Browse CVEs

CRITICAL 9.8 CVE-2025-15026 Missing Authentication for Critical Function vulnerability in Centreon Infra Monitoring centreon-awie (Awie import module) allows Accessing Functiona… Awie 24.04.3 / 24.10.3+ Fix from $2,3002026-01-05 CRITICAL 9.8 CVE-2026-0592 A security flaw has been discovered in code-projects Online Product Reservation System 1.0. This affects an unknown function of the file /handgunner-… Online Product Reservation System Mitigation only Fix from $2,3002026-01-05 CRITICAL 9.8 CVE-2026-0591 A vulnerability was identified in code-projects Online Product Reservation System 1.0. The impacted element is an unknown function of the file /app/c… Online Product Reservation System Mitigation only Fix from $2,3002026-01-05 CRITICAL 9.1 CVE-2023-50897 Unrestricted Upload of File with Dangerous Type vulnerability in Meow Apps Media File Renamer allows Using Malicious Files.This issue affects Media F… Mitigation only Fix from $2,3002026-01-05 CRITICAL 9.8 CVE-2026-0590 A vulnerability was determined in code-projects Online Product Reservation System 1.0. The affected element is an unknown function of the file /app/c… Online Product Reservation System Mitigation only Fix from $2,3002026-01-05 CRITICAL 9.3 CVE-2025-68865 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Infility Infility Global infility-global allows… Mitigation only Fix from $2,3002026-01-05 CRITICAL 9.9 CVE-2025-31048 Unrestricted Upload of File with Dangerous Type vulnerability in Themify Shopo allows Upload a Web Shell to a Web Server.This issue affects Shopo: fr… Mitigation only Fix from $2,3002026-01-05 CRITICAL 9.3 CVE-2025-30633 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team Amazon Native Shopping Recommendations … Mitigation only Fix from $2,3002026-01-05 CRITICAL 9.8 CVE-2026-0585 A security vulnerability has been detected in code-projects Online Product Reservation System 1.0. Impacted is an unknown function of the file /order… Online Product Reservation System Mitigation only Fix from $2,3002026-01-05 CRITICAL 9.8 CVE-2026-0584 A weakness has been identified in code-projects Online Product Reservation System 1.0. This issue affects some unknown processing of the file app/pro… Online Product Reservation System Mitigation only Fix from $2,3002026-01-05 CRITICAL 9.8 CVE-2026-0583 A security flaw has been discovered in code-projects Online Product Reservation System 1.0. This vulnerability affects unknown code of the file app/u… Online Product Reservation System Mitigation only Fix from $2,3002026-01-05 CRITICAL 9.8 CVE-2026-0582 A vulnerability was identified in itsourcecode Society Management System 1.0. This affects an unknown part of the file /admin/edit_activity_query.php… Society Management System Mitigation only Fix from $2,3002026-01-05 CRITICAL 9.8 CVE-2026-0581EPSS 10% A vulnerability was determined in Tenda AC1206 15.03.06.23. Affected by this issue is the function formBehaviorManager of the file /goform/BehaviorMa… Ac1206 Firmware Mitigation only Fix from $2,3002026-01-05 CRITICAL 9.8 CVE-2025-15458 A vulnerability was determined in bg5sbk MiniCMS up to 1.8. This affects an unknown function of the file /mc-admin/post-edit.php of the component Art… Minicms after 1.8 Fix from $2,3002026-01-05 CRITICAL 9.8 CVE-2025-15457 A vulnerability was found in bg5sbk MiniCMS up to 1.8. The impacted element is an unknown function of the file /minicms/mc-admin/post.php of the comp… Minicms after 1.8 Fix from $2,3002026-01-05 CRITICAL 9.1 CVE-2025-15449 A vulnerability was determined in cld378632668 JavaMall up to 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0. Affected is the function delete of the file s… Javamall No fix yet Fix from $2,3002026-01-05 CRITICAL 9.8 CVE-2025-15448 A vulnerability was found in cld378632668 JavaMall up to 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0. This impacts the function Upload of the file src/m… Javamall Mitigation only Fix from $2,3002026-01-05 CRITICAL 9.8 CVE-2026-0579 A vulnerability was found in code-projects Online Product Reservation System 1.0. This affects an unknown part of the file /handgunner-administrator/… Online Product Reservation System Mitigation only Fix from $2,3002026-01-04 CRITICAL 9.8 CVE-2026-0578 A vulnerability has been found in code-projects Online Product Reservation System 1.0. Affected by this issue is some unknown functionality of the fi… Online Product Reservation System Mitigation only Fix from $2,3002026-01-04 CRITICAL 9.8 CVE-2026-0577 A flaw has been found in code-projects Online Product Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file … Online Product Reservation System Mitigation only Fix from $2,3002026-01-04 CRITICAL 9.8 CVE-2026-0576 A vulnerability was detected in code-projects Online Product Reservation System 1.0. Affected is an unknown function of the file /handgunner-administ… Online Product Reservation System Mitigation only Fix from $2,3002026-01-04 CRITICAL 9.8 CVE-2026-0575 A security vulnerability has been detected in code-projects Online Product Reservation System 1.0. This impacts an unknown function of the file /hand… Online Product Reservation System Mitigation only Fix from $2,3002026-01-04 CRITICAL 9.8 CVE-2025-3654 Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an information disclosure vulnerability that allows unauthorized access to device h… Petlibro after 1.7.31 Fix from $2,3002026-01-04 CRITICAL 9.8 CVE-2025-3653 Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an improper access control vulnerability that allows unauthorized device manipulati… Petlibro after 1.7.31 Fix from $2,3002026-01-04 CRITICAL 9.8 CVE-2025-15115 Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an authentication bypass vulnerability that allows unauthenticated attackers to acc… Petlibro after 1.7.31 Fix from $2,3002026-01-04 CRITICAL 9.4 CVE-2025-64125 A vulnerability in Nuvation Energy nCloud VPN Service allowed Network Boundary Bridging.This issue affected the nCloud VPN Service and was fixed on 2… Mitigation only Fix from $2,3002026-01-03 CRITICAL 9.8 CVE-2025-64123 Unintended Proxy or Intermediary vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Network Boundary Bridging.This issue affects Mu… Nplatform after 2.5.1 Fix from $2,3002026-01-02 CRITICAL 9.8 CVE-2025-64121 Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Authentication Bypass.T… Nplatform 2.5.1+ Fix from $2,3002026-01-02 CRITICAL 9.3 CVE-2025-64119 A vulnerability in Nuvation Battery Management System allows Authentication Bypass.This issue affects Battery Management System: through 2.3.9. Mitigation only Fix from $2,3002026-01-02 CRITICAL 9.8 CVE-2026-21450 Bagisto is an open source laravel eCommerce platform. Versions prior to 2.3.10 are vulnerable to server-side template injection via type parameter, w… Bagisto 2.3.10+ Fix from $2,3002026-01-02