Browse CVEs

HIGH 8.8 CVE-2025-11041 A vulnerability has been found in itsourcecode Open Source Job Portal 1.0. Affected by this issue is some unknown functionality of the file /admin/us… Open Source Job Portal No fix yet Fix from $1,9502025-09-26 CRITICAL 9.8 CVE-2025-11036 A vulnerability was identified in code-projects E-Commerce Website 1.0. This affects an unknown function of the file /pages/admin_account_update.php.… E Commerce Website Mitigation only Fix from $2,3002025-09-26 CRITICAL 9.8 CVE-2025-11037 A security flaw has been discovered in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/admin_index_search.p… E Commerce Website Mitigation only Fix from $2,3002025-09-26 CRITICAL 9.8 CVE-2025-11032 A flaw has been found in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. This issue affects some unknown processing of t… Courseselectionsystem after 2017-06-18 Fix from $2,3002025-09-26 CRITICAL 9.8 CVE-2025-11033 A vulnerability has been found in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. Impacted is an unknown function of the… Courseselectionsystem after 2017-06-18 Fix from $2,3002025-09-26 HIGH 8.5 CVE-2025-60118 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Potenzaglobalsolutions PGS Core pgs-core allows… Mitigation only Fix from $1,9502025-09-26 HIGH 8.5 CVE-2025-60109 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup LambertGroup - AllInOne - Content … Mitigation only Fix from $1,9502025-09-26 HIGH 8.5 CVE-2025-60110 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup AllInOne - Banner Rotator all-in-o… Mitigation only Fix from $1,9502025-09-26 HIGH 8.5 CVE-2025-60107 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup LambertGroup - AllInOne - Banner w… Mitigation only Fix from $1,9502025-09-26 HIGH 8.5 CVE-2025-60108 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup LambertGroup - AllInOne - Banner w… Mitigation only Fix from $1,9502025-09-26 HIGH 7.3 CVE-2025-10973 A flaw has been found in JackieDYH Resume-management-system up to fb6b857d852dd796e748ce30c606fe5e61c18273. Affected by this issue is some unknown fu… Mitigation only Fix from $1,9502025-09-25 HIGH 8.8 CVE-2025-59814 This vulnerability allows malicious actors to gain unauthorized access to the Zenitel ICX500 and ICX510 Gateway Billing Admin endpoint, enabling them… Mitigation only Fix from $1,9502025-09-25 HIGH 7.3 CVE-2025-59816 This vulnerability allows attackers to directly query the underlying database, potentially retrieving all data stored in the Billing Admin database, … Mitigation only Fix from $1,9502025-09-25 HIGH 7.3 CVE-2025-10967 A vulnerability was detected in MuFen-mker PHP-Usermm up to 37f2d24e51b04346dfc565b93fc2fc6b37bdaea9. This affects an unknown part of the file /chkus… Mitigation only Fix from $1,9502025-09-25 CRITICAL 9.8 CVE-2025-27261 Ericsson Indoor Connect 8855 contains an SQL injection vulnerability which if exploited can result in unauthorized disclosure or modification of data. Indoor Connect 8855 Firmware 2025.q2+ Fix from $2,3002025-09-25 HIGH 8.7 CVE-2025-40698 SQL injection vulnerability in Prevengos v2.44 by Nedatec Consulting. This vulnerability allows an attacker to retrieve, create, update, and delete d… Mitigation only Fix from $1,9502025-09-25 MEDIUM 6.5 CVE-2025-29084 SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the Upgrade.php fil… Csz Cms No fix yet Fix from $1,6002025-09-23 HIGH 8.2 CVE-2025-10184 The vulnerability allows any application installed on the device to read SMS/MMS data and metadata from the system-provided Telephony provider withou… Mitigation only Fix from $1,9502025-09-23 CRITICAL 9.8 CVE-2025-10857 A security flaw has been discovered in Campcodes Point of Sale System POS 1.0. Affected by this issue is some unknown functionality of the file /logi… Point Of Sale System Mitigation only Fix from $2,3002025-09-23 HIGH 8.8 CVE-2025-10848 A vulnerability was identified in Campcodes Society Membership Information System 1.0. This issue affects some unknown processing of the file /check_… Society Membership Information System No fix yet Fix from $1,9502025-09-23 CRITICAL 9.8 CVE-2025-10851 A security flaw has been discovered in Campcodes Gym Management System 1.0. Impacted is an unknown function of the file /ajax.php?action=login. Perfo… Gym Management System Mitigation only Fix from $2,3002025-09-23 HIGH 8.8 CVE-2025-10844 A vulnerability has been found in Portabilis i-Educar up to 2.10. Affected by this issue is some unknown functionality of the file /module/Cadastro/a… I Educar after 2.10.0 Fix from $1,9502025-09-23 HIGH 8.8 CVE-2025-10845 A vulnerability was found in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /module/ComponenteCurricular/view. The manipula… I Educar after 2.10.0 Fix from $1,9502025-09-23 HIGH 8.8 CVE-2025-10846 A vulnerability was determined in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /module/ComponenteCurricular/ed… I Educar after 2.10.0 Fix from $1,9502025-09-23 CRITICAL 9.8 CVE-2025-10842 A vulnerability was detected in code-projects Online Bidding System 1.0. Affected is an unknown function of the file /administrator/wew.php. Performi… Online Bidding System Mitigation only Fix from $2,3002025-09-23 CRITICAL 9.8 CVE-2025-10843 A flaw has been found in Reservation Online Hotel Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /res… Online Hotel Reservation System Mitigation only Fix from $2,3002025-09-23 CRITICAL 9.8 CVE-2025-10841 A security vulnerability has been detected in code-projects Online Bidding System 1.0. This impacts an unknown function of the file /administrator/we… Online Bidding System Mitigation only Fix from $2,3002025-09-23 HIGH 8.8 CVE-2025-10839 A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. The impacted element is an unknown function of the file /… Pet Grooming Management Software No fix yet Fix from $1,9502025-09-23 HIGH 8.8 CVE-2025-10840 A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown function of the file /admin/print-paym… Pet Grooming Management Software No fix yet Fix from $1,9502025-09-23 CRITICAL 9.8 CVE-2025-10836 A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/print1.php.… Pet Grooming Management Software Mitigation only Fix from $2,3002025-09-23