Vulnerability index

Browse CVEs

4,966 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness InjectionCWE-74 × clear
School Management System CRITICAL 9.8
CVE-2026-1176

A security flaw has been discovered in itsourcecode School Management System 1.0. Affected is an unknown function of the file /subject/index.php. Per…

Mitigation only
Fix from $2,300 2026-01-19
Directory Management System CRITICAL 9.8
CVE-2026-1160

A security vulnerability has been detected in PHPGurukul Directory Management System 1.0. Impacted is an unknown function of the file /index.php of t…

Mitigation only
Fix from $2,300 2026-01-19
Online Frozen Foods Ordering System CRITICAL 9.8
CVE-2026-1159

A weakness has been identified in itsourcecode Online Frozen Foods Ordering System 1.0. This issue affects some unknown processing of the file /order…

Mitigation only
Fix from $2,300 2026-01-19
E Learning System MEDIUM 5.4
CVE-2026-1154

A flaw has been found in SourceCodester E-Learning System 1.0. This impacts an unknown function of the file /admin/modules/lesson/index.php of the co…

No fix yet
Fix from $1,600 2026-01-19
Lr350 Firmware HIGH 8.8
CVE-2026-1150

A security flaw has been discovered in Totolink LR350 9.3.5u.6369_B20220309. Impacted is the function setTracerouteCfg of the file /cgi-bin/cstecgi.c…

No fix yet
Fix from $1,950 2026-01-19
Lr350 Firmware HIGH 8.8
CVE-2026-1149

A vulnerability was identified in Totolink LR350 9.3.5u.6369_B20220309. This issue affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.…

No fix yet
Fix from $1,950 2026-01-19
Ksoa CRITICAL 9.8
CVE-2026-1133

A vulnerability was determined in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /kmf/folder.jsp of the component HTTP GET …

Mitigation only
Fix from $2,300 2026-01-19
Ksoa CRITICAL 9.8
CVE-2026-1132

A vulnerability was found in Yonyou KSOA 9.0. The affected element is an unknown function of the file /kmf/edit_folder.jsp of the component HTTP GET …

Mitigation only
Fix from $2,300 2026-01-19
Ksoa CRITICAL 9.8
CVE-2026-1131

A vulnerability has been found in Yonyou KSOA 9.0. Impacted is an unknown function of the file /kmc/save_catalog.jsp of the component HTTP GET Parame…

Mitigation only
Fix from $2,300 2026-01-19
Ksoa CRITICAL 9.8
CVE-2026-1130

A flaw has been found in Yonyou KSOA 9.0. This issue affects some unknown processing of the file /worksheet/worksadd_plan.jsp of the component HTTP G…

Mitigation only
Fix from $2,300 2026-01-19
Ksoa CRITICAL 9.8
CVE-2026-1129

A vulnerability was detected in Yonyou KSOA 9.0. This vulnerability affects unknown code of the file /worksheet/worksadd.jsp of the component HTTP GE…

Mitigation only
Fix from $2,300 2026-01-19
Ksoa CRITICAL 9.8
CVE-2026-1124

A security flaw has been discovered in Yonyou KSOA 9.0. Affected by this vulnerability is an unknown functionality of the file /worksheet/work_report…

Mitigation only
Fix from $2,300 2026-01-18
Dir 823x Firmware CRITICAL 9.8
CVE-2026-1125EPSS 15%

A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub_412E7C of the file /goform/set_wifidog_settings.…

Mitigation only
Fix from $2,300 2026-01-18
Ksoa CRITICAL 9.8
CVE-2026-1123

A vulnerability was identified in Yonyou KSOA 9.0. Affected is an unknown function of the file /worksheet/work_mod.jsp of the component HTTP GET Para…

Mitigation only
Fix from $2,300 2026-01-18
Ksoa CRITICAL 9.8
CVE-2026-1120

A vulnerability has been found in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /worksheet/del_work.jsp of the component H…

Mitigation only
Fix from $2,300 2026-01-18
Ksoa CRITICAL 9.8
CVE-2026-1121

A vulnerability was found in Yonyou KSOA 9.0. This affects an unknown function of the file /worksheet/del_workplan.jsp of the component HTTP GET Para…

Mitigation only
Fix from $2,300 2026-01-18
Ksoa CRITICAL 9.8
CVE-2026-1122

A vulnerability was determined in Yonyou KSOA 9.0. This impacts an unknown function of the file /worksheet/work_info.jsp of the component HTTP GET Pa…

Mitigation only
Fix from $2,300 2026-01-18
Society Management System CRITICAL 9.8
CVE-2026-1119

A flaw has been found in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/delete_activity.p…

Mitigation only
Fix from $2,300 2026-01-18
Society Management System CRITICAL 9.8
CVE-2026-1118

A vulnerability was detected in itsourcecode Society Management System 1.0. Impacted is an unknown function of the file /admin/add_activity.php. Perf…

Mitigation only
Fix from $2,300 2026-01-18
Easycms CRITICAL 9.8
CVE-2026-1105

A vulnerability was identified in EasyCMS up to 1.6. This vulnerability affects unknown code of the file /UserAction.class.php. Such manipulation of …

Fix: after 1.6
Fix from $2,300 2026-01-18
Kodbox HIGH 8.8
CVE-2026-1066EPSS 5%

A vulnerability was detected in kalcaddle kodbox up to 1.61.10. This issue affects some unknown processing of the file /?explorer/index/zip of the co…

Fix: after 1.61.10
Fix from $1,950 2026-01-17
Warehouse Management System CRITICAL 9.8
CVE-2026-1059

A security vulnerability has been detected in FeMiner wms up to 9cad1f1b179a98b9547fd003c23b07c7594775fa. Affected by this vulnerability is an unknow…

Fix: after 2021-11-15
Fix from $2,300 2026-01-17
Unclassified HIGH 7.3
CVE-2026-1050

A flaw has been found in risesoft-y9 Digital-Infrastructure up to 9.6.7. This affects an unknown function of the file source-code/src/main/java/net/r…

Mitigation only
Fix from $1,950 2026-01-17
Cursor CRITICAL 9.8
CVE-2026-22708

Cursor is a code editor built for programming with AI. Prior to 2.3, hen the Cursor Agent is running in Auto-Run Mode with Allowlist mode enabled, ce…

Fix: 2.3+
Fix from $2,300 2026-01-14
Osticket HIGH 7.5
CVE-2026-22200EPSS 73%

Enhancesoft osTicket versions 1.18.x prior to 1.18.3 and 1.17.x prior to 1.17.7 contain an arbitrary file read vulnerability in the ticket PDF export…

Fix: 1.17.7 / 1.18.3+
Fix from $1,950 2026-01-12
Online Music Site CRITICAL 9.8
CVE-2026-0852

A security flaw has been discovered in code-projects Online Music Site 1.0. The impacted element is an unknown function of the file /Administrator/PH…

Mitigation only
Fix from $2,300 2026-01-12
Online Music Site CRITICAL 9.8
CVE-2026-0851

A vulnerability was identified in code-projects Online Music Site 1.0. The affected element is an unknown function of the file /Administrator/PHP/Adm…

Mitigation only
Fix from $2,300 2026-01-12
Intern Membership Management System HIGH 7.2
CVE-2026-0850

A vulnerability was determined in code-projects Intern Membership Management System 1.0. Impacted is an unknown function of the file /admin/delete_ac…

No fix yet
Fix from $1,950 2026-01-11
Unclassified MEDIUM 6.3
CVE-2026-0843

A vulnerability has been found in jiujiujia/victor123/wxw850227 jjjfood and jjjshop_food up to 20260103. This vulnerability affects unknown code of t…

Mitigation only
Fix from $1,600 2026-01-11
Docsys HIGH 8.8
CVE-2025-15494

A vulnerability has been found in RainyGao DocSys up to 2.02.37. This affects an unknown function of the file com/DocSystem/mapping/UserMapper.xml. T…

Fix: after 2.02.37
Fix from $1,950 2026-01-09