identified in JeecgBoot 3.9.0. This vulnerability affects unknown code of the file /JeecgBoot/sys/api/loadDictItemByKeyword of th…

No fix yet
Fix from $1,950 2026-02-02
School Management System CRITICAL 9.8
CVE-2026-1701

A security vulnerability has been detected in itsourcecode School Management System 1.0. This issue affects some unknown processing of the file /enro…

Mitigation only
Fix from $2,300 2026-01-30
Hg10 Firmware HIGH 7.3
CVE-2026-1689

A vulnerability was detected in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. The impacted element is the function checkUserFromLanOrWan of the fil…

No fix yet
Fix from $1,950 2026-01-30
Directory Management System CRITICAL 9.8
CVE-2026-1688

A security vulnerability has been detected in itsourcecode Directory Management System 1.0. The affected element is an unknown function of the file /…

Mitigation only
Fix from $2,300 2026-01-30
Hg10 Firmware HIGH 7.3
CVE-2026-1687

A weakness has been identified in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. Impacted is an unknown function of the file /boaform/formSamba of t…

No fix yet
Fix from $1,950 2026-01-30
Ac21 Firmware HIGH 8.8
CVE-2026-1638

A security flaw has been discovered in Tenda AC21 1.1.1.1/1.dmzip/16.03.08.16. The impacted element is the function mDMZSetCfg of the file /goform/mD…

Mitigation only
Fix from $1,950 2026-01-30
Dwr M961 Firmware HIGH 8.8
CVE-2026-1625

A vulnerability was detected in D-Link DWR-M961 1.1.47. The impacted element is the function sub_4250E0 of the file /boafrm/formSmsManage of the comp…

Mitigation only
Fix from $1,950 2026-01-29
Dwr M961 Firmware HIGH 8.8
CVE-2026-1624

A security vulnerability has been detected in D-Link DWR-M961 1.1.47. The affected element is an unknown function of the file /boafrm/formLtefotaUpgr…

Mitigation only
Fix from $1,950 2026-01-29
A7000r Firmware MEDIUM 6.3
CVE-2026-1623

A weakness has been identified in Totolink A7000R 4.1cu.4154. Impacted is the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi. This manipulati…

No fix yet
Fix from $1,600 2026-01-29
A7000r Firmware MEDIUM 6.3
CVE-2026-1601

A weakness has been identified in Totolink A7000R 4.1cu.4154. The impacted element is the function setUploadUserData of the file /cgi-bin/cstecgi.cgi…

No fix yet
Fix from $1,600 2026-01-29
Society Management System CRITICAL 9.8
CVE-2026-1595

A vulnerability was detected in itsourcecode Society Management System 1.0. This affects an unknown part of the file /admin/edit_student_query.php. T…

Mitigation only
Fix from $2,300 2026-01-29
Dwr M961 Firmware HIGH 8.8
CVE-2026-1596

A flaw has been found in D-Link DWR-M961 1.1.47. This vulnerability affects the function sub_419920 of the file /boafrm/formLtefotaUpgradeQuectel. Th…

Mitigation only
Fix from $1,950 2026-01-29