Browse CVEs

CRITICAL 9.8 CVE-2026-1176 A security flaw has been discovered in itsourcecode School Management System 1.0. Affected is an unknown function of the file /subject/index.php. Per… School Management System Mitigation only Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-1160 A security vulnerability has been detected in PHPGurukul Directory Management System 1.0. Impacted is an unknown function of the file /index.php of t… Directory Management System Mitigation only Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-1159 A weakness has been identified in itsourcecode Online Frozen Foods Ordering System 1.0. This issue affects some unknown processing of the file /order… Online Frozen Foods Ordering System Mitigation only Fix from $2,3002026-01-19 MEDIUM 5.4 CVE-2026-1154 A flaw has been found in SourceCodester E-Learning System 1.0. This impacts an unknown function of the file /admin/modules/lesson/index.php of the co… E Learning System No fix yet Fix from $1,6002026-01-19 HIGH 8.8 CVE-2026-1150 A security flaw has been discovered in Totolink LR350 9.3.5u.6369_B20220309. Impacted is the function setTracerouteCfg of the file /cgi-bin/cstecgi.c… Lr350 Firmware No fix yet Fix from $1,9502026-01-19 HIGH 8.8 CVE-2026-1149 A vulnerability was identified in Totolink LR350 9.3.5u.6369_B20220309. This issue affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.… Lr350 Firmware No fix yet Fix from $1,9502026-01-19 CRITICAL 9.8 CVE-2026-1133 A vulnerability was determined in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /kmf/folder.jsp of the component HTTP GET … Ksoa Mitigation only Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-1132 A vulnerability was found in Yonyou KSOA 9.0. The affected element is an unknown function of the file /kmf/edit_folder.jsp of the component HTTP GET … Ksoa Mitigation only Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-1131 A vulnerability has been found in Yonyou KSOA 9.0. Impacted is an unknown function of the file /kmc/save_catalog.jsp of the component HTTP GET Parame… Ksoa Mitigation only Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-1130 A flaw has been found in Yonyou KSOA 9.0. This issue affects some unknown processing of the file /worksheet/worksadd_plan.jsp of the component HTTP G… Ksoa Mitigation only Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-1129 A vulnerability was detected in Yonyou KSOA 9.0. This vulnerability affects unknown code of the file /worksheet/worksadd.jsp of the component HTTP GE… Ksoa Mitigation only Fix from $2,3002026-01-19 CRITICAL 9.8 CVE-2026-1124 A security flaw has been discovered in Yonyou KSOA 9.0. Affected by this vulnerability is an unknown functionality of the file /worksheet/work_report… Ksoa Mitigation only Fix from $2,3002026-01-18 CRITICAL 9.8 CVE-2026-1125EPSS 15% A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub_412E7C of the file /goform/set_wifidog_settings.… Dir 823x Firmware Mitigation only Fix from $2,3002026-01-18 CRITICAL 9.8 CVE-2026-1123 A vulnerability was identified in Yonyou KSOA 9.0. Affected is an unknown function of the file /worksheet/work_mod.jsp of the component HTTP GET Para… Ksoa Mitigation only Fix from $2,3002026-01-18 CRITICAL 9.8 CVE-2026-1120 A vulnerability has been found in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /worksheet/del_work.jsp of the component H… Ksoa Mitigation only Fix from $2,3002026-01-18 CRITICAL 9.8 CVE-2026-1121 A vulnerability was found in Yonyou KSOA 9.0. This affects an unknown function of the file /worksheet/del_workplan.jsp of the component HTTP GET Para… Ksoa Mitigation only Fix from $2,3002026-01-18 CRITICAL 9.8 CVE-2026-1122 A vulnerability was determined in Yonyou KSOA 9.0. This impacts an unknown function of the file /worksheet/work_info.jsp of the component HTTP GET Pa… Ksoa Mitigation only Fix from $2,3002026-01-18 CRITICAL 9.8 CVE-2026-1119 A flaw has been found in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/delete_activity.p… Society Management System Mitigation only Fix from $2,3002026-01-18 CRITICAL 9.8 CVE-2026-1118 A vulnerability was detected in itsourcecode Society Management System 1.0. Impacted is an unknown function of the file /admin/add_activity.php. Perf… Society Management System Mitigation only Fix from $2,3002026-01-18 CRITICAL 9.8 CVE-2026-1105 A vulnerability was identified in EasyCMS up to 1.6. This vulnerability affects unknown code of the file /UserAction.class.php. Such manipulation of … Easycms after 1.6 Fix from $2,3002026-01-18 HIGH 8.8 CVE-2026-1066EPSS 5% A vulnerability was detected in kalcaddle kodbox up to 1.61.10. This issue affects some unknown processing of the file /?explorer/index/zip of the co… Kodbox after 1.61.10 Fix from $1,9502026-01-17 CRITICAL 9.8 CVE-2026-1059 A security vulnerability has been detected in FeMiner wms up to 9cad1f1b179a98b9547fd003c23b07c7594775fa. Affected by this vulnerability is an unknow… Warehouse Management System after 2021-11-15 Fix from $2,3002026-01-17 HIGH 7.3 CVE-2026-1050 A flaw has been found in risesoft-y9 Digital-Infrastructure up to 9.6.7. This affects an unknown function of the file source-code/src/main/java/net/r… Mitigation only Fix from $1,9502026-01-17 CRITICAL 9.8 CVE-2026-22708 Cursor is a code editor built for programming with AI. Prior to 2.3, hen the Cursor Agent is running in Auto-Run Mode with Allowlist mode enabled, ce… Cursor 2.3+ Fix from $2,3002026-01-14 HIGH 7.5 CVE-2026-22200EPSS 73% Enhancesoft osTicket versions 1.18.x prior to 1.18.3 and 1.17.x prior to 1.17.7 contain an arbitrary file read vulnerability in the ticket PDF export… Osticket 1.17.7 / 1.18.3+ Fix from $1,9502026-01-12 CRITICAL 9.8 CVE-2026-0852 A security flaw has been discovered in code-projects Online Music Site 1.0. The impacted element is an unknown function of the file /Administrator/PH… Online Music Site Mitigation only Fix from $2,3002026-01-12 CRITICAL 9.8 CVE-2026-0851 A vulnerability was identified in code-projects Online Music Site 1.0. The affected element is an unknown function of the file /Administrator/PHP/Adm… Online Music Site Mitigation only Fix from $2,3002026-01-12 HIGH 7.2 CVE-2026-0850 A vulnerability was determined in code-projects Intern Membership Management System 1.0. Impacted is an unknown function of the file /admin/delete_ac… Intern Membership Management System No fix yet Fix from $1,9502026-01-11 MEDIUM 6.3 CVE-2026-0843 A vulnerability has been found in jiujiujia/victor123/wxw850227 jjjfood and jjjshop_food up to 20260103. This vulnerability affects unknown code of t… Mitigation only Fix from $1,6002026-01-11 HIGH 8.8 CVE-2025-15494 A vulnerability has been found in RainyGao DocSys up to 2.02.37. This affects an unknown function of the file com/DocSystem/mapping/UserMapper.xml. T… Docsys after 2.02.37 Fix from $1,9502026-01-09