KATALOG PODATNOŚCI
Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
A flaw has been found in code-projects Online Product Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /handgunner-administrator/prod.php. Executing a manipulation can lead to unrestricted upload. It is possible…
A vulnerability was detected in code-projects Online Product Reservation System 1.0. Affected is an unknown function of the file /handgunner-administrator/prod.php of the component Parameter Handler. Performing a manipulation of the argument…
A security vulnerability has been detected in code-projects Online Product Reservation System 1.0. This impacts an unknown function of the file /handgunner-administrator/adminlogin.php of the component Administrator Login. Such manipulation of the argument…
Nieprawidłowa kontrola dostępu w Petlibro Smart Pet Feeder umożliwia nieautoryzowaną manipulację urządzeniem.
Luka ujawnienia informacji w Petlibro Smart Pet Feeder pozwala na dostęp do danych sprzętowych bez autoryzacji.
Obejście uwierzytelnienia w Petlibro Smart Pet Feeder umożliwia dostęp do kont użytkowników bez hasła.
Luka w Nuvation Energy nCloud VPN Service umożliwia mostkowanie granic sieci.
Obejście uwierzytelnienia w Nuvation Battery Management System umożliwia nieautoryzowany dostęp.
Obejście uwierzytelnienia w Nuvation Energy Multi-Stack Controller umożliwia dostęp bez hasła.
Niezamierzona podatność pośrednika w Nuvation Energy MSC umożliwia naruszenie granic sieci.
Bagisto is an open source laravel eCommerce platform. Versions prior to 2.3.10 are vulnerable to server-side template injection via type parameter, which can lead to remote code execution or another exploitation. Version 2.3.10 fixes the issue.
Bagisto is an open source laravel eCommerce platform. Versions prior to 2.3.10 are vulnerable to server-side template injection. When a normal customer orders any product, in the `add address` step they can inject a value to run in admin view. The issue can…
Bagisto is an open source laravel eCommerce platform. In versions on the 2.3 branch prior to 2.3.10, API routes remain active even after initial installation is complete. The underlying API endpoints (`/install/api/*`) are directly accessible and exploitable…
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0.dev45, multiple critical API endpoints in Langflow are missing authentication controls. The issue allows any unauthenticated user to access sensitive user…
AdonisJS is a TypeScript-first web framework. A Path Traversal vulnerability in AdonisJS multipart file handling may allow a remote attacker to write arbitrary files to arbitrary locations on the server filesystem. This impacts @adonisjs/bodyparser through…
A vulnerability has been found in code-projects Online Music Site 1.0. This affects an unknown function of the file /Frontend/AlbumByCategory.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The…
A vulnerability was found in code-projects Online Music Site 1.0. This impacts an unknown function of the file /Frontend/Feedback.php. Performing a manipulation of the argument fname results in sql injection. The attack can be initiated remotely. The exploit…
Emlog is an open source website building system. In version 2.5.23, article creation functionality is vulnerable to cross-site request forgery (CSRF). This can lead to a user being forced to post an article with arbitrary, attacker-controlled content. This,…
A vulnerability was detected in code-projects Content Management System 1.0. The affected element is an unknown function of the file /pages.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The…
A flaw has been found in code-projects Online Music Site 1.0. The impacted element is an unknown function of the file /Frontend/ViewSongs.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The…
A security vulnerability has been detected in code-projects Content Management System 1.0. Impacted is an unknown function of the file /admin/edit_posts.php. The manipulation of the argument image leads to unrestricted upload. The attack is possible to be…
An SQL injection vulnerability has been reported to affect Hyper Data Protector. The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: Hyper Data…
An improper control of generation of code vulnerability has been reported to affect Malware Remover. The remote attackers can then exploit the vulnerability to bypass protection mechanism. We have already fixed the vulnerability in the following…
SQL injection in gosaliajainam/online-movie-booking 5.5 in movie_details.php allows attackers to gain sensitive information.
A weakness has been identified in code-projects Content Management System 1.0. This issue affects some unknown processing of the file /admin/delete.php. Executing a manipulation of the argument del can lead to sql injection. The attack can be executed…
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2026-0577 A flaw has been found in code-projects Online Product Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /handgunner-administrator/prod.php.… |
Krytyczne sygnałyPubliczny PoC |
CVSS 9,8EPSS 0,36 % | ||
| CVE-2026-0576 A vulnerability was detected in code-projects Online Product Reservation System 1.0. Affected is an unknown function of the file /handgunner-administrator/prod.php of the component… |
Krytyczne sygnałyPubliczny PoC |
CVSS 9,8EPSS 0,43 % | ||
| CVE-2026-0575 A security vulnerability has been detected in code-projects Online Product Reservation System 1.0. This impacts an unknown function of the file /handgunner-administrator/adminlogin.php of… |
Krytyczne sygnałyPubliczny PoC |
CVSS 9,8EPSS 0,43 % | ||
| CVE-2025-3653 Nieprawidłowa kontrola dostępu w Petlibro Smart Pet Feeder umożliwia nieautoryzowaną manipulację urządzeniem. |
Wysoki priorytet |
CVSS 9,8EPSS 0,25 % | ||
| CVE-2025-3654 Luka ujawnienia informacji w Petlibro Smart Pet Feeder pozwala na dostęp do danych sprzętowych bez autoryzacji. |
Wysoki priorytet |
CVSS 9,8EPSS 0,28 % | ||
| CVE-2025-15115 Obejście uwierzytelnienia w Petlibro Smart Pet Feeder umożliwia dostęp do kont użytkowników bez hasła. |
Wysoki priorytet |
CVSS 9,8EPSS 0,3 % | ||
| CVE-2025-64125 Luka w Nuvation Energy nCloud VPN Service umożliwia mostkowanie granic sieci. |
Wysoki priorytet |
CVSS 9,4EPSS 0,26 % | ||
| CVE-2025-64119 Obejście uwierzytelnienia w Nuvation Battery Management System umożliwia nieautoryzowany dostęp. |
Wysoki priorytet |
CVSS 9,3EPSS 0,46 % | ||
| CVE-2025-64121 Obejście uwierzytelnienia w Nuvation Energy Multi-Stack Controller umożliwia dostęp bez hasła. |
Wysoki priorytet |
CVSS 9,8EPSS 0,4 % | ||
| CVE-2025-64123 Niezamierzona podatność pośrednika w Nuvation Energy MSC umożliwia naruszenie granic sieci. |
Wysoki priorytet |
CVSS 9,8EPSS 0,32 % | ||
| CVE-2026-21450 Bagisto is an open source laravel eCommerce platform. Versions prior to 2.3.10 are vulnerable to server-side template injection via type parameter, which can lead to remote code execution… |
Wysoki priorytet |
CVSS 9,8EPSS 1,36 % | ||
| CVE-2026-21448 Bagisto is an open source laravel eCommerce platform. Versions prior to 2.3.10 are vulnerable to server-side template injection. When a normal customer orders any product, in the `add… |
Krytyczne sygnałyPubliczny PoC |
CVSS 9,8EPSS 0,92 % | ||
| CVE-2026-21446 Bagisto is an open source laravel eCommerce platform. In versions on the 2.3 branch prior to 2.3.10, API routes remain active even after initial installation is complete. The underlying… |
Krytyczne sygnałyPubliczny PoC |
CVSS 9,8EPSS 0,63 % | ||
| CVE-2026-21445 Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0.dev45, multiple critical API endpoints in Langflow are missing authentication… |
Krytyczne sygnałyPubliczny PoC |
CVSS 9,1EPSS 33,29 % | ||
| CVE-2026-21440 AdonisJS is a TypeScript-first web framework. A Path Traversal vulnerability in AdonisJS multipart file handling may allow a remote attacker to write arbitrary files to arbitrary locations… |
Wysoki priorytet |
CVSS 9,2EPSS 1,03 % | ||
| CVE-2026-0569 A vulnerability has been found in code-projects Online Music Site 1.0. This affects an unknown function of the file /Frontend/AlbumByCategory.php. Such manipulation of the argument ID… |
Krytyczne sygnałyPubliczny PoC |
CVSS 9,8EPSS 0,39 % | ||
| CVE-2026-0570 A vulnerability was found in code-projects Online Music Site 1.0. This impacts an unknown function of the file /Frontend/Feedback.php. Performing a manipulation of the argument fname… |
Krytyczne sygnałyPubliczny PoC |
CVSS 9,8EPSS 0,43 % | ||
| CVE-2026-21430 Emlog is an open source website building system. In version 2.5.23, article creation functionality is vulnerable to cross-site request forgery (CSRF). This can lead to a user being forced… |
Krytyczne sygnałyPubliczny PoC |
CVSS 9,3EPSS 0,19 % | ||
| CVE-2026-0567 A vulnerability was detected in code-projects Content Management System 1.0. The affected element is an unknown function of the file /pages.php. The manipulation of the argument ID results… |
Krytyczne sygnałyPubliczny PoC |
CVSS 9,8EPSS 0,39 % | ||
| CVE-2026-0568 A flaw has been found in code-projects Online Music Site 1.0. The impacted element is an unknown function of the file /Frontend/ViewSongs.php. This manipulation of the argument ID causes… |
Krytyczne sygnałyPubliczny PoC |
CVSS 9,8EPSS 0,39 % | ||
| CVE-2026-0566 A security vulnerability has been detected in code-projects Content Management System 1.0. Impacted is an unknown function of the file /admin/edit_posts.php. The manipulation of the… |
Krytyczne sygnałyPubliczny PoC |
CVSS 9,8EPSS 0,36 % | ||
| CVE-2025-59389 An SQL injection vulnerability has been reported to affect Hyper Data Protector. The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have… |
Wysoki priorytet |
CVSS 9,8EPSS 0,69 % | ||
| CVE-2025-11837 An improper control of generation of code vulnerability has been reported to affect Malware Remover. The remote attackers can then exploit the vulnerability to bypass protection… |
Wysoki priorytet |
CVSS 9,8EPSS 1,52 % | ||
| CVE-2025-65125 SQL injection in gosaliajainam/online-movie-booking 5.5 in movie_details.php allows attackers to gain sensitive information. |
Krytyczne sygnałyPubliczny PoC |
CVSS 9,8EPSS 0,38 % | ||
| CVE-2026-0565 A weakness has been identified in code-projects Content Management System 1.0. This issue affects some unknown processing of the file /admin/delete.php. Executing a manipulation of the… |
Krytyczne sygnałyPubliczny PoC |
CVSS 9,8EPSS 0,39 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 11.11.2026, 15:32 UTC – 11.11.2026, 17:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.