Publikacje w kolejności czasu
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Produkt nieustalony | CVE-2025-57529 YouDataSum CPAS Audit Management System <=v4.9 is vulnerable to SQL Injection in /cpasList/findArchiveReportByDah due to insufficient input validation. This allows remote unauthenticated attackers to execute arbitrary SQL commands via crafted input to the parameter. Successful exploitation could… |
9,8 | 0,65 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| 60CycleCMS | CVE-2020-37110 60CycleCMS 2.5.2 contains an SQL injection vulnerability in news.php and common/lib.php that allows attackers to manipulate database queries through unvalidated user input. Attackers can exploit vulnerable query parameters like 'title' to inject malicious SQL code and potentially extract or modify… |
9,8 | 0,42 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| notepad-plus-plus | Notepad++ Download of Code Without Integrity Check Vulnerability Notepad++ when using the WinGUp updater, contains a download of code without integrity check vulnerability that could allow an attacker to intercept or redirect update traffic to download and execute an attacker-controlled installer. This could lead to arbitrary code execution with the privileges… |
7,5 | 1,75 % | Tak | |
| SandboxJS | CVE-2026-25142 Nieprawidłowe ograniczenie __lookupGetter__ w SandboxJS umożliwia zdalne wykonanie kodu. |
10,0 | 1,21 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| facturascripts | CVE-2026-23997 FacturaScripts is open-source enterprise resource planning and accounting software. In 2025.71 and earlier, a Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Observations field. The flaw occurs in the History view, where historical data is rendered without proper HTML entity… |
9,0 | 0,43 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Online-Exam-System | CVE-2020-37057 Online-Exam-System 2015 contains a SQL injection vulnerability in the feedback module that allows attackers to manipulate database queries through the 'fid' parameter. Attackers can inject malicious SQL code into the 'fid' parameter to potentially extract, modify, or delete database information. |
9,8 | 0,56 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| School Management System | CVE-2026-1701 A security vulnerability has been detected in itsourcecode School Management System 1.0. This issue affects some unknown processing of the file /enrollment/index.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been… |
9,8 | 0,48 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Directory Management System | CVE-2026-1688 A security vulnerability has been detected in itsourcecode Directory Management System 1.0. The affected element is an unknown function of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been… |
9,8 | 0,39 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Endpoint Manager Mobile | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve unauthenticated remote code execution. |
9,8 | 98,69 % | Tak | |
| Endpoint Manager Mobile | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Wstrzyknięcie kodu w Ivanti Endpoint Manager Mobile umożliwia zdalne wykonanie kodu bez uwierzytelnienia. |
9,8 | 98,64 % | Tak | |
| Produkt nieustalony | CVE-2025-69929 An issue in N3uron Web User Interface v.1.21.7-240207.1047 allows a remote attacker to escalate privileges via the password hashing on the client side using the MD5 algorithm over a predictable string format |
9,8 | 0,45 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| kata-containers | CVE-2026-24054 Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. In versions prior to 3.26.0, when a container image is malformed or contains no layers, containerd falls back to bind-mounting an empty snapshotter… |
10,0 | 0,51 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Society Management System | CVE-2026-1595 A vulnerability was detected in itsourcecode Society Management System 1.0. This affects an unknown part of the file /admin/edit_student_query.php. The manipulation of the argument student_id results in sql injection. The attack can be executed remotely. The exploit is now public and may be used. |
9,8 | 0,39 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| School Management System | CVE-2026-1589 A vulnerability was determined in itsourcecode School Management System 1.0. This affects an unknown function of the file /ramonsys/inquiry/index.php. This manipulation of the argument txtsearch causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and… |
9,8 | 0,44 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| School Management System | CVE-2026-1590 A vulnerability was identified in itsourcecode School Management System 1.0. This impacts an unknown function of the file /ramonsys/faculty/index.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be… |
9,8 | 0,44 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Society Management System | CVE-2026-1593 A weakness has been identified in itsourcecode Society Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/edit_expenses_query.php. Executing a manipulation of the argument detail can lead to sql injection. The attack may be launched remotely. The… |
9,8 | 0,52 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Society Management System | CVE-2026-1594 A security vulnerability has been detected in itsourcecode Society Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/add_expenses.php. The manipulation of the argument detail leads to sql injection. Remote exploitation of the attack is possible. The… |
9,8 | 0,52 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| SEMCMS | CVE-2026-1552 A security vulnerability has been detected in SEMCMS 5.0. This vulnerability affects unknown code of the file /SEMCMS_Info.php. The manipulation of the argument searchml leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be… |
9,8 | 0,37 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| bulk_extractor | CVE-2026-24857 Przepełnienie bufora w bulk_extractor umożliwia zdalne wykonanie kodu. |
9,8 | 0,44 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| maker.js | CVE-2026-24888 Brak walidacji w funkcji `makerjs.extendObject` pozwala na kopiowanie niebezpiecznych właściwości. |
9,8 | 1 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| School Management System | CVE-2026-1545 A weakness has been identified in itsourcecode School Management System 1.0. The affected element is an unknown function of the file /course/index.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been made… |
9,8 | 0,43 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| jshERP | CVE-2026-1546 A security vulnerability has been detected in jishenghua jshERP up to 3.6. The impacted element is the function getBillItemByParam of the file /jshERP-boot/depotItem/importItemExcel of the component com.jsh.erp.datasource.mappers.DepotItemMapperEx. The manipulation of the argument barCodes leads… |
9,8 | 0,37 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| A7000R | CVE-2026-1547 A vulnerability was detected in Totolink A7000R 4.1cu.4154. This affects the function setUnloadUserData of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument plugin_name results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be… |
9,8 | 3,03 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| nocodb | CVE-2026-24769 W NocoDB występuje podatność XSS, umożliwiająca atakującym kompromitację kont użytkowników. |
9,0 | 0,43 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Online Music Site | CVE-2026-1534 A weakness has been identified in code-projects Online Music Site 1.0. This affects an unknown function of the file /Administrator/PHP/AdminEditUser.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available… |
9,8 | 0,46 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 07:02 UTC – 15.11.2026, 12:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.