cve.li

Recent

CVE-2026-2116CWE-89CWE-74

itsourcecode Society Management System edit_expenses.php sql injection

Published 2026-02-07 by VulDB

CVE-2026-2115CWE-89CWE-74

itsourcecode Society Management System delete_expenses.php sql injection

Published 2026-02-07 by VulDB

CVE-2026-2114CWE-89CWE-74

itsourcecode Society Management System edit_admin.php sql injection

Published 2026-02-07 by VulDB

CVE-2026-25859CWE-863

WeKan < 8.20 Migration Functionality Insufficient Permission Checks

Published 2026-02-07 by VulnCheck

CVE-2026-25568CWE-863

WeKan < 8.19 allowPrivateOnly Setting Enforcement Bypass

Published 2026-02-07 by VulnCheck

CVE-2026-25567CWE-639

WeKan < 8.19 Card Comment Author Spoofing via User-controlled authorId

Published 2026-02-07 by VulnCheck

CVE-2026-25566CWE-863

WeKan < 8.19 Cross-board Card Move Without Destination Authorization

Published 2026-02-07 by VulnCheck

CVE-2026-25565CWE-863

WeKan < 8.19 Read-only Board Roles Can Update Cards

Published 2026-02-07 by VulnCheck

CVE-2026-25564CWE-639

WeKan < 8.19 Checklist Deletion IDOR via Missing Relationship Validation

Published 2026-02-07 by VulnCheck

CVE-2026-25563CWE-639

WeKan < 8.19 Checklist Creation Cross-Board IDOR

Published 2026-02-07 by VulnCheck

CVE-2026-25562CWE-203

WeKan < 8.19 Attachments Publication Information Disclosure

Published 2026-02-07 by VulnCheck

CVE-2026-25561CWE-863

WeKan < 8.19 Attachment Upload Object Relationship Validation Bypass

Published 2026-02-07 by VulnCheck

CVE-2026-25560CWE-90

WeKan < 8.19 LDAP Authentication Filter Injection

Published 2026-02-07 by VulnCheck

CVE-2026-25858CWE-640

macrozheng mall <= 1.0.3 Unauthenticated Password Reset via OTP Disclosure

Published 2026-02-07 by VulnCheck

CVE-2026-25857CWE-78

Tenda G300-F Command Injection via formSetWanDiag

Published 2026-02-07 by VulnCheck

CVE-2025-15564CWE-369CWE-404

Mapnik value.cpp operator divide by zero

Published 2026-02-07 by VulDB

CVE-2026-2113CWE-502CWE-20

yuan1994 tpadmin WebUploader preview.php deserialization

Published 2026-02-07 by VulDB

CVE-2026-2111CWE-22

JeecgBoot Retrieval-Augmented Generation edit path traversal

Published 2026-02-07 by VulDB

CVE-2026-2110CWE-307CWE-799

Tasin1025 SwiftBuy login.php excessive authentication

Published 2026-02-07 by VulDB

CVE-2026-2109CWE-285CWE-266

jsbroks COCO Annotator Delete Category undo improper authorization

Published 2026-02-07 by VulDB

CVE-2026-2108CWE-404

jsbroks COCO Annotator Endpoint long_task denial of service

Published 2026-02-07 by VulDB

CVE-2026-2107CWE-285CWE-266

yeqifu warehouse Log Info LoginfoController.java batchDeleteLoginfo improper authorization

Published 2026-02-07 by VulDB

CVE-2026-2106CWE-285CWE-266

yeqifu warehouse Notice Management NoticeController.java batchDeleteNotice improper authorization

Published 2026-02-07 by VulDB

CVE-2026-2105CWE-285CWE-266

yeqifu warehouse Department Management DeptController.java deleteDept improper authorization

Published 2026-02-07 by VulDB

CVE-2026-2090CWE-89CWE-74

SourceCodester Online Class Record System search.php sql injection

Published 2026-02-07 by VulDB

CVE-2026-2089CWE-89CWE-74

SourceCodester Online Class Record System controller.php sql injection

Published 2026-02-07 by VulDB

CVE-2026-2088CWE-89CWE-74

PHPGurukul Beauty Parlour Management System accepted-appointment.php sql injection

Published 2026-02-07 by VulDB

CVE-2026-2087CWE-89CWE-74

SourceCodester Online Class Record System login.php sql injection

Published 2026-02-07 by VulDB

CVE-2026-2086CWE-120CWE-119

UTT HiPER 810G Management formFireWall strcpy buffer overflow

Published 2026-02-07 by VulDB

CVE-2026-2085CWE-77CWE-74

D-Link DWR-M921 USSD Configuration Endpoint formUSSDSetup sub_419F20 command injection

Published 2026-02-07 by VulDB

Load more ↓