Publikacje w kolejności czasu
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Simple Inventory System | CVE-2025-13280 Wstrzyknięcie SQL w CodeAstro Simple Inventory System umożliwia zdalne ataki. |
9,8 | 0,42 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Nero Social Networking Site | CVE-2025-13277 Wstrzyknięcie SQL w Nero Social Networking Site umożliwia zdalne wykonanie ataku. |
9,8 | 0,48 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| School Fees Payment Management System | CVE-2025-13272 Wstrzyknięcie SQL w Campcodes School Fees Payment Management System umożliwia zdalne ataki. |
9,8 | 0,42 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| School Fees Payment Management System | CVE-2025-13271 Wstrzyknięcie SQL w Campcodes School Fees Payment Management System umożliwia zdalne wykonanie ataku. |
9,8 | 0,42 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Dental Clinic Appointment Reservation System | CVE-2025-13267 Wstrzyknięcie SQL w SourceCodester Dental Clinic umożliwia zdalne przejęcie danych. |
9,8 | 0,4 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| platform | CVE-2025-13265 Wykorzystanie podatności w lsfusion umożliwia zdalne przejście przez ścieżki plików. |
9,1 | 0,62 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| platform | CVE-2025-13262 Wykorzystanie podatności w platformie lsfusion umożliwia zdalne przejście do nieautoryzowanych ścieżek. |
9,8 | 0,64 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Inventory Management System | CVE-2025-13257 Wstrzyknięcie SQL w itsourcecode Inventory Management System umożliwia zdalne ataki. |
9,8 | 0,42 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Patients Waiting Area Queue Management System | CVE-2025-13248 A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is an unknown function of the file /php/api_patient_schedule.php. This manipulation of the argument appointmentID causes sql injection. The attack can be initiated remotely. The… |
9,8 | 0,42 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Tourism Management System | CVE-2025-13247 Wstrzyknięcie SQL w PHPGurukul Tourism Management System umożliwia zdalne ataki. |
9,8 | 0,42 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Student Information System | CVE-2025-13242 A vulnerability has been found in code-projects Student Information System 2.0. This issue affects some unknown processing of the file /register.php. The manipulation leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be… |
9,8 | 0,47 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Student Information System | CVE-2025-13241 A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Executing manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used. |
9,8 | 0,47 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Student Information System | CVE-2025-13240 A vulnerability was detected in code-projects Student Information System 2.0. This affects an unknown part of the file /searchquery.php. Performing manipulation of the argument s results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. |
9,8 | 0,47 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Inventory Management System | CVE-2025-13237 A security flaw has been discovered in itsourcecode Inventory Management System 1.0. Affected is an unknown function of the file /LogSignModal.PHP. The manipulation of the argument U_USERNAME results in sql injection. The attack can be launched remotely. The exploit has been released to the public… |
9,8 | 0,42 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Inventory Management System | CVE-2025-13236 A vulnerability was identified in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the file /admin/products/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and… |
9,8 | 0,35 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Inventory Management System | CVE-2025-13235 A vulnerability was determined in itsourcecode Inventory Management System 1.0. This affects an unknown function of the file /admin/login.php. Executing manipulation of the argument user_email can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly… |
9,8 | 0,42 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Inventory Management System | CVE-2025-13234 A vulnerability was found in itsourcecode Inventory Management System 1.0. The impacted element is an unknown function of the file /index.php?q=product. Performing manipulation of the argument PROID results in sql injection. It is possible to initiate the attack remotely. The exploit has been made… |
9,8 | 0,35 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Inventory Management System | CVE-2025-13233 A vulnerability has been found in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /index.php?q=single-item. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to… |
9,8 | 0,42 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Inventory Management System | CVE-2025-13210 Wstrzyknięcie SQL w itsourcecode Inventory Management System umożliwia zdalne wykonanie ataku. |
9,8 | 0,38 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Simple Cafe Ordering System | CVE-2025-13203 Wstrzyknięcie SQL w Simple Cafe Ordering System umożliwia zdalne ataki. |
9,8 | 0,42 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| FortiWeb | Fortinet FortiWeb Path Traversal Vulnerability Fortinet FortiWeb contains a relative path traversal vulnerability that may allow an unauthenticated attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests. |
9,8 | 91,08 % | Tak | |
| Windows 10 Version 1809 / Windows 10 Version 21H2 / Windows 10 Version 22H2 (+10 produktów) | Microsoft Windows Race Condition Vulnerability Microsoft Windows Kernel contains a race condition vulnerability that allows a local attacker with low-level privileges to escalate privileges. Successful exploitation of this vulnerability could enable the attacker to gain SYSTEM-level access. |
7,0 | 4,46 % | Tak | |
| Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows Server 2025 (+1 produktów) | Microsoft Windows Link Following Vulnerability Nieprawidłowe rozwiązywanie linków w Host Process for Windows Tasks pozwala na lokalną eskalację uprawnień. |
7,8 | 4,61 % | Tak | |
| TrioFox | Gladinet Triofox Improper Access Control Vulnerability Gladinet Triofox contains an improper access control vulnerability that allows access to initial setup pages even after setup is complete. |
9,1 | 95,75 % | Tak | |
| filestore | Sangoma FreePBX OS Command Injection Vulnerability Wstrzyknięcie poleceń w FreePBX Endpoint Manager umożliwia zdalny dostęp do systemu. |
7,2 | 84,62 % | Tak |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 11:02 UTC – 15.11.2026, 16:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.