Browse CVEs

MEDIUM 6.3 CVE-2026-54370 acl before version 2.4.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that allows local attackers to escalate privil… Mitigation only Fix from $1,6002026-06-29 HIGH 7.1 CVE-2026-54369 acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extend… Mitigation only Fix from $1,9502026-06-29 HIGH 7.3 CVE-2026-13568 A weakness has been identified in SourceCodester Inventory Management System 1.0. This vulnerability affects unknown code of the file /api/users_hand… Mitigation only Fix from $1,9502026-06-29 HIGH 7.3 CVE-2026-13566 A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the f… Mitigation only Fix from $1,9502026-06-29 HIGH 7.3 CVE-2026-13565 A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/1.php. Affected by this vulnerability is an unknown functional… Mitigation only Fix from $1,9502026-06-29 HIGH 8.6 CVE-2026-13165 SzafirHost verifies the downloaded native library archive with one JarFile parser (reading the Central Directory) but extracts native libraries with … Mitigation only Fix from $1,9502026-06-29 MEDIUM 6.9 CVE-2026-12616 The /v1/upload/sbom endpoint extracts the iss claim from the attacker-supplied JWT with signature verification disabled, then interpolates that strin… Mitigation only Fix from $1,6002026-06-29 HIGH 8.8 CVE-2026-12856 A flaw was found in the vscode-java extension, which provides Java language support for Visual Studio Code. The extension incorrectly trusts all Mark… Openshift Dev Spaces Mitigation only Fix from $1,9502026-06-29 HIGH 8.8 CVE-2026-13564 A vulnerability was found in Edimax EW-7478APC 1.04. Affected is the function formPPPoESetup of the file /goform/formPPPoESetup of the component POST… Mitigation only Fix from $1,9502026-06-29 HIGH 8.8 CVE-2026-13563 A vulnerability has been found in Edimax EW-7478APC 1.04. This impacts the function formL2TPSetup of the file /goform/formL2TPSetup of the component … Mitigation only Fix from $1,9502026-06-29 HIGH 8.8 CVE-2026-13562 A flaw has been found in Edimax EW-7478APC 1.04. This affects the function formiNICSiteSurvey of the file /goform/formiNICSiteSurvey of the component… Mitigation only Fix from $1,9502026-06-29 MEDIUM 6.3 CVE-2026-13561 A vulnerability was detected in Edimax EW-7478APC 1.04. The impacted element is the function formiNICbasic of the file /goform/formiNICbasic of the c… Mitigation only Fix from $1,6002026-06-29 MEDIUM 6.3 CVE-2026-13560 A security vulnerability has been detected in Edimax EW-7478APC 1.04. The affected element is the function formAccept of the file /goform/formAccept … Mitigation only Fix from $1,6002026-06-29 HIGH 7.3 CVE-2026-13559 A weakness has been identified in code-projects Real State Services 1.0. Impacted is an unknown function of the file /single-list_sale.php?action=add… Mitigation only Fix from $1,9502026-06-29 HIGH 7.1 CVE-2026-57346 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Epiphyt Embed Privacy allows Path Traversal. This is… Mitigation only Fix from $1,9502026-06-29 HIGH 7.3 CVE-2026-13555 A vulnerability was found in itsourcecode Online Hotel Management System 1.0. Affected by this issue is some unknown functionality of the file /admin… Mitigation only Fix from $1,9502026-06-29 HIGH 7.3 CVE-2026-13553 A flaw has been found in itsourcecode Online Hotel Management System 1.0. Affected is an unknown function of the file /admin/mod_amenities/controller… Mitigation only Fix from $1,9502026-06-29 HIGH 7.3 CVE-2026-13552 A vulnerability was detected in itsourcecode Online Hotel Management System 1.0. This impacts an unknown function of the file /admin/mod_amenities/co… Mitigation only Fix from $1,9502026-06-29 MEDIUM 6.9 CVE-2026-9267 Eclipse tinydtls before commit b3efd41ad111a4920f599f51ffa4f5e9f1e72221 contains an out-of-bounds read vulnerability in the check_server_certificate(… Mitigation only Fix from $1,6002026-06-29 MEDIUM 5.1 CVE-2026-57965 A flaw was found in spice-vdagent. A malicious or compromised SPICE host can trigger an integer overflow by sending a specially crafted message. This… Enterprise Linux Mitigation only Fix from $1,6002026-06-29 HIGH 7.3 CVE-2026-22078 Because O+ Connect's IPC service does not authenticate clients, external applications can escalate privileges and perform sensitive actions through t… Mitigation only Fix from $1,9502026-06-29 HIGH 7.3 CVE-2026-13551 A security vulnerability has been detected in itsourcecode Baptism Information Management System 1.0. This affects an unknown function of the file /e… Mitigation only Fix from $1,9502026-06-29 HIGH 7.3 CVE-2026-13550 A weakness has been identified in itsourcecode Baptism Information Management System 1.0. The impacted element is an unknown function of the file /de… Mitigation only Fix from $1,9502026-06-29 MEDIUM 5.4 CVE-2026-13549 A security flaw has been discovered in CodeAstro Complaint Management System 1.0. The affected element is the function deletereport of the file appli… Mitigation only Fix from $1,6002026-06-29 MEDIUM 6.3 CVE-2026-13548 A vulnerability was identified in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /doctortimings.php. The ma… Mitigation only Fix from $1,6002026-06-29 HIGH 7.3 CVE-2026-13547 A vulnerability was determined in Hanwang e-Face General Management Platform 6.3.5.4. This issue affects some unknown processing of the file /manage/… Mitigation only Fix from $1,9502026-06-29 HIGH 7.3 CVE-2026-13546 A vulnerability was found in Feehi CMS up to 2.1.1. This vulnerability affects unknown code of the file /api/articles of the component REST API Endpo… Mitigation only Fix from $1,9502026-06-29 HIGH 8.8 CVE-2026-13545 A vulnerability has been found in D-Link DCS-935L 1.10.01. This affects the function sub_400E40 of the file setconf.cgi of the component POST Paramet… Dcs 935l Firmware No fix yet Fix from $1,9502026-06-29 MEDIUM 6.3 CVE-2026-13544 A flaw has been found in Feehi CMS up to 2.1.1. Affected by this issue is some unknown functionality of the file /api/users of the component API. Thi… Mitigation only Fix from $1,6002026-06-29 MEDIUM 6.3 CVE-2026-13542 A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /doctorprofile… Mitigation only Fix from $1,6002026-06-29