Skip to content
OpenAdvisories

Archive

9 February 2026

Vulnerabilities first published on this day (UTC), newest first.

← January 2026 2026 / February /9 March 2026 →
  1. 134
  2. 2158
  3. 3337
  4. 4253
  5. 5119
  6. 6204
  7. 762
  8. 875
  9. 9166
  10. 10282
  11. 11325
  12. 12128
  13. 1368
  14. 14163
  15. 1531
  16. 1688
  17. 17103
  18. 18239
  19. 19397
  20. 20380
  21. 2165
  22. 2259
  23. 2397
  24. 24225
  25. 25239
  26. 26174
  27. 27185
  28. 2818
All Critical High Medium Low Exploited only Public exploit

166 results · Feed

  • Low 2.4
    CVE-2026-2200

    heyewei JFinalCMS API Endpoint save cross site scripting

    A weakness has been identified in heyewei JFinalCMS 5.0.0. This affects an unknown function of the file /admin/admin/save of the component API Endpoint. Executing a manipulation can lead to cross site scripting. The attack can be launched remotely. The exploi…

    heyewei JFinalCMS
  • High 7.3
    CVE-2026-2199

    code-projects Online Reviewer System user-delete.php sql injection

    A security flaw has been discovered in code-projects Online Reviewer System 1.0. The impacted element is an unknown function of the file /reviewer/system/system/admins/manage/users/user-delete.php. Performing a manipulation of the argument ID results in sql i…

    code-projects Online Reviewer System
  • High 7.3
    CVE-2026-2198

    code-projects Online Reviewer System loaddata.php sql injection

    A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /system/system/admins/assessments/pretest/loaddata.php. Such manipulation of the argument difficulty_id leads to sql injection.…

    code-projects Online Reviewer System
  • High 7.3
    CVE-2026-2197

    code-projects Online Reviewer System exam-delete.php sql injection

    A vulnerability was determined in code-projects Online Reviewer System 1.0. Impacted is an unknown function of the file /system/system/admins/assessments/pretest/exam-delete.php. This manipulation of the argument test_id causes sql injection. It is possible t…

    code-projects Online Reviewer System
  • High 7.3
    CVE-2026-2196

    code-projects Online Reviewer System exam-update.php sql injection

    A vulnerability was found in code-projects Online Reviewer System 1.0. This issue affects some unknown processing of the file /system/system/admins/assessments/pretest/exam-update.php. The manipulation of the argument test_id results in sql injection. The att…

    code-projects Online Reviewer System
  • Medium 4.8
    CVE-2025-63354

    Hitron HI3120 v7.2.4.5.2b1 allows stored XSS via the Parental Control option when creating a new filter. The device fai…