Browse CVEs

HIGH 7.3 CVE-2025-67407 Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in update_student.php via parameters fname and student_class. No fix yet Fix from $1,9502026-07-29 HIGH 7.3 CVE-2025-67406 https://www.sourcecodester.com Advocate office management system 1.0 is affected by: SQL Injection. The impact is: execute arbitrary code (remote). T… No fix yet Fix from $1,9502026-07-29 HIGH 7.3 CVE-2025-67405 Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in update_password.php via the parameter new_password. No fix yet Fix from $1,9502026-07-29 CRITICAL 9.8 CVE-2025-67404 Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in save_stud.php via the parameters fname, lname, and student_cla… No fix yet Fix from $2,3002026-07-29 CRITICAL 9.8 CVE-2025-67403 Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in update_class.php via the parameter class_name. No fix yet Fix from $2,3002026-07-29 MEDIUM 6.6 CVE-2026-67438 OliveTin gives access to predefined shell commands from a web interface. From 3000.2.0 until 3000.17.0, the service/internal/executor/arguments.go ch… Patch available Fix from $1,6002026-07-29 HIGH 7.5 CVE-2026-50782 Jinher OA C6 contains an XML External Entity (XXE) injection vulnerability in the /c6/JHSoft.Web.HrmAttendance/sp_manager_getUserlist.aspx/GetXmlHttp… No fix yet Fix from $1,9502026-07-29 HIGH 7.5 CVE-2026-67437 OliveTin gives access to predefined shell commands from a web interface. From 3000.0.0 until 3000.17.0, the service/internal/auth/otoauth2/restapi_au… Patch available Fix from $1,9502026-07-29 MEDIUM 6.5 CVE-2026-65975 Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. In versions 1.88.0 up to but not including 1.107.… Pydantic Ai 1.107.1 / 2.5.0+ Fix from $1,6002026-07-29 MEDIUM 6.8 CVE-2026-54249 Pydantic AI is a Python agent framework for building Generative AI applications. In versions 1.65.0 through 1.105.0, and 2.0.0b1 through 2.0.0b5, a c… Pydantic Ai 1.105.0+ Fix from $1,6002026-07-29 MEDIUM 5.9 CVE-2026-46678 Pydantic AI is a Python agent framework for building Generative AI applications. In versions 1.56.0 through 1.98.0, when an application opts a URL in… Pydantic Ai 1.99.0+ Fix from $1,6002026-07-29 MEDIUM 6.5 CVE-2026-16728 undici's retry interceptor can deliver a response whose body length does not match the Content-Length header exposed to the application after a retry… Undici 6.28.0 / 7.29.0+ Fix from $1,6002026-07-29 MEDIUM 6.8 CVE-2026-13309 Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present … No fix yet Fix from $1,6002026-07-29 HIGH 8.1 CVE-2026-13308 Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execu… No fix yet Fix from $1,9502026-07-29 MEDIUM 6.8 CVE-2026-13307 Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present a… No fix yet Fix from $1,6002026-07-29 MEDIUM 6.4 CVE-2026-13305 Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution Vulnerability. This vulnera… No fix yet Fix from $1,6002026-07-29 CRITICAL 9.8 CVE-2025-65340 kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /betweendates-detailsreports.php. No fix yet Fix from $2,3002026-07-29 MEDIUM 6.1 CVE-2025-65337 Sourcecodester Fantastic Blog CMS 1.0 is vulnerable to Cross Site Scripting (XSS) in pageEditMember.php via the address field. No fix yet Fix from $1,6002026-07-29 MEDIUM 5.3 CVE-2026-6336 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.6 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under … GitLab 19.0.5 / 19.1.3+ Fix from $1,6002026-07-29 MEDIUM 5.3 CVE-2026-6267 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that unde… GitLab 19.0.5 / 19.1.3+ Fix from $1,6002026-07-29 HIGH 7.8 CVE-2026-6102 MSI Center NTIOLib_X64 Origin Validation Error Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privil… No fix yet Fix from $1,9502026-07-29 HIGH 8.3 CVE-2026-67436 Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring systems. In 6.0.0 and earlier, the redfi… Patch available Fix from $1,9502026-07-29 MEDIUM 6.0 CVE-2026-67435 linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations. Prior to version 6.0.0, lib.url.fetch() … Patch available Fix from $1,6002026-07-29 MEDIUM 5.8 CVE-2026-67433 Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring systems. In version 6.0.0, the logfile c… Patch available Fix from $1,6002026-07-29 HIGH 7.5 CVE-2026-67432 MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Transports::StreamableHTTPTranspo… Patch available Fix from $1,9502026-07-29 HIGH 8.3 CVE-2026-67431 MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Transports::StreamableHTTPTranspo… Patch available Fix from $1,9502026-07-29 MEDIUM 5.3 CVE-2026-67430 MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Transports::StreamableHTTPTranspo… Patch available Fix from $1,6002026-07-29 MEDIUM 6.2 CVE-2026-63119 MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Transports::StdioTransport and MC… Patch available Fix from $1,6002026-07-29 MEDIUM 6.9 CVE-2026-63118 MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Transports::StreamableHTTPTranspo… Patch available Fix from $1,6002026-07-29 MEDIUM 6.5 CVE-2026-5492 DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on a… No fix yet Fix from $1,6002026-07-29