cve.li

Recent

CVE-2026-82616CWE-121CWE-119

TOTOLINK NR1800X cstecgi.cgi setUploadSetting stack-based overflow

Published 2026-08-31 by VulDB

CVE-2026-82615CWE-89CWE-74

itsourcecode Online Medicine Delivery System Password Recovery passwordrecover.php find_phone sql injection

Published 2026-08-31 by VulDB

CVE-2026-82614CWE-89CWE-74

itsourcecode Online Medicine Delivery System Product Category Filter index.php loadResultList sql injection

Published 2026-08-31 by VulDB

CVE-2026-82613CWE-89CWE-74

itsourcecode Online Medicine Delivery System Product Search index.php loadResultList sql injection

Published 2026-08-31 by VulDB

CVE-2026-82612CWE-89CWE-74

itsourcecode Online Medicine Delivery System Product Detail index.php loadResultList sql injection

Published 2026-08-31 by VulDB

CVE-2026-82611CWE-89CWE-74

itsourcecode Online Medicine Delivery System Customer Login login.php cusAuthentication sql injection

Published 2026-08-31 by VulDB

CVE-2026-82610CWE-89CWE-74

itsourcecode Online Medicine Delivery System Login login.php employeeAuthentication sql injection

Published 2026-08-31 by VulDB

CVE-2026-82725CWE-639

AshPhoenix FilterForm allows filtering across non-public relationships, disclosing private related data

Published 2026-08-31 by EEF

CVE-2026-82724CWE-863

Broken access control in AshPhoenix SubdomainHook via a nil tenant in handle_subdomain

Published 2026-08-31 by EEF

CVE-2026-82726CWE-625CWE-178

AshPhoenix get_subdomain maps a crafted or differently-cased Host header to an arbitrary tenant

Published 2026-08-31 by EEF

Load more ↓