Browse CVEs

HIGH 7.2 CVE-2026-2080EPSS 9% A vulnerability has been found in UTT HiPER 810 1.7.4-141218. This issue affects the function setSysAdm of the file /goform/formUser. The manipulatio… 810 Firmware No fix yet Fix from $1,9502026-02-07 CRITICAL 9.8 CVE-2026-2073 A vulnerability was determined in itsourcecode School Management System 1.0. This affects an unknown function of the file /ramonsys/user/index.php. E… School Management System Mitigation only Fix from $2,3002026-02-07 CRITICAL 10.0 CVE-2026-25520 SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, The return values of functions aren't wrapped. Object.values/Object.entries can be use… Sandboxjs 0.8.29+ Fix from $2,3002026-02-06 CRITICAL 10.0 CVE-2026-25586 SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, a sandbox escape is possible by shadowing hasOwnProperty on a sandbox object, which di… Sandboxjs 0.8.29+ Fix from $2,3002026-02-06 CRITICAL 9.8 CVE-2026-2060 A vulnerability was found in code-projects Simple Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of th… Simple Blood Donor Management System Mitigation only Fix from $2,3002026-02-06 CRITICAL 9.8 CVE-2026-2059 A vulnerability has been found in SourceCodester Medical Center Portal Management System 1.0. Affected is an unknown function of the file /emp_edit1.… Medical Center Portal Management System Mitigation only Fix from $2,3002026-02-06 CRITICAL 9.8 CVE-2026-2058 A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of … Cloudclassroom Php Project Mitigation only Fix from $2,3002026-02-06 CRITICAL 9.8 CVE-2026-2057 A vulnerability was detected in SourceCodester Medical Center Portal Management System 1.0. This affects an unknown function of the file /login.php. … Medical Center Portal Management System Mitigation only Fix from $2,3002026-02-06 CRITICAL 9.8 CVE-2026-2018 A flaw has been found in itsourcecode School Management System 1.0. This affects an unknown part of the file /ramonsys/settings/controller.php. This … School Management System Mitigation only Fix from $2,3002026-02-06 CRITICAL 9.8 CVE-2026-2014 A security flaw has been discovered in itsourcecode Student Management System 1.0. This impacts an unknown function of the file /ramonsys/billing/ind… School Management System Mitigation only Fix from $2,3002026-02-06 CRITICAL 9.8 CVE-2026-2013 A vulnerability was identified in itsourcecode Student Management System 1.0. This affects an unknown function of the file /ramonsys/soa/index.php. S… School Management System Mitigation only Fix from $2,3002026-02-06 CRITICAL 9.8 CVE-2026-2011 A vulnerability was found in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /ramonsys/enrollment… School Management System Mitigation only Fix from $2,3002026-02-06 CRITICAL 9.8 CVE-2026-2012 A vulnerability was determined in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /ramonsys/facul… School Management System Mitigation only Fix from $2,3002026-02-06 HIGH 7.2 CVE-2026-2000EPSS 17% A vulnerability was found in DCN DCME-320 up to 20260121. Impacted is the function apply_config of the file /function/system/basic/bridge_cfg.php of … Dcme 320 Firmware after 20260121 Fix from $1,9502026-02-06 HIGH 8.8 CVE-2026-2008 A vulnerability was detected in abhiphile fermat-mcp up to 47f11def1cd37e45dd060f30cdce346cbdbd6f0a. This vulnerability affects the function eqn_char… Fermat after 2025-10-08 Fix from $1,9502026-02-06 MEDIUM 6.3 CVE-2026-1977 A security vulnerability has been detected in isaacwasserman mcp-vegalite-server up to 16aefed598b8cd897b78e99b907f6e2984572c61. Affected by this vul… Mitigation only Fix from $1,6002026-02-06 HIGH 7.3 CVE-2026-1802 A security flaw has been discovered in Ziroom ZHOME A0101 1.0.1.0. This issue affects the function macAddrClone of the file luci\controller\api\zrMac… Mitigation only Fix from $1,9502026-02-03 MEDIUM 5.4 CVE-2026-24043 jsPDF is a library to generate PDFs in JavaScript. Prior to 4.1.0, user control of the first argument of the addMetadata function allows users to inj… Jspdf 4.1.0+ Fix from $1,6002026-02-02 HIGH 8.8 CVE-2026-1746 A vulnerability was identified in JeecgBoot 3.9.0. This vulnerability affects unknown code of the file /JeecgBoot/sys/api/loadDictItemByKeyword of th… Jeecg Boot No fix yet Fix from $1,9502026-02-02 CRITICAL 9.8 CVE-2026-1701 A security vulnerability has been detected in itsourcecode School Management System 1.0. This issue affects some unknown processing of the file /enro… School Management System Mitigation only Fix from $2,3002026-01-30 HIGH 7.3 CVE-2026-1689 A vulnerability was detected in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. The impacted element is the function checkUserFromLanOrWan of the fil… Hg10 Firmware No fix yet Fix from $1,9502026-01-30 CRITICAL 9.8 CVE-2026-1688 A security vulnerability has been detected in itsourcecode Directory Management System 1.0. The affected element is an unknown function of the file /… Directory Management System Mitigation only Fix from $2,3002026-01-30 HIGH 7.3 CVE-2026-1687 A weakness has been identified in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. Impacted is an unknown function of the file /boaform/formSamba of t… Hg10 Firmware No fix yet Fix from $1,9502026-01-30 HIGH 8.8 CVE-2026-1638 A security flaw has been discovered in Tenda AC21 1.1.1.1/1.dmzip/16.03.08.16. The impacted element is the function mDMZSetCfg of the file /goform/mD… Ac21 Firmware Mitigation only Fix from $1,9502026-01-30 HIGH 8.8 CVE-2026-1625 A vulnerability was detected in D-Link DWR-M961 1.1.47. The impacted element is the function sub_4250E0 of the file /boafrm/formSmsManage of the comp… Dwr M961 Firmware Mitigation only Fix from $1,9502026-01-29 HIGH 8.8 CVE-2026-1624 A security vulnerability has been detected in D-Link DWR-M961 1.1.47. The affected element is an unknown function of the file /boafrm/formLtefotaUpgr… Dwr M961 Firmware Mitigation only Fix from $1,9502026-01-29 MEDIUM 6.3 CVE-2026-1623 A weakness has been identified in Totolink A7000R 4.1cu.4154. Impacted is the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi. This manipulati… A7000r Firmware No fix yet Fix from $1,6002026-01-29 MEDIUM 6.3 CVE-2026-1601 A weakness has been identified in Totolink A7000R 4.1cu.4154. The impacted element is the function setUploadUserData of the file /cgi-bin/cstecgi.cgi… A7000r Firmware No fix yet Fix from $1,6002026-01-29 CRITICAL 9.8 CVE-2026-1595 A vulnerability was detected in itsourcecode Society Management System 1.0. This affects an unknown part of the file /admin/edit_student_query.php. T… Society Management System Mitigation only Fix from $2,3002026-01-29 HIGH 8.8 CVE-2026-1596 A flaw has been found in D-Link DWR-M961 1.1.47. This vulnerability affects the function sub_419920 of the file /boafrm/formLtefotaUpgradeQuectel. Th… Dwr M961 Firmware Mitigation only Fix from $1,9502026-01-29