Archive
7 September 2026
Vulnerabilities first published on this day (UTC), newest first.
126 results · Clear filters · Feed
-
Medium 6.3
ModelCloud GPTQModel Triton dequantization kernel tritonv2.py out-of-bounds
A vulnerability has been found in ModelCloud GPTQModel up to 7.2.0. This vulnerability affects unknown code of the file gptqmodel/nn_modules/qlinear/tritonv2.py of the component Triton dequantization kernel. Such manipulation of the argument g_idx leads to ou…
-
Medium 4.3
BookStack Attachment Edit Endpoint AttachmentController.php getUpdateForm access control
A vulnerability was detected in BookStack up to 26.05.2. Affected by this issue is the function AttachmentController::getUpdateForm of the file app/Uploads/Controllers/AttachmentController.php of the component Attachment Edit Endpoint. The manipulation of the…
-
Medium 6.8
QSPI flash encryption side-channel leakage
Any application that uses external QSPI flash for encrypted XIP on nRF5340 and relies on that encryption for confidentiality and/or integrity of the externally stored code. No specific nRF Connect SDK version is the root cause; the weakness is in the on-the-f…
-
Medium 5.3
jaychouchannel Tourism-Management-System CommonController.java getOption information disclosure
A security vulnerability has been detected in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected by this vulnerability is the function getOption of the file travel/src/main/java/com/controller/CommonController.ja…
-
Medium 5.6
The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted …
-
Medium 4.3
SourceCodester Syllabus-Aligned Learning Management & Examination System cross-site request forgery
A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This impacts an unknown function. Performing a manipulation results in cross-site request forgery. The attack can be initiated remotely. The e…
-
Medium 5.9
An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows loca…
-
Medium 5.6
The Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to bypass the trus…
-
Medium 5.3
SourceCodester Syllabus-Aligned Learning Management & Examination System cict_portal.sql cleartext storage
A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This affects an unknown function of the file cict_portal.sql. Such manipulation leads to cleartext storage of sensitive information. It is possible…
-
Medium 6.3
SourceCodester Syllabus-Aligned Learning Management & Examination System Login auth_process.php session fixiation
A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The impacted element is an unknown function of the file auth_process.php of the component Login. This manipulation causes session fixiation. It is …
-
Medium 4.3
SourceCodester Syllabus-Aligned Learning Management & Examination System manage_subjects.php cross site scripting
A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The affected element is an unknown function of the file manage_subjects.php. The manipulation of the argument msg/title/content results in cross site sc…
-
Medium 5.3
SourceCodester Syllabus-Aligned Learning Management & Examination System auth.php register privileges management
A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This vulnerability affects the function register of the file auth.php. Performing a manipulation of the argument role results in improper privilege m…
-
Medium 5.3
projeto-siga Authentication Flow ExAutenticacaoController.java ExAutenticacaoController.autenticar authorization
A security vulnerability has been detected in projeto-siga siga up to 11.0.2.10/11.0.2.13/11.1.1. This affects the function ExAutenticacaoController.autenticar of the file sigaex/src/main/java/br/gov/jfrj/siga/vraptor/ExAutenticacaoController.java of the comp…
-
Medium 4.7
FluentCMS PermissionManager.cs GetAccessible authorization
A vulnerability was found in FluentCMS up to 0.0.5. This affects the function GetAccessible of the file src/Backend/FluentCMS.Services/Permissions/PermissionManager.cs. Performing a manipulation results in missing authorization. It is possible to initiate the…
-
Medium 6.3
itsourcecode Sales and Inventory System settings_edit.php sql injection
A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/settings_edit.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remo…
-
Medium 6.2
An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who…
-
Medium 6.3
itsourcecode Sales and Inventory System emp_edit1.php sql injection
A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/emp_edit1.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. T…
-
Medium 6.3
itsourcecode Information System Society Membership System check_student.php sql injection
A security vulnerability has been detected in itsourcecode Information System Society Membership System 1.0. This issue affects some unknown processing of the file /society/check_student.php. The manipulation of the argument student_id leads to sql injection.…
-
Medium 6.3
itsourcecode Sales and Inventory System us_transac.php sql injection
A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/us_transac.php. Such manipulation of the argument Username leads to sql injection. It is possible to l…
-
Medium 4.3
sfturing ssm_pro Order Endpoint OrderController.java cross site scripting
A flaw has been found in sfturing ssm_pro up to 627f426331da8086ce8fff2017d65b1ddef384f8. Affected is an unknown function of the file ssm_pro/src/main/java/cn/sfturing/web/OrderController.java of the component Order Endpoint. This manipulation of the argument…
-
Medium 6.2
Integer overflow in the source-bounds check in Memory::init() (src/runtime/Memory.cpp) in Samsung walrus on all platfor…
-
Medium 6.5
sfturing hosp_order Password Recovery CommonUserController.java modifyPassWord unverified password change
A security flaw has been discovered in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. The affected element is the function modifyPassWord of the file ssm_pro/src/main/java/cn/sfturing/web/CommonUserController.java of the component Passwor…
-
Medium 4.2
In geniezone, there is a possible information disclosure due to a missing bounds check. This could lead to local inform…
-
Medium 6.7
In geniezone, there is a possible escalation of privilege due to use after free. This could lead to local escalation of…
-
Medium 5.0
In gpu, there is a possible system crash due to use after free. This could lead to local information disclosure with Us…
-
Medium 4.4
In Audio HAL, there is a possible information disclosure due to a missing permission check. This could lead to local in…
-
Medium 4.4
In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local inf…
-
Medium 6.7
In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local es…
-
Medium 6.7
In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to local escalation of …
-
Medium 6.7
In camera middleware, there is a possible escalation of privilege due to double free. This could lead to local escalati…
-
Medium 6.7
In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio…
-
Medium 6.7
In Power HAL, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of…
-
Medium 6.7
In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of…
-
Medium 6.7
In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of…
-
Medium 5.5CVE-2026-20516 Public exploit
In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local deni…
-
Medium 5.3
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, …
-
Medium 5.3
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, …
-
Medium 5.0
In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service…
-
Medium 6.3
itsourcecode Sales and Inventory System sup_transac.php sql injection
A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/sup_transac.php. Performing a manipulation of the argument companyname results in sql injection. It is p…
-
Medium 4.3
FastAdmin User Controller User.php login cross site scripting
A security vulnerability has been detected in FastAdmin up to 1.2.0.20210401_beta. Affected is the function register/login of the file application/index/controller/User.php of the component User Controller. Such manipulation of the argument url leads to cross…