Browse CVEs

MEDIUM 6.3 CVE-2026-13530 A vulnerability was identified in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /appointmentdetail.php of… Mitigation only Fix from $1,6002026-06-29 MEDIUM 6.3 CVE-2026-13531 A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /department.php. The … Mitigation only Fix from $1,6002026-06-29 HIGH 7.3 CVE-2026-13527 A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. The affected element is an unknown function of the file /prev… Mitigation only Fix from $1,9502026-06-29 MEDIUM 6.3 CVE-2026-13525 A vulnerability was detected in CodeAstro Human Resource Management System 1.0. This issue affects the function emselectByCode of the file applicatio… Mitigation only Fix from $1,6002026-06-29 HIGH 7.3 CVE-2026-13526 A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /edit_class.php. This mani… Mitigation only Fix from $1,9502026-06-29 MEDIUM 6.3 CVE-2026-13520 A vulnerability was determined in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /appointmentapproval.php o… Mitigation only Fix from $1,6002026-06-29 HIGH 7.3 CVE-2026-13521 A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0/5.php. Affected by this vulnerability is an unknown functional… Mitigation only Fix from $1,9502026-06-29 MEDIUM 5.3 CVE-2026-13501 A security vulnerability has been detected in antlr ANTLR4 up to 4.13.2. Affected by this vulnerability is the function GoTarget of the file tool/src… Mitigation only Fix from $1,6002026-06-28 HIGH 7.3 CVE-2026-13500 A weakness has been identified in antlr ANTLR4 up to 4.13.2. Affected is an unknown function of the file tool/src/org/antlr/v4/codegen/model/OutputFi… Mitigation only Fix from $1,9502026-06-28 MEDIUM 6.3 CVE-2026-13496 A vulnerability was found in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /ajaxmedicine.php. … Mitigation only Fix from $1,6002026-06-28 MEDIUM 6.3 CVE-2026-13497 A vulnerability was determined in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /appointment.p… Mitigation only Fix from $1,6002026-06-28 HIGH 7.3 CVE-2026-13498 A vulnerability was identified in yashpokharna2555 restaurent-management-system. This affects an unknown function of the file /forgotpassword.php of … Mitigation only Fix from $1,9502026-06-28 HIGH 7.3 CVE-2026-13488 A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0/7.php. Affected by this vulnerability is an unknown funct… Mitigation only Fix from $1,9502026-06-28 HIGH 7.3 CVE-2026-13487 A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /archive.php. The… Mitigation only Fix from $1,9502026-06-28 HIGH 7.3 CVE-2026-13486 A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/6.php. This impacts an unknown function of the file /preview6.… Mitigation only Fix from $1,9502026-06-28 HIGH 7.3 CVE-2026-13485 A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown function of the file /preview.php. Perform… Mitigation only Fix from $1,9502026-06-28 MEDIUM 5.0 CVE-2026-57522 Bitwarden Server before 2026.5.0 contains a JSON injection vulnerability in IntegrationTemplateProcessor.ReplaceTokens(), which substitutes user-cont… Server 2026.5.0+ Fix from $1,6002026-06-25 MEDIUM 5.5 CVE-2026-0864 When using the "configparser" module to write configuration files containing multi-line text values with carriage return characters (\r) the resultin… Python Fix unknown Fix from $1,6002026-06-23 CRITICAL 9.6 CVE-2026-50574 yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, if aria2c is used as an external downloader for a fragmented manifest format (s… Yt Dlp 2026.06.09+ Fix from $2,3002026-06-23 HIGH 7.8 CVE-2026-12822 A vulnerability was identified in langflow-ai langflow up to 1.9.3. This affects an unknown function of the component Bundle URL Loader. The manipula… Langflow 1.9.3+ Fix from $1,9502026-06-22 MEDIUM 6.3 CVE-2026-12810 A security flaw has been discovered in Edimax BR-6478AC V2 1.23. Affected by this vulnerability is the function mp of the file /goform/mp of the comp… Mitigation only Fix from $1,6002026-06-21 MEDIUM 6.3 CVE-2026-12809 A vulnerability was identified in Edimax BR-6478AC V2 1.23. Affected is the function wiz_5in1_redirect of the file /goform/wiz_5in1_redirect of the c… Mitigation only Fix from $1,6002026-06-21 MEDIUM 6.3 CVE-2026-12807 A vulnerability was found in Edimax BR-6478AC V2 1.23. This affects the function setWAN of the file /goform/setWAN of the component POST Request Hand… Mitigation only Fix from $1,6002026-06-21 MEDIUM 6.3 CVE-2026-12808 A vulnerability was determined in Edimax BR-6478AC V2 1.23. This impacts the function stainfo of the file /goform/stainfo of the component POST Reque… Mitigation only Fix from $1,6002026-06-21 MEDIUM 6.3 CVE-2026-12776 A flaw has been found in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. This affects an unknown part of the file /i… Mitigation only Fix from $1,6002026-06-21 HIGH 7.3 CVE-2026-12775 A vulnerability was detected in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. Affected by this issue is some unkno… Mitigation only Fix from $1,9502026-06-21 HIGH 7.2 CVE-2025-27511 GeoServer is an open source server that allows users to share and edit geospatial data. Prior to version 2.27.0 of the GeoServer DB2 DataStore Extens… Geoserver 2.27.0+ Fix from $1,9502026-06-18 HIGH 8.1 CVE-2026-50107 When NGINX Plus or NGINX Open Source is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configu… Nginx Gateway Fabric 2.6.4+ Fix from $1,9502026-06-17 MEDIUM 6.3 CVE-2026-20220 A vulnerability in the web-based management interface of Cisco Crosswork Network Controller could allow an authenticated, remote attacker to exe… Crosswork Network Controller 7.1.3+ Fix from $1,6002026-06-17 MEDIUM 6.5 CVE-2026-11311 When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configuration generator comp… Nginx Gateway Fabric 2.6.4+ Fix from $1,6002026-06-17